Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Qfbn1FFM6ROzIfjT5lKqbZc_-gc.roa
File: Qfbn1FFM6ROzIfjT5lKqbZc_-gc.roa (raw, json)
Hash identifier: af0Qs/CXiUXThCurSUYwobd3+5bJaCumjHZCCpwrGB4=
Subject key identifier: 41:F6:E7:D4:51:4C:E9:13:B3:21:F8:D3:E6:52:AA:6D:97:3F:FA:07
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B454B059D862459F969AE2EC6E72B6B57
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Qfbn1FFM6ROzIfjT5lKqbZc_-gc.roa
Signing time: Thu 19 Oct 2023 00:17:06 +0000
ROA not before: Thu 19 Oct 2023 00:17:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:45:4b:05:9d:86:24:59:f9:69:ae:2e:c6:e7:2b:6b:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 19 00:17:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=41f6e7d4514ce913b321f8d3e652aa6d973ffa07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:53:e4:2b:b9:cf:f6:b7:92:ed:41:05:d3:9e:
62:50:dd:f7:8f:7b:ae:d1:23:a3:d2:2a:ef:24:b0:
f6:b5:00:37:c7:ab:85:7c:88:fe:8d:2d:83:e1:66:
6c:76:06:3b:b4:e5:23:5e:bc:8e:1b:d8:e8:fb:2f:
82:f9:31:ac:21:e9:cd:50:53:c2:fc:90:0c:7a:8a:
87:c5:41:81:cf:c1:9b:34:7b:94:96:68:d6:a6:84:
d5:55:64:63:d3:dd:14:3a:99:e8:fa:70:9e:87:9e:
07:46:be:c3:a2:1b:b9:85:c4:13:c3:d2:b4:af:3b:
3d:43:0c:bb:f7:fd:91:d1:35:24:66:e3:59:ce:82:
22:8e:c6:07:13:d8:95:2a:45:9b:bc:7f:5c:6c:b7:
25:21:c2:6d:a7:f1:b7:6c:77:4d:1d:14:11:8f:b2:
ab:b3:5d:af:29:4c:d1:46:7c:73:64:78:f1:78:5a:
dc:7c:af:7f:6a:64:90:36:46:b3:bc:e6:1c:ca:2f:
c0:68:8f:c0:fc:ce:aa:e9:a6:df:41:31:df:22:fc:
70:2b:1f:c4:4b:91:63:bb:f3:cd:b8:e9:90:be:cb:
60:66:09:fd:96:43:d7:22:84:59:eb:4d:84:38:e1:
70:fc:71:eb:c5:5e:d2:ea:ad:f1:7c:94:90:ad:95:
5f:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:F6:E7:D4:51:4C:E9:13:B3:21:F8:D3:E6:52:AA:6D:97:3F:FA:07
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Qfbn1FFM6ROzIfjT5lKqbZc_-gc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
26:f4:32:bf:2a:f1:28:79:f1:b7:25:55:26:8a:aa:08:1f:d3:
a9:7a:42:1d:e0:6b:15:ca:89:eb:55:19:43:5e:23:e8:f9:1c:
76:43:ff:ce:59:3e:65:5b:17:5e:f8:a3:84:d4:b3:f8:de:6a:
79:fe:5a:03:dd:b7:fc:aa:f2:8c:2e:bd:3b:f8:7d:12:87:b9:
b4:fc:e3:77:7d:09:5b:92:45:93:ac:5d:0f:0e:34:48:66:6f:
fe:fe:6c:44:dd:70:f3:70:13:0d:73:c0:9b:95:e7:6b:f3:be:
7f:56:9e:de:0b:4b:3f:e0:40:80:15:96:52:2b:fe:7e:30:22:
e3:99:f2:fc:b5:96:87:37:c0:89:92:f2:d2:3a:2c:29:07:0d:
d6:f3:6b:e7:a2:c6:39:8a:d4:60:8f:41:aa:13:25:73:48:2d:
6e:1b:d5:dc:f6:da:ac:1f:c4:99:29:39:37:f1:a8:a9:4e:0a:
67:6e:98:d4:a4:94:86:15:d6:5a:c2:81:f9:ba:7f:c0:c6:c5:
4b:11:d3:55:c1:bc:77:30:aa:dc:22:c7:6d:ce:ba:77:30:a4:
ff:9c:c5:4a:9c:fc:11:99:10:ba:b0:bc:d7:ca:21:97:fe:94:
5d:18:87:85:85:db:5e:3e:b8:a9:63:ad:7d:75:68:38:d8:fd:
6e:69:41:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 05:40:26 2025 by rpki-client