Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/a_Q0GSj40C4T0yNKA7_oxUsnvtM.roa
File: a_Q0GSj40C4T0yNKA7_oxUsnvtM.roa (raw, json)
Hash identifier: NIIxHoDc/fRF2q3VMktJKwhqMYC93PAGydOtri8aRzs=
Subject key identifier: 6B:F4:34:19:28:F8:D0:2E:13:D3:23:4A:03:BF:E8:C5:4B:27:BE:D3
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B7A7BCFB87190BBFABE234CC124AE4F45
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/a_Q0GSj40C4T0yNKA7_oxUsnvtM.roa
Signing time: Sun 29 Oct 2023 08:10:16 +0000
ROA not before: Sun 29 Oct 2023 08:10:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:7a:7b:cf:b8:71:90:bb:fa:be:23:4c:c1:24:ae:4f:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 29 08:10:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6bf4341928f8d02e13d3234a03bfe8c54b27bed3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f2:9e:59:c0:60:22:fc:51:0b:29:1d:fa:7d:
7e:0f:f5:66:06:58:e7:61:9e:e6:b6:b0:5f:33:fc:
fd:ba:ca:e8:ea:82:0b:a2:92:1d:bd:83:12:ff:d8:
b5:0d:86:4f:d8:78:58:8a:45:99:4d:8e:0b:9e:d7:
b4:32:ac:57:bf:c6:34:89:64:ca:0c:dd:f2:10:8a:
ed:d3:81:9a:22:7e:f3:0b:ee:96:23:a2:ca:2f:ad:
54:e9:c5:05:65:15:7a:95:2b:e9:ed:49:14:8b:b2:
4f:8b:a0:49:86:f7:98:f3:6a:02:b9:72:e4:90:e2:
21:8c:21:a5:20:8f:3c:36:da:f4:8a:ef:19:72:f1:
e9:fd:06:3d:11:83:ff:15:cd:a9:4f:cd:38:6e:7c:
a8:a0:ba:b7:f5:c1:45:ed:d5:0a:ab:45:0d:0a:79:
29:08:51:7f:59:7a:c5:ee:60:6d:e5:ed:9b:bc:3c:
7d:1e:1d:fc:38:77:25:ad:5e:a4:31:28:cc:18:3a:
10:42:ec:77:f1:52:65:3a:c3:d6:58:a1:c8:f2:42:
aa:72:6c:53:d1:df:79:19:95:9c:5d:72:7b:62:d8:
71:86:e4:d7:0d:13:96:35:30:4e:e8:fe:51:23:40:
2e:7e:53:0c:78:14:a6:92:ce:ba:a6:58:2a:3f:19:
d6:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:F4:34:19:28:F8:D0:2E:13:D3:23:4A:03:BF:E8:C5:4B:27:BE:D3
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/a_Q0GSj40C4T0yNKA7_oxUsnvtM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2e:93:7d:92:b6:56:d9:0a:24:af:24:9f:cf:db:d0:f0:6d:53:
d7:6a:41:d3:36:80:59:38:03:b5:fb:6c:17:2b:79:4b:cd:a0:
19:d4:1a:67:df:f2:ed:ca:ac:5d:e4:20:4f:ad:5b:a5:ab:f6:
bf:72:61:f4:16:a2:7e:91:c6:88:92:89:71:75:59:62:e1:07:
64:9f:15:85:27:ec:3d:4a:86:af:aa:40:69:17:f0:3e:71:72:
01:7f:f4:5d:f9:24:f7:e8:4f:d9:bc:a9:69:cd:9e:cb:1a:0f:
54:6e:6d:4b:6c:84:26:41:2d:9a:fb:a2:5a:1f:8d:ab:c3:54:
a2:74:e5:f9:0e:d2:b8:58:aa:b0:f9:57:a4:cc:c7:cf:41:77:
e4:c3:1c:7c:67:b6:ad:67:e7:ed:75:dc:35:84:b6:f0:cf:9f:
ab:d4:e3:0b:c4:b4:24:d7:9c:5e:b1:f6:a7:a4:0b:97:61:df:
a2:91:60:62:f0:3d:6e:dc:68:4e:10:70:a1:c2:2b:5f:df:78:
cc:97:7b:c1:bd:fd:c8:ac:af:c9:bc:43:ef:1e:76:18:67:2d:
9d:79:56:43:17:a7:b6:b0:88:e7:29:c4:fa:4e:79:c9:12:01:
76:ca:da:3f:77:8c:ef:bc:6a:c2:10:33:24:3a:5d:ef:a1:ba:
97:49:07:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 15:32:57 2025 by rpki-client