Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/qeno3Bj4RQ7BxqNkBjotsGHhdJw.roa
File: qeno3Bj4RQ7BxqNkBjotsGHhdJw.roa (raw, json)
Hash identifier: eVDjIe/pHeVjgy7F+4BmkjwOxB0t4ijYLI9CF2DWWSg=
Subject key identifier: A9:E9:E8:DC:18:F8:45:0E:C1:C6:A3:64:06:3A:2D:B0:61:E1:74:9C
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C0D0DDC82C5687DCE85E18051B95D5861
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/qeno3Bj4RQ7BxqNkBjotsGHhdJw.roa
Signing time: Sun 26 Nov 2023 19:14:21 +0000
ROA not before: Sun 26 Nov 2023 19:14:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:0d:0d:dc:82:c5:68:7d:ce:85:e1:80:51:b9:5d:58:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 26 19:14:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a9e9e8dc18f8450ec1c6a364063a2db061e1749c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:9e:8b:33:c3:1a:73:9e:de:eb:c6:4d:ac:20:
08:0b:8a:82:7d:98:78:de:6a:74:fb:23:77:c4:14:
9c:2a:47:93:ce:8e:c0:b5:29:78:b4:37:ff:40:82:
fb:ab:0d:3c:36:51:08:99:d9:7c:c3:51:5f:5c:97:
af:9c:f3:9c:bf:e1:8f:d6:64:ae:4b:7e:dd:17:48:
29:01:c3:35:c0:a4:7f:11:ec:19:83:46:32:1e:b7:
47:41:3c:3a:fe:7e:f5:78:ef:4d:39:41:88:5a:86:
06:00:8d:04:ad:7b:46:cb:5d:dc:be:7b:a0:2e:bf:
d5:f8:74:e2:9a:44:8b:0c:a1:46:73:1e:66:64:97:
ef:e9:0a:22:f8:18:0f:d8:70:fa:71:2f:e1:de:bd:
16:fd:93:f1:d5:65:ac:7a:b6:72:2d:86:ff:25:2c:
79:f0:23:c9:24:e9:53:fc:cf:17:0f:94:4c:8c:c6:
34:e3:87:c7:55:fe:b3:a7:55:38:25:c7:16:87:74:
da:27:9f:11:2f:27:cf:b7:97:c5:a1:cc:f4:c5:9d:
d2:0b:c3:6b:f2:db:98:eb:55:82:66:b9:12:71:30:
65:dc:23:59:d4:f9:a3:d1:8e:b8:dc:ea:9a:f7:97:
b3:b8:70:8f:fe:37:10:8e:69:a7:7d:91:2d:71:9f:
7a:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:E9:E8:DC:18:F8:45:0E:C1:C6:A3:64:06:3A:2D:B0:61:E1:74:9C
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/qeno3Bj4RQ7BxqNkBjotsGHhdJw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2a:22:f2:fb:0f:62:62:f8:4e:88:35:f7:2b:4d:5d:89:b9:fa:
6b:d7:55:e9:6a:29:35:49:6f:41:57:fb:97:2e:da:c8:25:cc:
5a:ce:da:e6:73:50:c1:08:e3:ab:60:d6:20:d0:e1:01:3d:8f:
2a:88:ab:17:86:99:ef:74:11:7d:ef:a4:72:80:d0:59:a5:8b:
d8:9f:11:85:67:8a:7c:20:fe:24:a9:47:e0:85:20:1f:f2:bd:
a2:64:68:9e:8d:ee:16:a4:d2:d1:35:1a:b3:41:2b:21:c4:72:
cc:6c:09:ae:38:ca:4e:e9:05:ff:25:3e:52:fc:49:70:27:96:
4f:0e:1d:c6:23:65:eb:75:d7:7d:2b:69:8e:ef:6f:52:df:0a:
6b:4c:9f:97:e4:6c:5e:c5:83:98:3d:39:04:d8:f0:c3:7c:54:
b4:bb:ff:e2:39:11:2c:c2:d1:15:5f:4d:62:49:d7:81:0b:e2:
ce:e8:10:fc:0c:d0:28:8a:a3:0e:d1:c3:32:84:5f:c7:85:2a:
d8:f9:2e:22:9e:94:49:97:2a:73:57:7e:e3:90:05:e4:14:c5:
72:ef:e9:c7:f3:d7:63:d0:21:b9:73:99:84:fa:04:fc:bc:da:
f2:cb:bd:87:c2:38:71:a3:ae:57:f9:e8:6f:9e:17:da:ff:8f:
2d:c5:76:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:28:03 2025 by rpki-client