Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/qYQTBrVKbusbmveEYxv1azbA0b8.roa
File: qYQTBrVKbusbmveEYxv1azbA0b8.roa (raw, json)
Hash identifier: KzaZC84gjKMKNCuC6kIttKZ2qcnXJwNKnuCLZALfoOY=
Subject key identifier: A9:84:13:06:B5:4A:6E:EB:1B:9A:F7:84:63:1B:F5:6B:36:C0:D1:BF
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B8F10AABCDC7FCC513C64D6398E9A351B
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/qYQTBrVKbusbmveEYxv1azbA0b8.roa
Signing time: Thu 02 Nov 2023 08:05:15 +0000
ROA not before: Thu 02 Nov 2023 08:05:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:8f0f:de34/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:8f:10:aa:bc:dc:7f:cc:51:3c:64:d6:39:8e:9a:35:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 2 08:05:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a9841306b54a6eeb1b9af784631bf56b36c0d1bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:8f:3f:c7:86:70:32:8c:1d:d8:b2:cc:c1:2a:
ce:b2:df:1f:22:6e:95:65:62:11:91:ee:a5:2a:ac:
ec:45:e3:45:67:6f:98:19:4a:f4:8d:46:d1:db:05:
24:12:9f:5f:0f:df:50:ed:84:d4:3b:25:5e:c8:83:
40:d2:6a:e3:bd:3c:ae:d4:15:33:3f:71:13:15:17:
56:d4:8f:5b:dc:57:ef:49:6c:d4:65:21:40:cf:6c:
b7:75:5b:7e:1b:6e:90:bc:d2:70:6e:0d:84:8f:a0:
db:88:85:cc:dd:4b:b3:82:43:99:c7:90:30:0d:20:
1c:43:28:2e:d8:fe:94:ed:09:dc:0a:0d:24:91:31:
20:59:85:3b:72:54:f3:61:be:44:53:78:3e:1e:64:
15:f8:83:05:6d:19:17:99:bd:ba:e3:dd:b1:5b:39:
62:8f:7f:ce:ac:8f:f3:4a:0f:42:cd:cb:da:0c:c2:
69:5b:12:e6:d5:ed:c0:5b:83:49:48:cf:3a:d6:5e:
e5:83:53:20:39:b7:50:77:4c:1e:e2:5b:ad:ee:91:
93:89:93:0c:21:d2:4c:1c:da:1b:8b:5e:31:b3:a0:
cc:4f:6e:94:00:81:eb:a2:d2:d8:e1:82:d8:b6:d0:
b2:b6:18:26:75:55:bb:b2:fb:51:18:f0:50:28:7b:
ff:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:84:13:06:B5:4A:6E:EB:1B:9A:F7:84:63:1B:F5:6B:36:C0:D1:BF
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/qYQTBrVKbusbmveEYxv1azbA0b8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7a:30:17:5f:92:42:c0:61:4c:71:29:7a:fb:90:63:9b:60:9d:
98:2e:96:9b:eb:34:36:33:0b:38:21:8b:41:e0:d1:b6:f5:e4:
75:4d:11:47:0d:7c:1c:27:eb:65:28:90:57:98:c7:3c:eb:f4:
2d:d6:07:d5:8e:d9:89:34:a6:39:2f:cd:fb:87:f2:d6:fc:dc:
0f:aa:41:65:dd:71:9f:f2:3c:9a:21:08:f2:1c:94:1a:4d:54:
b0:7e:54:ba:d8:a8:fe:2d:eb:35:60:7c:f4:a8:2e:d9:6b:ec:
1b:0b:eb:57:7f:7d:e5:16:32:3a:c1:a1:19:08:57:36:61:1f:
a2:15:04:2f:fc:db:7a:03:11:1c:84:9b:c0:6c:57:05:09:10:
c5:b4:35:96:5f:df:a2:07:e0:e3:1a:d3:67:f6:8c:11:f8:2e:
06:69:74:bd:86:a7:40:78:66:fe:0b:88:06:cb:60:93:e3:e6:
38:e4:65:f0:59:2d:fa:95:59:a0:2b:09:06:a1:a3:97:ff:41:
b4:ea:ed:71:d3:02:28:a6:2d:b0:d3:b0:6e:26:0a:94:95:24:
84:22:30:50:a1:66:db:80:4c:c4:c4:9f:b5:87:18:73:06:6f:
23:5b:8d:f3:73:01:49:4d:d6:e8:18:ef:9e:be:7f:82:8f:9d:
4d:47:64:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 05:02:22 2025 by rpki-client