Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/gQR_qCGF5EtqjetQQhLCZmpvnUU.roa
File: gQR_qCGF5EtqjetQQhLCZmpvnUU.roa (raw, json)
Hash identifier: Glsi/b6u0AAK1cXRimlAraJZTBjqK74L4hJSeM154g0=
Subject key identifier: 81:04:7F:A8:21:85:E4:4B:6A:8D:EB:50:42:12:C2:66:6A:6F:9D:45
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C6CC20F8119010CB4041DBD86377EE836
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/gQR_qCGF5EtqjetQQhLCZmpvnUU.roa
Signing time: Fri 15 Dec 2023 09:15:06 +0000
ROA not before: Fri 15 Dec 2023 09:15:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:6c:c2:0f:81:19:01:0c:b4:04:1d:bd:86:37:7e:e8:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 15 09:15:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=81047fa82185e44b6a8deb504212c2666a6f9d45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b9:89:27:29:53:6c:f6:cd:e7:c7:b1:1a:72:
48:f0:61:03:bc:6c:15:d5:f7:27:9d:dc:f1:0b:5c:
47:3a:c4:d9:73:ff:ef:14:e7:88:c3:bc:5f:f8:50:
b3:0d:bf:df:ba:6a:79:34:42:a4:6d:b2:05:46:2e:
67:56:87:9e:8f:11:3f:59:c9:6f:8b:fb:73:56:29:
79:1c:3f:b2:99:51:68:11:55:9f:6e:fe:eb:1b:d5:
de:4a:8e:f7:a7:e4:7f:19:13:5f:bd:a5:1c:cb:31:
f9:1b:3c:cd:47:fc:ae:47:75:14:49:6f:22:49:56:
05:19:49:9f:22:dc:76:e6:1c:a7:42:10:f2:c8:4a:
8c:3a:a6:e6:02:e3:42:25:09:68:3c:24:77:35:b4:
12:74:c9:0b:d7:98:21:32:09:53:71:8d:c6:59:08:
65:24:f7:5b:21:14:55:b0:28:ee:5c:07:ba:28:e1:
97:fe:43:3f:16:72:67:04:35:9d:a0:d5:6a:6b:52:
9a:70:83:f3:3a:38:76:e4:5c:98:65:a4:49:77:4a:
3d:f4:2e:88:f9:4f:b0:92:d4:7a:1b:6d:ea:87:40:
9f:b5:4f:9a:cf:a3:32:12:6a:ea:7d:94:3a:5a:db:
63:59:e9:17:11:08:9e:7f:8a:e8:30:51:eb:f2:d0:
8b:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:04:7F:A8:21:85:E4:4B:6A:8D:EB:50:42:12:C2:66:6A:6F:9D:45
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/gQR_qCGF5EtqjetQQhLCZmpvnUU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
c9:fd:1f:02:98:ac:43:fb:63:8a:78:46:c4:20:92:2b:5a:bf:
40:30:e1:a3:82:d9:98:ab:a6:33:f6:2c:29:49:b1:94:d5:99:
48:56:94:30:98:94:64:5a:bd:7c:e5:88:9a:8b:6f:90:76:7d:
98:54:4f:73:f4:83:ad:ab:6c:e7:ff:d8:5f:52:67:be:64:69:
d8:eb:69:71:34:5d:65:a0:21:0e:5e:6d:4e:d9:40:a6:af:31:
fd:e2:ad:c1:8a:b0:1b:90:a8:a1:0e:21:dc:92:bb:85:34:11:
eb:8c:f9:82:c1:65:bb:f0:70:ec:64:e6:b6:4c:37:54:e8:95:
78:a3:21:dd:d0:c4:5a:7d:db:24:b4:1a:e6:68:36:ab:5a:ed:
2a:89:e0:a3:44:cd:f6:37:2e:94:f4:54:77:66:a7:ce:12:a7:
3b:40:05:8c:99:f7:e2:cd:f8:da:05:27:55:c3:d5:72:e6:bc:
97:37:ae:dc:e1:8f:da:2b:b0:da:ab:2f:5c:9d:d9:08:d8:ab:
50:40:eb:17:11:c0:cc:c4:fb:57:9d:af:d0:53:ed:5c:0d:53:
c5:55:f0:7d:f5:e9:6d:69:fc:3e:b6:43:0d:fd:fc:85:64:20:
d7:90:35:2c:36:38:8b:7d:b3:eb:35:35:bb:2b:2c:7b:c8:ba:
e3:56:57:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 14:06:35 2025 by rpki-client