Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Qny3x2NK8YLBBpjb4x1l4Lr-NW0.roa
File: Qny3x2NK8YLBBpjb4x1l4Lr-NW0.roa (raw, json)
Hash identifier: N4BGj9mJVGkgnPHo2HRqbTU0NCqNk5BA1T/d+6V3gkM=
Subject key identifier: 42:7C:B7:C7:63:4A:F1:82:C1:06:98:DB:E3:1D:65:E0:BA:FE:35:6D
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018ADCCB36C1A5709CA27CA874BC1C488A61
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Qny3x2NK8YLBBpjb4x1l4Lr-NW0.roa
Signing time: Thu 28 Sep 2023 17:16:59 +0000
ROA not before: Thu 28 Sep 2023 17:16:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:dc:cb:36:c1:a5:70:9c:a2:7c:a8:74:bc:1c:48:8a:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 28 17:16:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=427cb7c7634af182c10698dbe31d65e0bafe356d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:4b:67:08:41:ab:59:5f:56:eb:e8:09:f7:80:
a8:e2:25:d4:ba:75:58:4a:35:87:a4:fe:a5:67:04:
99:e6:47:0b:b6:a7:04:40:aa:8d:57:85:db:81:0c:
ae:24:87:69:77:fe:7f:5f:37:b7:73:fa:b7:d9:18:
4e:ce:d1:77:7f:96:2c:b0:09:ee:fe:c8:b4:86:1b:
e6:ba:5a:6e:ac:60:8f:7b:f3:a6:ae:7c:55:6e:83:
84:32:65:12:a1:33:83:a8:3a:9e:1a:6c:fc:34:7f:
6a:d1:b7:df:44:e0:7c:2b:d2:11:6b:dc:e9:e0:dd:
ad:f9:16:69:7c:35:47:97:b3:92:b9:db:c3:a6:5b:
54:64:12:7d:95:76:1f:5b:8b:af:a1:45:b4:42:7e:
01:f2:eb:34:7d:d0:a7:94:c9:7c:f2:71:d4:84:bb:
d9:e0:77:6b:7e:de:0d:0a:d1:e1:4c:dc:f6:4f:a3:
c0:3f:4c:ba:37:24:ee:9f:0b:32:68:e9:75:8f:19:
a2:de:01:d6:cb:fd:93:d3:1c:59:fd:45:ba:26:52:
99:42:59:f5:b9:82:6a:d0:73:f5:db:d5:63:ed:1f:
5e:34:4f:9d:03:cf:71:28:24:c7:81:9d:98:42:22:
76:90:6a:d8:14:22:72:15:d1:be:3a:12:5a:f4:3f:
2b:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:7C:B7:C7:63:4A:F1:82:C1:06:98:DB:E3:1D:65:E0:BA:FE:35:6D
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Qny3x2NK8YLBBpjb4x1l4Lr-NW0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
23:c5:a2:ca:0a:a8:d6:ef:9e:d9:c9:37:3f:19:d4:58:a6:3e:
3c:02:0a:39:d1:a4:04:04:ca:f4:1e:c5:4d:24:19:7c:c7:0d:
97:7a:ec:b2:87:51:33:f4:e5:74:60:17:25:59:20:4f:6b:5f:
f4:46:17:cf:b6:e0:19:af:d6:a1:6a:5a:21:d6:9a:19:82:a3:
8a:de:f6:71:e6:ab:6b:39:34:c2:46:75:95:3c:b7:54:66:7f:
ac:c5:45:0e:80:b4:4a:2b:64:30:c9:5a:a2:9d:1b:79:72:64:
f2:10:b0:1d:e1:6b:ee:4b:df:04:66:f2:a4:2c:9b:0d:24:a4:
46:af:59:ff:1e:99:b2:88:55:cf:a4:c6:ca:8e:e5:fb:07:84:
cc:7b:3f:96:e0:bd:e3:1b:34:6d:b6:8a:0a:32:4b:09:ca:ef:
38:38:be:89:95:82:f7:7c:88:60:23:fc:a9:e7:59:90:73:31:
59:bb:f1:fe:5d:7f:f3:39:de:8e:e3:cc:0e:47:8e:39:82:ea:
3a:17:cc:ed:60:b9:f0:b6:cd:90:88:9c:9c:09:68:7e:2b:55:
a7:ba:e6:b6:0a:ab:e3:fc:7c:d1:df:8d:74:6f:f2:c0:55:98:
9c:c0:d0:3d:a8:97:4e:a6:02:36:a7:3c:bf:7c:e7:d2:14:0e:
09:94:6d:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:17:40 2025 by rpki-client