Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QmTAgePiL-6AokYzqyCLujmwpic.roa
File: QmTAgePiL-6AokYzqyCLujmwpic.roa (raw, json)
Hash identifier: EQvdxfuGpyc9B3NNDbd6svROax8xeLvesfkxsFgHTEE=
Subject key identifier: 42:64:C0:81:E3:E2:2F:EE:80:A2:46:33:AB:20:8B:BA:39:B0:A6:27
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AB39629A6F2677DE0272257E9E0DA99A2
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QmTAgePiL-6AokYzqyCLujmwpic.roa
Signing time: Wed 20 Sep 2023 17:14:37 +0000
ROA not before: Wed 20 Sep 2023 17:14:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:b3:96:29:a6:f2:67:7d:e0:27:22:57:e9:e0:da:99:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 20 17:14:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4264c081e3e22fee80a24633ab208bba39b0a627
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:09:db:bd:8c:1f:98:a9:c4:90:dc:ed:bb:da:
f4:5f:16:92:a8:17:5e:81:64:7b:48:8b:cf:75:0c:
5d:7f:8e:ca:ed:e8:fc:02:9f:5e:7d:ec:0d:a4:57:
9a:d3:5b:ec:7f:c2:17:17:3d:5b:c2:48:e0:a4:ed:
7b:f1:0e:9a:1a:d3:ea:94:08:44:ce:d8:27:ac:31:
91:f5:4f:a3:61:97:15:1f:aa:4c:bb:02:21:98:06:
93:65:83:d5:50:bc:6b:c9:18:e4:a0:ab:aa:b8:af:
25:83:de:be:4a:05:da:07:8d:16:44:b1:c8:14:44:
8d:17:48:90:a7:e7:81:42:ea:2c:25:27:7a:cc:9e:
e1:cc:e1:bb:93:e7:bd:de:92:38:96:57:cd:90:42:
d1:2b:53:d7:b3:9c:a4:9c:26:12:31:76:8e:17:20:
34:54:f4:d9:41:d1:b2:b3:7e:65:5b:da:c2:e3:e0:
2d:ac:c2:29:39:0e:9c:a8:0b:3c:56:47:05:41:f4:
2f:82:33:f2:3a:4f:85:cc:74:05:60:b9:e0:2b:ff:
77:4b:75:6f:51:58:31:3e:96:95:7b:2e:66:4e:a7:
57:dc:9b:bc:db:d9:0c:81:c6:b8:5f:82:9e:93:9c:
25:a3:02:16:bc:7b:82:02:c4:0a:95:3b:71:96:da:
46:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:64:C0:81:E3:E2:2F:EE:80:A2:46:33:AB:20:8B:BA:39:B0:A6:27
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QmTAgePiL-6AokYzqyCLujmwpic.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6e:a5:12:83:f5:8e:43:33:db:7a:59:3a:af:73:43:22:d5:fc:
8b:5d:00:38:c3:03:af:e5:cd:ef:89:ae:38:60:d2:a3:17:cd:
42:1d:ba:fc:f8:83:47:70:50:f0:0e:2d:d0:80:c0:36:88:43:
e4:6e:eb:7c:60:82:45:90:a8:64:1f:ae:48:a2:02:4e:52:f2:
4f:0c:d9:5b:4c:d3:7e:b3:c1:2a:53:4b:38:7e:5f:44:9a:86:
5a:c5:9a:7d:ee:6d:ef:c2:85:e3:a5:87:c6:fe:17:1d:03:0f:
63:71:54:d7:6b:9d:7b:29:83:0d:4b:29:15:e5:5a:63:97:6c:
e6:ec:7c:e5:dc:77:93:74:cb:89:1d:da:b3:78:38:fd:86:a7:
46:01:1f:b6:2f:65:12:9f:5e:bb:b5:f3:bf:e1:79:05:7d:10:
c5:d5:48:8d:a2:5c:8c:17:dd:36:a8:05:91:49:aa:35:06:81:
4f:4b:16:fb:12:35:75:e0:39:01:14:00:4a:5b:24:88:cb:98:
17:32:f2:09:e5:08:7e:e0:bf:64:f4:1f:4c:af:80:fe:2b:32:
ca:de:b7:8b:e8:47:e8:a8:71:b8:81:0f:fa:00:33:57:97:89:
4f:58:9f:3a:80:38:70:ea:b9:b7:3e:ab:b6:eb:95:76:a1:c1:
bc:c1:5b:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 06:43:15 2025 by rpki-client