Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/qNkqF6D8_CtwtBNo1SdWjytXy3w.roa
File: qNkqF6D8_CtwtBNo1SdWjytXy3w.roa (raw, json)
Hash identifier: JNt8B2ZWGyDF0sBfdDY7M0nhnka49W7J4vlnW1DSASA=
Subject key identifier: A8:D9:2A:17:A0:FC:FC:2B:70:B4:13:68:D5:27:56:8F:2B:57:CB:7C
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B946D0B21B9A99BCB9ADA2C62C5896546
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/qNkqF6D8_CtwtBNo1SdWjytXy3w.roa
Signing time: Fri 03 Nov 2023 09:04:16 +0000
ROA not before: Fri 03 Nov 2023 09:04:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18b:946c:df59/128 maxlen: 128
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:94:6d:0b:21:b9:a9:9b:cb:9a:da:2c:62:c5:89:65:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 3 09:04:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a8d92a17a0fcfc2b70b41368d527568f2b57cb7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:31:19:aa:26:5f:29:b8:4e:b0:7c:bd:22:4f:
46:80:d7:86:9d:c3:df:80:b5:8c:5b:18:25:a0:4f:
6e:bd:12:c9:37:8f:c8:ba:0f:39:25:ff:fd:2f:1f:
ab:2a:57:28:ca:f3:0e:47:36:59:42:e4:21:d9:db:
48:2c:f0:39:13:1a:a6:50:21:62:12:c3:44:2a:d3:
4c:f0:09:51:0a:f8:ce:f5:3e:f0:59:8c:1f:09:73:
f9:5d:f9:36:08:65:dd:42:6a:47:19:1b:bd:8d:23:
c7:4a:7c:13:9b:c1:d1:b3:3b:79:19:92:0e:fb:09:
21:f9:15:91:d6:ae:75:fd:b0:fd:5c:5f:b1:fb:a1:
0b:24:8c:ef:ad:5f:21:4e:6f:57:84:49:90:1c:85:
2e:38:c6:0e:4c:6f:3f:7f:25:4d:4e:4e:3d:9e:45:
c1:5b:f9:a2:84:07:f7:fb:69:05:55:50:fd:9f:da:
ae:aa:2c:98:7b:0a:d0:74:33:24:8a:64:7d:f4:95:
36:6a:c5:3e:db:29:71:30:af:a2:95:17:f6:5e:2a:
9e:ee:d0:64:37:7b:c8:fa:cd:db:bc:c9:3b:50:33:
20:fc:e5:c6:ff:dd:aa:d5:f0:65:f9:48:01:40:ca:
14:0f:74:41:37:16:3b:50:3b:58:a1:48:1f:51:23:
b8:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:D9:2A:17:A0:FC:FC:2B:70:B4:13:68:D5:27:56:8F:2B:57:CB:7C
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/qNkqF6D8_CtwtBNo1SdWjytXy3w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
86:d7:3c:56:7d:a8:5b:da:7e:9a:49:31:7b:18:92:49:05:b5:
6a:cc:5f:27:d4:dd:01:12:ca:0e:a4:9f:91:eb:ba:54:9b:7f:
3d:02:2c:a2:50:28:6e:33:1e:da:6b:eb:ef:a0:0b:32:22:01:
18:74:ae:f6:76:31:1d:b5:1d:53:83:1c:ba:2f:8a:43:ec:9f:
63:95:9d:40:0b:a6:ec:86:34:42:d9:23:6f:2d:df:1f:f4:cb:
7f:f3:37:51:fb:28:2c:bf:ce:6f:6c:38:47:77:e6:08:44:de:
6e:11:e2:b0:d5:56:a4:b7:04:d5:2f:65:32:c5:d3:8f:23:66:
d9:f4:15:b0:77:bf:2a:53:c0:ae:dd:8e:36:e0:fb:ff:d5:8f:
bb:53:6d:31:a2:8e:5c:ba:a4:a6:67:ff:61:17:67:ee:c9:4f:
26:d3:61:d3:1f:1a:63:4d:1b:c6:ff:f4:7e:43:d8:ab:13:0f:
5e:72:d0:eb:c4:d5:05:04:ff:40:91:8e:86:fe:82:88:c6:64:
45:59:21:90:de:3c:b7:df:d1:7a:b3:84:fe:1f:52:90:41:66:
dc:46:d3:51:6c:73:d7:cb:17:ed:2d:48:6c:3a:19:d8:fb:86:
d0:06:09:62:68:32:b4:cd:27:4d:dc:a3:58:75:7c:ee:0a:52:
18:e7:1c:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 02:28:41 2025 by rpki-client