Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QyWSXCj75Db4YuaSQGDvo7XGtlc.roa
File: QyWSXCj75Db4YuaSQGDvo7XGtlc.roa (raw, json)
Hash identifier: 1fsK1XpYO9nyfd2fXmWJ58Pjb8HtApRyRIPIDQ5SEL4=
Subject key identifier: 43:25:92:5C:28:FB:E4:36:F8:62:E6:92:40:60:EF:A3:B5:C6:B6:57
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C4AA38A1F1AF6AA486264C5A3DC8E6F5D
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QyWSXCj75Db4YuaSQGDvo7XGtlc.roa
Signing time: Fri 08 Dec 2023 18:14:40 +0000
ROA not before: Fri 08 Dec 2023 18:14:40 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:4a:a3:8a:1f:1a:f6:aa:48:62:64:c5:a3:dc:8e:6f:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 8 18:14:40 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4325925c28fbe436f862e6924060efa3b5c6b657
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:b2:95:0a:b6:4a:83:57:21:c9:ff:97:86:4c:
0a:0d:21:b5:e1:dc:48:dc:90:a8:01:3d:72:1d:a5:
da:e0:b8:a9:10:14:b6:1f:76:1b:3a:65:8d:ca:14:
2f:c1:01:41:22:d2:3f:ac:43:aa:19:f7:eb:24:e8:
eb:b5:cf:12:ef:33:b0:57:ae:0d:25:de:25:b3:fb:
15:34:1d:41:c9:7a:06:2d:be:94:61:9b:53:e7:37:
a6:18:1a:e4:c0:4c:84:f6:52:64:c6:73:f9:34:a6:
03:e5:4a:46:b1:b2:1b:d2:f4:76:ba:4e:b2:ae:27:
40:75:ce:80:83:41:89:f3:42:0f:cc:fc:fa:cc:0d:
ce:d9:4a:0d:11:6d:29:0b:30:ef:aa:38:b5:64:dc:
f8:a4:6e:ba:56:46:bf:bb:59:cb:0e:02:03:18:3a:
99:bc:94:78:80:7f:8f:ff:52:0e:69:9a:0e:e4:30:
1d:7e:dd:bc:33:dc:ac:34:fd:6c:9f:01:52:5d:17:
ef:31:15:ac:52:f8:73:d8:5a:fc:07:54:d5:2d:32:
ce:2c:79:43:b7:6c:90:1d:41:22:4c:1e:89:47:06:
50:5b:9b:86:c1:ae:43:b2:5f:37:59:b5:1c:9b:cc:
a6:50:0d:4a:eb:dc:6f:84:c5:46:78:d0:a1:81:49:
54:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:25:92:5C:28:FB:E4:36:F8:62:E6:92:40:60:EF:A3:B5:C6:B6:57
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QyWSXCj75Db4YuaSQGDvo7XGtlc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
33:ef:5f:d5:e2:9e:82:f2:c6:f3:3c:5d:7f:a6:cf:ed:53:2a:
9e:e9:e3:cd:75:ec:0f:1a:27:58:8f:2d:66:1a:25:f0:b1:e7:
8d:23:06:fb:03:3e:25:6e:cf:4e:f8:69:3e:3b:bd:35:c3:f0:
81:54:fa:fd:2b:15:aa:46:42:2d:e1:45:82:d6:0a:57:9f:af:
d9:8a:5b:51:fe:b2:61:1c:38:99:10:7d:23:96:78:6f:a0:d5:
67:07:d3:54:e1:a1:57:ea:e3:ac:fb:c9:29:cc:16:0b:79:2d:
10:34:32:77:e9:85:b1:e4:9d:69:5d:70:24:d5:7d:ca:c1:6a:
84:9f:ae:8f:85:eb:00:f7:f3:2a:b2:8f:9a:22:58:9e:f0:ae:
91:c6:45:ed:b2:d4:e1:1f:f2:07:34:3d:a5:94:2c:f6:5b:f8:
4b:45:63:8a:2f:57:71:17:66:59:4d:ad:30:6c:b8:ca:79:dd:
f5:58:f4:d5:99:f3:cb:10:8c:cd:46:52:b8:16:4d:e4:84:72:
b5:75:90:94:62:40:ea:72:eb:a7:98:bd:64:7e:df:1b:02:13:
68:1e:2a:29:31:cb:12:03:e7:7d:9e:e4:f6:b8:f4:89:31:8c:
c9:9d:95:d7:ed:92:d1:c8:a0:ff:ec:ce:9c:df:e0:d2:16:4d:
4b:ae:31:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 06:52:54 2025 by rpki-client