Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/sQ-_Qlt4gUrMM8qcGuuAFwtm9qI.roa
File: sQ-_Qlt4gUrMM8qcGuuAFwtm9qI.roa (raw, json)
Hash identifier: LDMj7LGQR+LnME9YeAJMliMZKj4CX/k8FUVUGClb/ac=
Subject key identifier: B1:0F:BF:42:5B:78:81:4A:CC:33:CA:9C:1A:EB:80:17:0B:66:F6:A2
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C22BC41A3E9955CCE1626C75E308FB35D
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/sQ-_Qlt4gUrMM8qcGuuAFwtm9qI.roa
Signing time: Fri 01 Dec 2023 00:16:52 +0000
ROA not before: Fri 01 Dec 2023 00:16:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:22:bc:41:a3:e9:95:5c:ce:16:26:c7:5e:30:8f:b3:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 1 00:16:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b10fbf425b78814acc33ca9c1aeb80170b66f6a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:0b:ee:0f:9d:c2:02:14:89:3d:95:80:ef:20:
4a:78:8b:c5:26:a2:e5:ab:08:28:0e:46:f0:d7:bf:
31:25:9b:6b:62:3a:d8:c2:99:5a:11:8b:4b:f8:61:
6e:95:38:77:4f:a4:44:cd:77:96:d7:75:45:ce:5f:
cb:f4:c9:67:c6:b6:bc:72:08:b6:b0:65:a6:07:cf:
54:d3:de:6b:e7:7a:b8:76:a3:b0:bf:46:f9:94:26:
b0:5d:3d:80:1c:10:03:70:a8:7a:08:db:61:0c:69:
7f:e2:e6:4f:46:df:09:65:5a:19:e3:c2:ab:12:26:
52:eb:42:4d:26:fa:99:ce:c1:cd:89:24:92:ab:4a:
21:ac:89:f8:15:c3:8f:d2:06:73:d9:8c:26:36:03:
58:40:61:2d:61:15:1b:03:72:6b:26:7c:c7:3a:b6:
22:4e:5b:3a:dc:5c:26:34:62:75:ae:41:fc:b3:ca:
67:cf:49:e6:d1:b1:98:8b:0d:f5:84:fb:a8:c7:7a:
3f:51:8e:c2:7f:a5:0b:c1:a1:9a:f3:9c:5e:40:18:
11:d0:b3:14:60:c0:24:49:5a:81:0a:8f:60:3b:52:
88:81:7b:9f:23:04:56:2e:cc:d7:d5:e5:35:43:13:
96:a8:cf:be:8c:36:45:76:23:09:cb:28:b4:aa:a9:
8d:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:0F:BF:42:5B:78:81:4A:CC:33:CA:9C:1A:EB:80:17:0B:66:F6:A2
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/sQ-_Qlt4gUrMM8qcGuuAFwtm9qI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7e:9b:76:b8:5e:f1:4a:7e:8f:47:eb:5c:ba:6c:a8:bb:0a:66:
a0:53:c4:c1:14:c1:c3:88:e1:ce:0a:da:c3:86:43:64:90:13:
fc:00:39:fe:4c:8c:b3:bf:da:18:4d:7b:3e:07:6d:b9:9f:20:
2e:57:51:3e:ce:1a:3d:1f:16:63:04:ce:cc:46:a1:ae:6e:cd:
c5:5b:00:8f:ac:eb:4d:c2:7e:e8:5c:c3:ae:29:a3:0f:9b:ba:
cd:11:d1:f6:2f:43:07:57:70:56:71:5a:e6:63:25:7f:a3:23:
fa:ea:71:c6:36:3e:10:af:1a:09:ba:9c:ce:cf:3e:30:6f:ac:
34:53:ba:4b:83:1c:bb:b0:b9:a4:55:49:2d:72:19:6a:84:90:
ba:a3:8a:7f:20:55:07:39:92:c1:22:71:57:50:94:6d:7b:93:
cd:62:59:4c:89:e8:23:b7:ad:3d:1e:53:ca:5e:26:4f:02:89:
de:42:62:ca:26:7b:6f:8d:5d:a7:3a:21:df:05:a5:60:a0:f7:
65:fa:24:0e:bb:18:34:4a:74:18:9b:a7:bb:74:10:e5:bf:b9:
c0:59:6a:fb:52:16:9d:72:60:43:83:8d:eb:34:37:97:97:62:
8a:f4:6c:91:a4:31:10:17:22:8d:7a:4d:fb:76:11:8b:e4:4e:
77:41:56:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 06:02:13 2025 by rpki-client