Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/cQQ5p-y-R1Ci14g7RtneoUeEIDo.roa
File: cQQ5p-y-R1Ci14g7RtneoUeEIDo.roa (raw, json)
Hash identifier: lhkXeKPZEZSROYiwR03XjlXNyQ3YOSBcG5wmJ+VnM3s=
Subject key identifier: 71:04:39:A7:EC:BE:47:50:A2:D7:88:3B:46:D9:DE:A1:47:84:20:3A
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B777BAE393313AB931CF66CF74B09B2F8
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/cQQ5p-y-R1Ci14g7RtneoUeEIDo.roa
Signing time: Sat 28 Oct 2023 18:11:16 +0000
ROA not before: Sat 28 Oct 2023 18:11:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:77:7b:ae:39:33:13:ab:93:1c:f6:6c:f7:4b:09:b2:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 28 18:11:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=710439a7ecbe4750a2d7883b46d9dea14784203a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:8d:47:b2:df:62:5f:bd:39:33:de:a7:46:ea:
9b:0c:ff:f1:bb:f1:87:c8:c6:1a:84:f3:de:d1:26:
24:0d:46:2d:93:40:0d:a4:09:b9:99:29:47:6d:3d:
65:32:83:0d:82:fc:99:d0:13:82:f0:7d:32:01:ec:
3e:2d:80:6d:af:97:8d:64:a7:82:cf:0b:e8:94:98:
5a:0a:22:9d:1d:56:3d:0a:a1:09:b4:b7:94:ce:cc:
8c:ee:45:a4:a2:43:e2:31:6c:a4:f2:18:45:54:35:
e6:53:c3:a9:d2:ba:ec:ba:cd:5f:d9:7f:68:24:83:
b4:61:8b:14:0d:9a:f0:48:56:a2:55:b0:81:2a:95:
fb:b4:0e:e9:c8:be:69:03:d4:17:4e:5f:91:18:10:
c9:79:1a:73:63:8a:db:4e:7e:7c:fc:9a:f7:73:f3:
81:e0:4b:e3:fb:4f:19:a3:a0:c1:1f:dd:3e:99:c1:
fb:40:f2:8c:51:d0:4a:aa:f5:72:46:9d:b2:e4:68:
b4:f2:23:41:ef:1e:93:46:3e:6c:58:89:28:b0:32:
16:e3:31:1b:14:31:99:28:77:aa:69:36:f2:d2:f3:
a3:10:fd:ca:5d:66:92:61:71:0c:99:31:0d:91:71:
89:a7:ef:0d:55:c3:b8:77:89:91:15:bf:62:10:2a:
19:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:04:39:A7:EC:BE:47:50:A2:D7:88:3B:46:D9:DE:A1:47:84:20:3A
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/cQQ5p-y-R1Ci14g7RtneoUeEIDo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8b:d7:97:df:eb:24:d7:3d:44:09:ed:fc:8e:a6:e7:1d:59:97:
bb:bb:b8:3e:8e:53:a3:bd:74:af:4f:2f:e4:a1:90:ac:3e:c1:
4e:64:45:b9:78:9f:29:52:83:69:b5:c7:2a:97:61:8e:de:83:
db:f1:8d:5a:f9:70:18:a1:3e:50:ac:34:0d:7b:d3:de:1d:3b:
73:6a:de:76:a0:ee:d4:19:a8:0f:5e:e4:a8:c4:be:24:96:c1:
05:c3:fe:8b:0d:9e:86:41:8c:60:0c:4e:44:00:d4:d5:6c:08:
f7:7b:64:61:9d:40:6d:63:8d:8b:97:48:74:59:c4:b2:8b:b9:
1b:08:d8:b5:09:2f:f1:be:0d:a4:82:06:11:7b:06:ba:aa:5d:
9e:c9:26:ca:17:39:fd:20:e7:df:78:b6:f1:b5:82:90:17:75:
0f:ad:62:3f:78:05:a0:13:7a:3d:2e:50:2f:ed:6b:46:88:f6:
13:47:f7:26:3d:5e:1b:6a:3f:00:25:9e:b7:f0:2c:0f:f4:dc:
f1:48:60:c5:37:d1:d4:ca:a5:10:9d:d9:6d:90:34:c4:2c:37:
f9:af:d4:ac:11:99:9d:85:c2:03:cd:b6:87:ba:0a:97:e0:a8:
d1:2d:ba:68:1d:7a:68:3a:64:1d:4d:41:20:3a:8c:ad:d4:f4:
42:31:ab:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 16:15:41 2025 by rpki-client