Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/T-qcODTXUf5f-29jH-mAsH3PoKI.roa
File: T-qcODTXUf5f-29jH-mAsH3PoKI.roa (raw, json)
Hash identifier: KeAAh6JfcHtzC3Z+/Im64SyYS3uTAwEXPKLkN8WYWWE=
Subject key identifier: 4F:EA:9C:38:34:D7:51:FE:5F:FB:6F:63:1F:E9:80:B0:7D:CF:A0:A2
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B7479B7ABE6966481711869C1E874C2E5
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/T-qcODTXUf5f-29jH-mAsH3PoKI.roa
Signing time: Sat 28 Oct 2023 04:10:15 +0000
ROA not before: Sat 28 Oct 2023 04:10:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:74:79:b7:ab:e6:96:64:81:71:18:69:c1:e8:74:c2:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 28 04:10:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4fea9c3834d751fe5ffb6f631fe980b07dcfa0a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:d4:f4:93:88:b1:95:62:1f:bb:08:32:64:8e:
e1:3b:67:ea:0d:6f:c0:49:5c:df:26:07:35:c3:b5:
d8:2f:75:f9:12:7f:fa:52:f0:d2:c0:15:67:06:9c:
55:2a:44:55:b7:df:81:ec:73:98:d0:8e:8b:8c:95:
4c:b2:06:bb:e0:b2:b4:39:6a:ae:90:cf:4a:59:2f:
48:eb:bd:06:fd:a1:2d:9d:fe:c0:97:d3:6e:7f:09:
37:aa:97:0d:53:00:16:2c:b3:d4:9a:e5:00:c6:c3:
6b:a1:1f:7b:2a:45:39:ee:5d:31:05:b9:96:91:03:
a7:fd:86:c8:aa:cb:3f:de:e6:6f:85:16:66:ef:2d:
4f:ec:a2:03:35:5f:32:77:3c:4f:96:d2:a5:57:5a:
d2:3e:8d:16:35:17:8f:25:dd:71:a5:3a:ed:ab:d3:
4c:bc:ad:45:a3:b5:4a:60:94:ed:b5:be:38:dd:12:
69:9c:5c:b2:31:62:4c:2b:ca:c5:17:9d:ee:fa:57:
73:9f:5b:13:70:8a:ef:c2:6a:bc:9e:8d:bd:92:e4:
e9:86:b2:cf:09:ca:fa:02:8c:20:d9:f0:4a:cb:6b:
7e:6f:75:dd:af:f8:e5:98:9a:32:14:d9:74:39:03:
0c:b4:66:28:bf:9a:c1:f9:9f:0a:c5:18:aa:ec:76:
cb:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:EA:9C:38:34:D7:51:FE:5F:FB:6F:63:1F:E9:80:B0:7D:CF:A0:A2
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/T-qcODTXUf5f-29jH-mAsH3PoKI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
97:42:e3:8f:a8:23:f9:40:85:91:50:46:e4:1d:ac:0f:27:5a:
ae:c7:64:2e:9e:b3:52:0a:2d:12:2c:09:ab:eb:3c:d1:41:b7:
24:8c:16:e0:84:bb:e2:bc:9e:5a:e9:35:2b:16:a2:56:c7:bf:
fd:53:ef:17:ab:2d:be:38:15:68:05:a5:46:5c:0c:c4:c0:63:
bb:04:76:de:f8:7a:79:7e:5d:59:c6:50:84:56:a1:42:c4:da:
af:ad:d6:ac:0c:2f:ce:7d:34:e2:0d:a1:b5:f6:c2:d1:7f:a3:
dd:db:32:05:c4:4d:c0:8f:c6:20:e3:e8:7b:fb:4b:7f:07:40:
8e:95:17:53:e8:94:bd:ab:d7:b8:b3:73:52:02:50:a0:6c:8b:
f4:55:db:f7:c5:0e:c7:cf:90:26:49:78:c0:3f:f2:0b:af:3d:
67:8a:79:0a:8b:60:6a:f9:8a:58:ae:95:03:69:b7:96:19:24:
4d:9b:c4:cc:8d:a4:ba:c2:2d:d9:3b:ad:d2:4c:db:2e:69:f1:
59:11:1e:51:49:fd:06:88:39:d9:61:88:ca:ea:19:a4:a1:56:
8f:2f:b6:8d:4f:3a:75:db:cb:13:ae:10:ea:e4:a4:c5:57:84:
9d:a5:19:ab:0d:77:d8:89:04:18:42:4c:ac:d5:22:00:55:fc:
9c:c3:d5:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 15:23:02 2025 by rpki-client