Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/qCdw-J2eVwM4UzYC6PO_2FbC2vY.roa
File: qCdw-J2eVwM4UzYC6PO_2FbC2vY.roa (raw, json)
Hash identifier: IUOd0pOZyp3Ffk882J/7yu4Lmg2Y2JfeBors0NSyvsI=
Subject key identifier: A8:27:70:F8:9D:9E:57:03:38:53:36:02:E8:F3:BF:D8:56:C2:DA:F6
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BCD8610FA255277C5972BBE730A3468BB
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/qCdw-J2eVwM4UzYC6PO_2FbC2vY.roa
Signing time: Tue 14 Nov 2023 11:09:57 +0000
ROA not before: Tue 14 Nov 2023 11:09:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:cd:86:10:fa:25:52:77:c5:97:2b:be:73:0a:34:68:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 14 11:09:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a82770f89d9e570338533602e8f3bfd856c2daf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a7:d4:fc:dc:31:78:e7:05:d0:09:92:97:a1:
2f:97:b3:2d:19:21:4c:5a:3c:c6:1f:ec:f8:80:e2:
0d:e0:b3:f4:71:d2:90:ae:4f:49:6c:fe:a3:c5:46:
6b:3e:0c:7b:38:c1:14:49:c7:1c:72:3b:11:aa:d1:
81:9a:5c:e3:78:ba:39:da:b8:6c:b0:dc:0e:f2:a5:
73:d1:ae:c2:ff:ee:19:8d:ad:ab:78:6a:75:64:44:
3d:d2:12:5b:27:50:00:77:55:94:80:67:54:77:12:
78:7d:30:2e:7f:71:5d:93:99:f2:4e:7f:33:11:f3:
bf:4e:70:17:cb:57:48:62:d0:5f:2a:ac:92:e6:a3:
57:24:f3:9e:a0:2c:66:01:d3:fa:0c:19:4a:61:43:
42:16:ed:bd:44:1d:46:6d:f4:e5:ef:c2:2d:d4:7c:
1a:8c:eb:3d:13:3f:39:de:b6:ee:00:c2:01:56:63:
32:04:58:00:d9:a2:19:88:9b:95:dc:4c:b4:2d:2d:
b8:06:cc:b9:2a:4f:82:22:ca:77:e3:2f:4d:2d:7f:
58:b6:e9:a9:ed:b2:e9:6d:14:7a:1e:53:46:40:94:
48:31:a2:87:d7:26:bc:53:04:56:ee:63:2d:d7:39:
7b:74:6e:c7:38:00:57:dd:b5:1e:14:cc:42:43:c2:
ad:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:27:70:F8:9D:9E:57:03:38:53:36:02:E8:F3:BF:D8:56:C2:DA:F6
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/qCdw-J2eVwM4UzYC6PO_2FbC2vY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
91:25:7b:f2:e5:67:1b:39:61:5a:53:1a:26:5c:df:32:f3:15:
47:a2:2b:a5:c8:bf:b7:9b:07:15:98:6b:c7:96:d1:ca:26:a3:
06:a5:01:60:9b:d5:fe:e4:90:48:7c:10:ab:9c:65:16:b8:af:
e7:85:12:b6:20:5e:bf:18:de:b9:a8:ef:b1:18:c6:87:a1:38:
b8:d4:b9:db:4e:01:02:02:ff:fd:e1:e4:fd:5b:b3:aa:57:c9:
9b:4c:b0:27:6a:91:9d:c5:58:29:0c:3b:cc:fc:ac:f1:fa:ca:
33:75:7b:a5:d1:5a:35:0f:43:8e:0b:9d:24:a0:0c:33:ea:29:
4d:cd:ae:7e:35:49:4c:69:33:04:f2:b3:44:68:17:d7:bf:63:
bc:4e:1d:14:d9:3d:63:e6:63:d0:cf:31:7d:3f:ba:c7:be:70:
45:a3:12:b8:5d:48:50:30:0e:88:33:2a:fa:a9:01:c9:ff:73:
0b:60:26:78:45:6f:31:14:c4:36:4b:16:e1:9e:93:d5:61:6e:
ff:24:7d:51:1c:30:58:b8:3b:14:89:76:b8:69:fd:ce:67:8d:
f2:eb:eb:35:f0:2e:76:2d:44:d9:a8:33:7f:55:88:e6:71:6f:
e6:fd:4b:11:10:8c:20:e7:d7:15:48:81:5e:b3:60:6b:14:a1:
17:71:25:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 05:08:50 2025 by rpki-client