Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/qDmFw2Su1myi_VYIq3Kf2U4L1Sw.roa
File: qDmFw2Su1myi_VYIq3Kf2U4L1Sw.roa (raw, json)
Hash identifier: ZRjLpabmV9LJqy9trwDfKOpxlUIzfoyTqVrZz9dVL6Y=
Subject key identifier: A8:39:85:C3:64:AE:D6:6C:A2:FD:56:08:AB:72:9F:D9:4E:0B:D5:2C
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C34C0B98C989B6235CB9A43CB1781073B
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/qDmFw2Su1myi_VYIq3Kf2U4L1Sw.roa
Signing time: Mon 04 Dec 2023 12:14:54 +0000
ROA not before: Mon 04 Dec 2023 12:14:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:34:c0:b9:8c:98:9b:62:35:cb:9a:43:cb:17:81:07:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 4 12:14:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a83985c364aed66ca2fd5608ab729fd94e0bd52c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:83:2f:90:4b:72:b5:e4:5d:0e:b5:f9:6d:27:
99:f4:0a:b9:0a:38:aa:a5:e2:85:a7:16:cf:b0:e1:
48:7b:f3:9f:33:53:40:02:87:2c:c5:30:4b:32:df:
83:70:c8:dc:9c:89:d8:65:ff:91:29:b7:08:6d:25:
6d:80:a6:6d:e6:f6:8a:21:65:49:52:ea:31:d5:9b:
1a:33:c1:c3:41:27:5d:0f:cf:73:84:7e:b1:19:9e:
88:7f:9c:6a:c5:32:b0:93:68:2e:52:bd:e0:13:75:
be:93:d3:cd:50:1c:8f:d5:3e:6e:69:6e:87:59:0a:
41:45:76:18:ce:9a:44:0c:f8:e6:4c:a4:cf:81:2f:
ae:88:8d:8e:e4:84:fe:7d:19:fb:72:60:b1:5a:c0:
21:ae:74:40:a9:61:b9:eb:24:2b:46:79:09:b1:0f:
74:36:72:93:0d:52:80:42:fe:66:b5:14:f7:b2:32:
94:70:07:28:9d:3d:aa:4b:54:bc:8c:06:0c:47:9d:
3f:05:0e:e0:32:da:52:a4:5b:61:ac:25:e7:a3:54:
96:e9:75:20:ba:12:a3:00:41:de:b0:40:76:61:70:
bc:c6:8b:f6:81:51:55:ba:a1:0c:a8:08:0f:cb:d5:
20:ef:7d:57:a9:d6:9c:79:79:f8:f4:79:89:f5:28:
9c:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:39:85:C3:64:AE:D6:6C:A2:FD:56:08:AB:72:9F:D9:4E:0B:D5:2C
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/qDmFw2Su1myi_VYIq3Kf2U4L1Sw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
28:2e:5b:22:cc:2b:40:0a:fa:c5:a3:fb:7f:b0:56:9a:de:3b:
78:41:6a:c4:d9:d1:9e:a0:db:6b:9b:96:ae:42:15:b6:19:26:
ea:09:63:fb:16:07:ec:4a:d4:4a:5f:df:ce:6f:77:ea:26:8f:
f0:8b:3e:7c:c4:0a:97:72:25:56:f8:69:02:fe:a9:3d:c9:6e:
c0:f6:86:3f:f5:3f:fd:bc:67:c5:b6:62:0b:37:38:42:3f:b7:
15:8a:4e:d5:9c:cd:a4:a1:b5:f0:00:4d:b4:9b:ac:03:2f:f7:
98:1d:ec:4b:1b:00:7c:6d:f5:bb:2a:cb:0a:73:08:ed:12:19:
ba:29:58:7a:8f:6e:45:98:24:e7:80:fa:98:36:c9:53:3a:1e:
7d:1d:19:02:b8:45:57:d7:fd:9c:2e:97:f3:cd:50:f4:b7:99:
a9:c5:c1:3c:63:d7:0c:2b:55:5b:ef:72:20:2d:d6:56:02:43:
8a:d8:ac:83:8a:40:db:5a:33:3f:f9:48:7e:a1:89:c0:a1:86:
b8:01:5b:8c:de:7a:0e:a0:ee:47:9e:3e:47:57:f2:e7:f6:ba:
6d:94:51:43:26:eb:d8:c1:cb:eb:a3:c5:3f:fb:dd:b9:39:f1:
d2:44:e1:a1:c5:45:b5:11:42:da:03:b9:da:c0:2c:55:f2:8a:
9b:0e:b4:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 05:46:00 2025 by rpki-client