Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QWQdsxsA615Wy3na90BqhhmfS-E.roa
File: QWQdsxsA615Wy3na90BqhhmfS-E.roa (raw, json)
Hash identifier: qPnKBQ+qxkpdmbVpxivWnvhAZ/YSLODgEw/Ri5VbVjQ=
Subject key identifier: 41:64:1D:B3:1B:00:EB:5E:56:CB:79:DA:F7:40:6A:86:19:9F:4B:E1
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C09D826E8BC9CF66062B35655C1C71E1D
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QWQdsxsA615Wy3na90BqhhmfS-E.roa
Signing time: Sun 26 Nov 2023 04:16:49 +0000
ROA not before: Sun 26 Nov 2023 04:16:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:09:d8:26:e8:bc:9c:f6:60:62:b3:56:55:c1:c7:1e:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 26 04:16:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=41641db31b00eb5e56cb79daf7406a86199f4be1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:8f:58:2d:3a:5f:59:e9:2c:b4:53:00:51:f6:
d0:70:49:a3:c6:ac:ad:09:93:22:6f:2c:71:9e:41:
3b:12:b7:76:9a:0c:46:0d:34:53:a4:34:96:77:71:
b5:02:41:0d:a9:8b:23:a5:2d:81:44:b3:d7:ef:91:
ec:1c:2a:94:ec:bd:b3:87:a7:d2:23:9c:08:a5:6a:
c1:1a:77:13:9d:7c:ca:3a:b6:1b:00:77:3e:33:bd:
a0:6b:5a:18:a0:c9:3b:78:f6:83:f1:24:74:bb:11:
b2:c8:02:c0:e8:a8:14:23:a6:12:2f:7a:fb:02:62:
12:5c:69:40:b3:ae:8a:bb:e3:40:2e:02:b0:c4:f5:
b1:09:58:5c:d7:d6:75:a7:dd:3d:d7:37:ad:86:ef:
8b:17:ad:46:b9:e4:b6:ec:64:ae:be:d8:b3:85:d9:
f6:24:47:9a:57:65:b8:29:b5:77:c1:85:2a:01:2f:
fe:ed:14:23:3b:6c:d4:8e:1e:0f:a6:85:95:a5:39:
44:52:02:9b:d3:74:1c:25:d8:d8:12:e8:03:9c:6e:
09:0e:6c:eb:01:04:e4:68:4b:97:28:ae:72:1d:e7:
06:f8:bb:ad:49:e1:d9:96:63:d3:c6:cb:82:dc:39:
a3:85:bf:40:85:19:ee:40:a4:3f:9d:43:1e:7e:1e:
11:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:64:1D:B3:1B:00:EB:5E:56:CB:79:DA:F7:40:6A:86:19:9F:4B:E1
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QWQdsxsA615Wy3na90BqhhmfS-E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
93:9f:d5:a3:bf:17:ab:27:3f:47:15:95:bb:10:bb:eb:80:ac:
32:61:5c:f5:ca:37:31:df:04:d4:f6:e8:bd:96:ad:5b:97:84:
2a:b4:20:8c:e2:4a:a6:bb:c9:7d:4c:77:22:0e:16:d6:9f:b9:
46:92:9f:ee:dd:8c:5c:cc:23:05:e2:f8:90:9d:4f:d2:d8:ad:
52:b5:69:c5:ec:19:f0:5c:32:a6:d5:1a:f6:4f:f0:9b:e1:7e:
f7:27:5e:80:fb:d1:f3:b8:5e:a5:83:08:47:eb:11:91:63:f9:
87:54:3a:e5:84:31:00:11:11:85:fe:d9:cc:d4:72:f6:9b:c4:
1e:be:aa:4b:29:f9:6c:69:1f:63:5c:2c:af:b5:e5:92:a7:70:
07:d0:07:70:de:6c:5c:86:ba:67:c6:a7:cd:6d:0f:c9:89:5a:
01:02:03:69:04:9c:04:3a:00:3a:d6:06:d3:5f:12:7c:8f:7a:
92:0c:0d:2c:13:2d:dc:70:cd:63:24:8b:45:1c:8d:0f:99:27:
2e:c2:0b:24:bd:4a:f5:43:5f:1a:85:74:32:c7:0e:72:e5:ec:
23:c6:77:1b:39:ed:80:c3:c1:09:94:84:27:1d:39:1c:45:3f:
33:b7:77:28:3d:09:61:9a:44:60:cd:f1:78:74:d8:50:c3:b7:
0c:dd:1d:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 12:50:28 2025 by rpki-client