Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/XqGsklPT2sT1QVQ91ZG7z-qygvA.roa
File: XqGsklPT2sT1QVQ91ZG7z-qygvA.roa (raw, json)
Hash identifier: OuKnlAbbci7EIObycjKG79qSmocNiGSOM58Ro6yPptc=
Subject key identifier: 5E:A1:AC:92:53:D3:DA:C4:F5:41:54:3D:D5:91:BB:CF:EA:B2:82:F0
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AB84DBEA240EF15BE758030FE259BF749
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/XqGsklPT2sT1QVQ91ZG7z-qygvA.roa
Signing time: Thu 21 Sep 2023 15:13:37 +0000
ROA not before: Thu 21 Sep 2023 15:13:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:b8:4d:be:a2:40:ef:15:be:75:80:30:fe:25:9b:f7:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 21 15:13:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5ea1ac9253d3dac4f541543dd591bbcfeab282f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:fa:b0:1f:6f:e0:0a:87:b5:16:4e:91:a3:c1:
1a:be:f5:b2:02:00:6f:be:d8:d8:61:65:b3:48:8c:
90:1d:26:25:5f:38:78:5d:4f:f0:55:d6:e9:e6:8a:
71:97:0e:6a:83:07:fd:98:25:12:df:ef:e3:27:6e:
b3:79:fb:23:b0:90:15:0e:57:2d:eb:a3:ee:af:ac:
22:2f:65:eb:3f:22:63:81:b3:ea:a4:35:d2:07:f0:
ae:fb:5e:3a:d9:67:4f:dd:7d:f5:4d:82:a6:f3:87:
65:44:f5:c4:f0:ed:e5:00:a9:5f:41:1a:1d:8e:c6:
91:91:a6:fa:5f:f9:4b:c7:be:03:c3:9c:6b:02:a4:
bc:7b:cf:30:4d:28:25:d9:5b:8a:1c:08:ba:a8:85:
89:3f:6d:ca:05:c9:a3:6e:dd:c3:2d:25:66:06:42:
d0:a3:89:59:9b:36:98:4b:ee:f0:1d:23:29:d8:29:
82:e1:80:93:fd:d4:c0:9c:3e:d7:8b:e3:04:07:ca:
3c:e0:cb:3a:7f:c7:dd:18:f9:bf:82:c4:10:48:82:
e4:8b:e4:5e:8d:42:63:48:30:82:8f:a9:7f:8d:a4:
aa:a9:6d:f6:da:be:b6:db:7b:3f:8d:13:bc:b2:41:
7a:08:27:e4:47:5a:1e:24:03:81:a8:f9:93:e9:8b:
0a:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:A1:AC:92:53:D3:DA:C4:F5:41:54:3D:D5:91:BB:CF:EA:B2:82:F0
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/XqGsklPT2sT1QVQ91ZG7z-qygvA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2d:73:fc:f4:82:d0:76:89:a6:4c:60:11:a5:54:db:c7:99:25:
38:46:28:58:3f:30:96:af:dc:b5:5f:fc:15:07:3e:75:d1:e0:
00:76:c0:38:b9:f0:e8:fe:9f:f5:0d:a2:56:06:0c:49:a5:c8:
77:5c:d9:1b:ef:2f:a9:de:d9:4f:d4:f3:9a:e9:c5:27:3d:fc:
9d:16:5a:8b:ce:43:08:1e:dc:ad:91:3b:1c:cc:24:46:e7:6c:
7a:04:3f:d3:bf:6d:b5:0f:a7:f7:46:a0:66:f8:f9:f6:c5:46:
6b:9a:a2:8c:89:50:f6:19:06:8e:bc:50:ef:3f:71:a5:02:33:
f2:24:9a:3d:c1:54:9a:d1:85:8c:11:f7:53:b2:c2:15:51:c0:
4c:5e:8b:bb:17:a4:ba:69:2f:3b:f2:e3:bf:c2:fa:76:f1:7f:
42:2b:fb:21:35:12:5b:e2:ee:ba:76:05:99:2c:02:33:d1:d9:
23:e4:58:c3:76:39:55:88:7c:91:b5:d9:d6:e8:27:80:93:c4:
01:c3:bc:ae:1e:f9:2b:00:8e:07:77:da:aa:43:39:51:e3:89:
28:1a:f1:4f:69:8b:df:66:1a:0c:90:f8:d0:35:5c:dc:b0:55:
90:5b:11:34:1f:f0:f9:2d:b1:54:65:4d:5b:bb:7c:35:0b:92:
ce:bc:f2:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 05:50:12 2025 by rpki-client