Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/qlMGbY4h-JzmjoiF5JRDq5-LxVo.roa
File: qlMGbY4h-JzmjoiF5JRDq5-LxVo.roa (raw, json)
Hash identifier: dmmBy3NtjCETrW4+iClt4Sruf/VeSG5qJ4Zt5XwVPgI=
Subject key identifier: AA:53:06:6D:8E:21:F8:9C:E6:8E:88:85:E4:94:43:AB:9F:8B:C5:5A
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C44A197DEC24C2F72C697A8C7B72A2383
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/qlMGbY4h-JzmjoiF5JRDq5-LxVo.roa
Signing time: Thu 07 Dec 2023 14:14:49 +0000
ROA not before: Thu 07 Dec 2023 14:14:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:44:a1:97:de:c2:4c:2f:72:c6:97:a8:c7:b7:2a:23:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 7 14:14:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aa53066d8e21f89ce68e8885e49443ab9f8bc55a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:91:81:fb:24:66:0a:db:22:b2:49:3c:8d:9e:
41:3c:98:f9:06:7a:79:cf:47:20:ed:f7:13:a9:2a:
f3:e1:73:a2:fd:4d:de:63:e7:51:b2:88:6f:0b:ec:
3b:e3:a7:3b:24:31:d9:7f:73:aa:5b:8a:6b:4c:bf:
f9:17:af:b9:d2:9e:93:9b:e6:62:fc:07:64:d8:d9:
25:a5:77:72:9a:db:eb:02:0c:1c:27:ff:2a:6e:5a:
7c:a3:75:04:dd:8c:7d:20:90:f7:f8:cb:fd:83:87:
3d:74:42:f8:ea:8b:49:eb:a8:b0:73:69:c1:97:0b:
e2:7a:43:4e:7f:0e:ff:ce:b1:af:dc:f1:b8:e5:4c:
4c:91:8a:7b:5f:90:0e:42:bc:c5:4f:3e:7f:3a:91:
72:8c:af:97:36:81:80:2c:7c:50:6a:dd:67:55:cb:
3b:90:95:31:9c:2d:e2:33:4e:75:0a:cf:d3:86:e9:
c2:34:18:2f:b6:f4:8e:ac:4b:ba:3e:06:cd:a6:9e:
0e:1a:6e:14:08:d8:ae:d9:90:76:c2:fb:97:b0:96:
1a:72:bf:1a:a8:fd:be:d8:51:77:cb:27:3a:58:7e:
26:fb:a2:b9:e8:17:d9:52:d5:a0:01:e2:6c:12:85:
67:20:7e:94:31:6d:50:4a:cb:f3:64:fa:0e:35:48:
10:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:53:06:6D:8E:21:F8:9C:E6:8E:88:85:E4:94:43:AB:9F:8B:C5:5A
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/qlMGbY4h-JzmjoiF5JRDq5-LxVo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3e:d9:b6:84:01:5e:20:53:0c:67:50:52:9e:7b:d4:06:4d:84:
b5:4a:3c:1a:32:3a:0a:cc:73:ce:cb:1a:61:31:8e:f5:f4:9d:
9a:fe:6b:b5:61:33:05:c3:f2:5a:52:13:62:24:fb:e7:df:fb:
32:76:69:a4:89:ce:7a:f9:0a:57:9b:4a:ff:00:a6:1a:bb:9b:
14:2a:f7:6a:81:0f:e9:c5:8a:8d:83:6d:23:dc:65:96:cf:54:
cc:85:e0:e1:4a:1f:dd:2a:95:e1:10:a1:88:06:af:f9:b9:e0:
80:da:18:f9:30:8e:ca:c8:10:c1:4e:96:c2:e7:ec:ed:a5:0b:
ed:46:c6:f7:e8:24:b9:58:76:22:01:53:7d:e9:74:d1:b5:7b:
65:97:66:7d:7a:e2:3d:19:a1:c8:22:6f:41:e1:1f:d8:b0:9d:
9e:5c:04:7a:70:4d:29:91:b0:e0:24:c1:57:fc:d5:08:a7:6d:
7a:a5:39:03:49:6b:fd:06:d4:48:81:b9:e1:d2:81:df:cb:cf:
14:97:21:1d:06:df:49:da:e4:82:7a:7d:96:55:7f:c1:d3:73:
df:67:ff:5c:0b:c2:1d:0b:8b:c8:af:9a:25:5e:92:2f:ff:3e:
5f:59:3c:28:1f:36:d5:57:9e:f4:b2:9d:68:28:9d:8f:43:e0:
fc:de:bd:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 23:02:16 2025 by rpki-client