Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/bqeILnfl5i89HwblMWdCovr0690.roa
File: bqeILnfl5i89HwblMWdCovr0690.roa (raw, json)
Hash identifier: C/xSi5CPbJ9jNunIr4bc603Chuw0E3Is7He5H6pgol4=
Subject key identifier: 6E:A7:88:2E:77:E5:E6:2F:3D:1F:06:E5:31:67:42:A2:FA:F4:EB:DD
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B186729FF645D6A94EC911AB2BA356F0E
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/bqeILnfl5i89HwblMWdCovr0690.roa
Signing time: Tue 10 Oct 2023 07:04:55 +0000
ROA not before: Tue 10 Oct 2023 07:04:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:1866:b48d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:18:67:29:ff:64:5d:6a:94:ec:91:1a:b2:ba:35:6f:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 10 07:04:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6ea7882e77e5e62f3d1f06e5316742a2faf4ebdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:41:7f:e3:da:d4:65:4f:25:c4:67:89:5d:6a:
9c:da:12:dd:0d:f8:6d:a2:4c:9b:ad:36:d1:42:c1:
31:5c:57:a1:6b:2c:e2:4b:8e:34:8e:83:d0:9d:8a:
4a:7b:8d:83:45:ac:8c:07:99:4f:c3:69:90:3a:4a:
5c:d7:90:a0:c1:e5:1d:51:40:d0:3a:88:ed:66:52:
c9:57:f2:f2:b6:1d:4f:c2:0a:83:02:5c:de:25:85:
cd:cf:5b:77:11:2b:5b:2c:15:ab:3c:33:fe:12:47:
a4:32:cb:85:9f:61:f7:b5:a8:ee:45:56:5a:61:3a:
da:50:db:e2:dd:c5:ff:e0:85:5b:22:92:6a:c3:8e:
f8:a0:1c:0d:a3:bf:62:1a:e9:4b:04:80:82:f8:9d:
1d:62:13:39:6e:f2:45:eb:7b:48:d7:3d:d9:e3:b1:
f6:d2:57:a5:8c:0b:e1:f4:6e:50:b0:a6:32:3b:bd:
af:98:4b:80:ec:da:0e:d5:dd:cc:c6:5e:1d:7d:d7:
cc:8d:11:92:c4:8d:1c:a8:66:d4:47:e7:31:c4:34:
32:4a:e8:39:10:cd:a3:8d:c0:b5:d1:24:19:6e:0f:
cc:e2:2b:5e:83:5f:41:aa:0b:3d:9d:ea:4b:74:68:
49:b5:2b:99:38:2f:78:83:12:68:6d:e2:b1:10:df:
62:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:A7:88:2E:77:E5:E6:2F:3D:1F:06:E5:31:67:42:A2:FA:F4:EB:DD
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/bqeILnfl5i89HwblMWdCovr0690.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
c7:ca:b1:e7:f3:9c:b5:41:69:b8:a5:a2:42:56:e9:02:71:40:
3f:20:81:a4:bb:a7:e5:0b:4d:1c:90:7d:cd:7b:12:d8:1b:7e:
1a:45:9c:81:67:64:81:6a:b6:85:b1:dd:5c:28:9d:9d:58:7e:
0e:a7:4b:28:0a:af:a5:86:50:fd:7b:6c:e1:f7:d7:dc:29:bc:
3e:0b:a1:ba:bf:2d:22:9d:78:f0:15:b2:80:48:91:3c:a2:e8:
c9:ba:c9:b8:b7:c5:c6:36:17:0b:1e:01:de:ac:8c:23:18:56:
a2:88:63:25:ea:d3:2a:b9:c5:0c:00:78:dd:af:d9:eb:41:9f:
cc:fd:e5:4a:75:a4:76:5c:ae:7b:8e:1b:59:95:a6:e9:61:f8:
d9:3a:b6:09:0b:51:e3:f7:28:11:45:47:0f:7a:09:c8:4b:11:
e3:e0:c8:27:e2:c4:6c:fb:ba:11:14:f2:c6:be:2c:1b:c8:0c:
63:79:30:fd:a6:ff:ee:ef:3d:64:37:fb:0c:c3:6c:9b:2e:a8:
8d:63:42:bc:04:c3:96:31:21:d4:e8:fc:e3:65:e2:20:b8:09:
3d:92:a8:1e:04:52:93:68:a1:04:7d:5e:7e:da:51:e4:2e:6f:
23:83:44:b9:88:35:eb:62:e1:46:7a:d8:fd:4f:f6:43:1e:57:
a8:e3:96:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 01:17:15 2025 by rpki-client