Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/q1dmLMSfmE1J_YbTYVvrIoIuHv4.roa
File: q1dmLMSfmE1J_YbTYVvrIoIuHv4.roa (raw, json)
Hash identifier: cMPP5x5mNLQEeFAgbnCarm/2+AbDqiq/0AiH6V1Rn78=
Subject key identifier: AB:57:66:2C:C4:9F:98:4D:49:FD:86:D3:61:5B:EB:22:82:2E:1E:FE
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C64D281B289ACF40CAB849C9440DE0226
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/q1dmLMSfmE1J_YbTYVvrIoIuHv4.roa
Signing time: Wed 13 Dec 2023 20:16:06 +0000
ROA not before: Wed 13 Dec 2023 20:16:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:64:d2:81:b2:89:ac:f4:0c:ab:84:9c:94:40:de:02:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 13 20:16:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ab57662cc49f984d49fd86d3615beb22822e1efe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:9a:39:23:4b:db:d7:c4:5b:fe:44:e2:a2:54:
68:75:47:da:24:6f:4c:30:0e:2d:bb:a5:53:7b:d7:
d7:0a:8a:8c:d5:bd:93:84:5b:b6:e8:7b:1c:78:62:
f7:c2:70:52:8e:4f:1e:ce:1c:ce:46:ff:f7:f9:68:
54:20:d8:87:26:e0:a8:21:d0:9f:f4:4a:ea:fc:b7:
ea:a8:8d:43:ef:2d:6a:d1:5d:41:38:08:1a:13:16:
84:30:a2:17:1b:6f:28:5e:65:e6:53:ab:75:42:6f:
25:ae:a4:a4:fc:1c:20:4d:e9:7e:1c:52:9d:41:5b:
79:a6:e0:9e:0a:5f:d2:15:d4:66:47:37:83:36:e3:
e9:ed:a0:00:99:99:13:9e:9e:60:00:3c:3f:7f:16:
68:cc:f1:b9:3a:f4:af:ac:d1:b4:65:f8:d4:74:dd:
78:b5:38:a3:99:4d:9e:cc:10:f5:67:d5:db:fd:05:
01:96:13:1e:09:5c:8e:0a:d4:f3:10:98:15:b9:01:
9d:7b:f2:b8:b1:1a:ee:34:3b:e7:d2:8c:52:08:26:
a2:79:80:81:4a:f5:16:2b:24:05:b1:b5:e7:f7:6d:
5e:d5:01:0f:e4:be:a8:13:6d:c6:e7:be:cd:47:69:
aa:55:1c:fa:58:7e:e2:34:ee:17:e9:c9:9d:a7:2f:
08:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:57:66:2C:C4:9F:98:4D:49:FD:86:D3:61:5B:EB:22:82:2E:1E:FE
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/q1dmLMSfmE1J_YbTYVvrIoIuHv4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
be:56:7d:14:e1:9d:8a:1e:49:b5:c4:9b:f0:7a:a2:db:97:2f:
66:32:e1:a2:61:a1:5f:73:92:fb:97:a2:47:6b:0f:90:3e:d4:
f5:8b:9c:3c:1b:a7:3f:b2:31:15:7b:b8:f1:b9:b9:81:ec:29:
08:d2:c5:f3:b3:76:38:20:4e:60:cc:99:6d:fd:be:86:49:24:
03:39:40:6b:d7:ad:6d:f5:1b:e2:a9:5f:37:4d:fb:2b:ac:8e:
8c:7c:5a:2f:1e:61:43:52:35:b4:9d:c0:28:f3:fd:ea:59:bc:
56:5e:0c:44:23:89:b2:9d:97:9e:c4:8e:ce:04:1a:d7:01:5d:
21:30:b2:1d:89:b8:ef:05:2f:4f:c4:12:e2:17:e7:f4:96:44:
d8:42:e6:3a:3b:7f:cf:3d:7e:14:cf:4c:9d:47:57:05:2c:db:
e0:53:7a:f3:86:47:d0:2e:73:51:a7:7d:f5:5b:78:8f:17:50:
7a:97:ca:73:48:28:08:86:49:d2:39:85:a3:41:2b:a1:05:a3:
96:94:35:65:f6:4c:20:64:de:ec:07:2f:7c:0c:58:f9:70:7b:
0c:50:1c:0c:6c:8c:a6:7a:94:a4:59:7d:b4:8a:c8:a3:d8:56:
74:2a:7e:c5:9c:dc:f5:06:fd:a5:4a:e0:b0:67:1a:ab:6c:26:
d4:f0:81:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 18:17:19 2025 by rpki-client