Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QasBYLo9xmgYcLqW6lstW_InsGk.roa
File: QasBYLo9xmgYcLqW6lstW_InsGk.roa (raw, json)
Hash identifier: r9xNFcGGymWfHSDYL2RYj666i+rb30zpog1anEQKNZo=
Subject key identifier: 41:AB:01:60:BA:3D:C6:68:18:70:BA:96:EA:5B:2D:5B:F2:27:B0:69
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B1724E58093DBF7ABF9993EBE856BB5DA
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QasBYLo9xmgYcLqW6lstW_InsGk.roa
Signing time: Tue 10 Oct 2023 01:12:55 +0000
ROA not before: Tue 10 Oct 2023 01:12:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:17:24:e5:80:93:db:f7:ab:f9:99:3e:be:85:6b:b5:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 10 01:12:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=41ab0160ba3dc6681870ba96ea5b2d5bf227b069
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:3d:12:19:af:cb:79:77:81:a7:26:85:e0:74:
27:38:36:c1:dd:20:ae:ea:18:e2:73:4a:39:66:54:
d2:24:ca:79:25:c9:49:c0:c7:d0:f6:7d:c7:c0:84:
25:41:06:e5:1b:da:4d:55:eb:26:84:68:99:16:23:
5e:5c:ee:c8:f8:9f:27:99:28:8e:80:e3:86:32:96:
db:e5:10:ec:0b:4e:e0:5e:bd:45:fb:60:e3:d1:b2:
80:6b:4f:23:35:a9:1d:64:7e:bc:6f:56:a4:a2:7e:
ef:9d:21:32:93:e1:c3:0d:69:1d:94:8b:e8:d3:b6:
2a:be:be:b4:85:7e:22:5e:05:91:d8:de:67:e3:17:
ea:1a:73:d5:01:44:28:cb:1d:cc:61:88:aa:33:31:
a5:e8:23:82:3f:cd:c4:3c:f5:91:01:fd:73:c9:93:
25:ae:a9:7f:d9:5b:61:f6:39:a8:f6:17:80:48:fc:
12:28:ee:45:61:68:ca:31:62:87:2b:bc:de:dd:4d:
df:c3:bf:11:92:16:a8:9f:31:f2:3f:c6:2d:d3:95:
ba:e8:fc:1c:c0:51:2b:e8:5a:7f:f1:47:bb:d4:7e:
2e:84:49:ff:46:a7:0b:c7:63:c9:77:4b:b2:9f:4d:
9a:43:28:3d:82:d9:59:b4:e7:c9:1b:12:05:f8:c1:
71:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:AB:01:60:BA:3D:C6:68:18:70:BA:96:EA:5B:2D:5B:F2:27:B0:69
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QasBYLo9xmgYcLqW6lstW_InsGk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
78:63:7b:63:af:c3:02:71:28:2d:49:db:53:b6:a4:ac:9e:4c:
1b:6c:16:d6:bd:be:cb:f9:49:11:3b:3a:db:54:b9:38:ec:3e:
20:b7:a8:3b:f0:f3:a2:f9:b1:23:41:8b:42:d3:5e:21:3d:88:
bc:a2:c4:9a:7a:5e:87:f9:87:8a:5f:3e:72:d2:ca:d0:35:dc:
4f:0f:dd:98:83:d1:4c:fa:08:76:f8:54:1b:bc:05:3a:ce:55:
0a:8f:a3:3e:54:e3:26:ab:76:07:fc:3e:0d:41:aa:77:c6:28:
1d:39:0c:0f:f0:85:77:25:fc:6c:1e:27:2c:c5:4c:9d:b6:0a:
e8:26:1a:47:5c:7e:e3:5f:53:cf:62:b7:0f:ba:27:7e:4f:36:
9e:88:92:3a:32:1c:a9:d6:27:c0:f8:92:9a:c2:e0:4f:4a:0f:
4c:24:ea:dc:a1:bb:5c:7f:22:9c:95:2d:6f:68:40:79:fd:f8:
de:49:79:45:c0:56:22:4e:f9:13:3f:6b:d0:4c:ff:20:8c:d2:
c4:03:55:5a:b7:e3:a5:ca:62:79:b1:60:44:59:68:44:d5:4f:
88:01:bd:ea:de:1c:c7:0b:61:14:2b:00:36:99:f8:c0:a5:74:
45:ad:86:e8:4b:43:ec:31:10:a1:3a:a0:98:54:3d:fc:6b:7c:
c0:c9:80:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 22:24:47 2025 by rpki-client