Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/qN1jHlXUTfVpxRZ4d6ONek4soQw.roa
File: qN1jHlXUTfVpxRZ4d6ONek4soQw.roa (raw, json)
Hash identifier: +PN9jqF/ornkBoco9oGBHkLmn5gfDVJVZJdHRAREe5Y=
Subject key identifier: A8:DD:63:1E:55:D4:4D:F5:69:C5:16:78:77:A3:8D:7A:4E:2C:A1:0C
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C0BC4460BB65DEFA58D6514D306F1F984
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/qN1jHlXUTfVpxRZ4d6ONek4soQw.roa
Signing time: Sun 26 Nov 2023 13:14:21 +0000
ROA not before: Sun 26 Nov 2023 13:14:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:0b:c4:46:0b:b6:5d:ef:a5:8d:65:14:d3:06:f1:f9:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 26 13:14:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a8dd631e55d44df569c5167877a38d7a4e2ca10c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b2:d1:9f:44:5d:08:44:4f:24:0c:ff:95:85:
97:7f:45:0e:38:53:ba:9d:5c:0e:d3:f4:be:fa:38:
77:1b:b5:b9:60:c3:1d:c2:3f:26:cf:ab:75:8e:77:
41:4e:ca:76:7a:d3:24:6b:38:ab:d8:57:14:8c:81:
34:70:1c:ba:c3:26:26:d1:aa:7e:38:40:fb:02:36:
e5:b0:c9:ad:9f:42:40:2f:04:9e:70:9b:cb:af:9a:
c6:83:4e:99:88:69:b5:9d:16:d3:e6:dd:8b:db:11:
80:71:a7:5a:c2:7c:c2:0b:5d:9d:21:4f:b8:dc:8d:
b2:db:3b:7c:14:37:0a:a4:50:6a:f4:b9:78:92:79:
4b:06:6a:d6:c8:20:12:93:4c:39:72:ba:10:22:9b:
b9:3d:b7:d7:16:bf:5f:01:71:78:5c:85:9f:84:b9:
f3:ba:3f:69:a6:13:b2:3b:ca:ec:52:cc:8e:1f:07:
0e:1b:8e:17:f8:09:19:ff:14:d7:6d:66:f9:24:a0:
9f:8d:6f:75:15:66:f3:46:42:51:82:b6:40:a7:b9:
dc:21:a5:cb:69:f8:8c:ac:aa:96:8e:b0:16:81:e6:
46:35:25:29:f2:8e:e4:34:cb:92:6b:58:f6:0f:f3:
53:8b:67:c6:c9:43:0b:ab:d2:c9:ce:bf:ad:1b:e7:
b9:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:DD:63:1E:55:D4:4D:F5:69:C5:16:78:77:A3:8D:7A:4E:2C:A1:0C
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/qN1jHlXUTfVpxRZ4d6ONek4soQw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
11:3e:1b:c1:2d:4d:93:af:28:d0:2a:c4:f4:b6:e9:27:95:0b:
b4:07:f1:c1:09:43:d4:33:87:b7:f1:6c:fa:70:bf:a5:dc:20:
19:bb:ba:ec:55:66:12:27:f3:9f:96:43:53:4c:78:3e:6b:ad:
c6:f1:b6:00:1d:a7:8b:fe:68:37:fa:4c:e0:96:27:6b:00:fa:
6f:da:3e:46:c7:12:bc:55:48:a6:60:f9:a1:60:ea:30:5d:83:
29:34:c1:fd:0d:28:6a:01:50:97:ea:63:44:4c:73:a3:88:85:
93:dd:0b:cc:36:8e:05:3d:39:1c:5b:92:8d:a5:95:72:6a:5a:
17:83:ae:6c:85:12:ce:0e:8a:11:a7:93:4f:1f:8c:35:44:24:
1f:97:4b:f7:9f:74:26:9b:94:4e:d3:82:16:52:ec:b1:6d:be:
2e:ce:96:d9:d8:6e:fe:63:d8:60:78:24:89:77:03:3b:c5:93:
15:89:2e:dc:1b:e2:c5:ad:4e:1e:f4:fe:04:4f:eb:14:8c:89:
75:ed:56:fc:bf:8a:7b:5c:88:0f:59:11:47:b0:c8:df:a9:60:
43:8b:fa:0a:f7:96:35:6f:51:b3:46:db:33:b0:99:85:75:35:
d2:ad:92:a9:c2:53:91:15:9c:7f:01:c8:51:5d:6d:ec:76:43:
81:32:05:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:10:05 2025 by rpki-client