Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/SQ7k46g3J40YXbIlLdyuho4WfYs.roa
File: SQ7k46g3J40YXbIlLdyuho4WfYs.roa (raw, json)
Hash identifier: nXuWmHUDy9z042Pj1ZjhQT2+0vf6rKVDSHUd0kznd/w=
Subject key identifier: 49:0E:E4:E3:A8:37:27:8D:18:5D:B2:25:2D:DC:AE:86:8E:16:7D:8B
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C1307B566BFC18E478C87C5D1D61635F9
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/SQ7k46g3J40YXbIlLdyuho4WfYs.roa
Signing time: Mon 27 Nov 2023 23:05:21 +0000
ROA not before: Mon 27 Nov 2023 23:05:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
2001:67c:64:ffff:0:18c:1307:6c0b/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:13:07:b5:66:bf:c1:8e:47:8c:87:c5:d1:d6:16:35:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 27 23:05:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=490ee4e3a837278d185db2252ddcae868e167d8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:56:db:3c:72:df:d1:70:99:d7:ac:ce:28:e7:
80:49:37:99:b9:02:99:95:f4:41:17:85:12:6b:4b:
05:b3:79:cf:59:68:a4:ed:c1:e0:d3:e0:88:ef:01:
d2:ca:65:52:be:d5:ad:23:f9:c6:f0:6e:30:be:5d:
31:a7:0e:de:da:a4:66:0e:8c:b3:c9:aa:dd:c3:fb:
bf:8c:c5:67:76:67:5a:6a:3c:5e:63:d2:00:2e:f0:
a5:61:7c:fa:7d:af:76:9e:bb:09:8d:f0:63:68:76:
2c:96:54:0b:c2:13:db:c4:1a:b9:0d:a6:0e:c3:95:
c1:73:42:a2:19:6c:26:b4:52:f3:ee:3f:76:76:f5:
63:8f:a4:74:91:43:c2:c5:dd:3c:85:70:92:21:12:
f7:40:9f:58:c8:86:ad:5a:b0:4b:12:f8:88:5d:19:
dd:0c:0d:e1:d7:26:e9:6f:5f:63:48:9b:52:9b:57:
ab:9d:c1:bd:89:13:3b:5a:b2:9e:24:72:f7:3f:d6:
dc:cc:8f:94:1c:e8:77:af:4f:9c:2e:56:d6:d1:2f:
4e:da:eb:d8:cc:41:4f:6a:06:0a:e0:3a:06:23:2c:
72:e3:39:ee:2e:a2:cc:75:de:47:dd:f7:12:c5:62:
ff:e2:2a:82:bc:cb:86:c5:aa:d1:63:31:a3:0a:15:
e0:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:0E:E4:E3:A8:37:27:8D:18:5D:B2:25:2D:DC:AE:86:8E:16:7D:8B
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/SQ7k46g3J40YXbIlLdyuho4WfYs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
19:87:9f:01:69:4d:cb:5b:32:f8:dd:09:86:df:75:33:b8:08:
88:58:7b:60:79:3b:75:b2:f0:ab:69:ea:81:75:2f:2f:93:62:
9e:35:be:79:9a:28:ce:36:c2:a3:28:fd:09:79:51:ee:df:82:
51:d9:ba:88:dd:c2:f3:33:4a:70:60:9d:86:13:d1:a1:c7:7e:
17:32:fd:d3:92:7c:b8:de:5f:d8:9c:2f:87:d7:a0:8f:55:7e:
4c:0c:2d:66:5e:28:94:ef:08:81:94:47:2a:35:2e:ce:88:ca:
aa:4d:ac:ef:05:b4:78:69:5b:27:4c:eb:8e:c6:1f:ec:39:6e:
27:e1:da:c8:6d:d8:d2:b4:ba:25:ff:85:c7:c0:92:f7:f1:b2:
86:c1:e5:31:07:48:00:e3:6c:1c:17:df:8b:39:82:99:af:b8:
6a:eb:1b:6e:a3:28:75:d8:44:f4:e3:a8:5f:a5:34:97:50:f2:
ea:68:96:ab:63:66:29:24:e9:e3:73:f2:42:a6:fe:e9:7e:00:
f1:59:7b:4b:a2:27:79:5f:8c:e8:aa:12:3c:15:20:4d:85:fe:
29:bd:6a:33:da:af:48:2d:9b:4e:4d:54:46:b9:5b:6d:55:a9:
e8:73:b9:c8:ec:b3:07:4e:17:59:95:c2:c5:57:d5:fd:ee:d9:
2e:5f:e3:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 00:55:38 2025 by rpki-client