Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/4Q4c-4tctN25zY40n1ncI4aRX6Y.roa
File: 4Q4c-4tctN25zY40n1ncI4aRX6Y.roa (raw, json)
Hash identifier: azlDX7YA996DHOMCw3SvPPd5ymKYwqWM3woHwe7+Pzs=
Subject key identifier: E1:0E:1C:FB:8B:5C:B4:DD:B9:CD:8E:34:9F:59:DC:23:86:91:5F:A6
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BDE06AE725E701B4028108C7D64C00819
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/4Q4c-4tctN25zY40n1ncI4aRX6Y.roa
Signing time: Fri 17 Nov 2023 16:04:21 +0000
ROA not before: Fri 17 Nov 2023 16:04:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18b:de06:a917/128 maxlen: 128
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:de:06:ae:72:5e:70:1b:40:28:10:8c:7d:64:c0:08:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 17 16:04:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e10e1cfb8b5cb4ddb9cd8e349f59dc2386915fa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:10:8b:38:c2:af:ae:29:cc:43:f0:6e:ab:6e:
04:e1:b4:a1:09:fc:ad:6c:2b:e6:79:01:e0:c0:29:
86:08:5c:15:77:a0:bc:71:e3:1e:c3:f8:8d:17:a5:
ec:4e:6f:ee:14:29:f7:1e:23:a7:15:df:25:80:87:
11:09:6b:7c:99:85:22:c1:ad:75:b1:89:2c:e9:9f:
ab:2b:a2:b3:e5:59:52:2f:5b:6b:87:d5:e3:71:2e:
24:92:0b:dd:aa:74:59:3b:ce:8d:9e:dc:41:a7:d8:
65:f0:17:40:af:40:67:4c:cf:52:9b:44:a5:9a:48:
20:93:5b:73:7b:df:96:de:ec:5a:24:c2:53:fc:32:
89:45:80:17:b4:2e:e5:dc:a2:45:0a:8f:d2:3d:f3:
f4:a2:b2:0d:9d:28:86:78:69:b0:fa:44:67:06:11:
62:8a:5e:8e:d4:6e:78:4e:b6:3e:2f:c5:2d:47:8f:
7d:16:06:db:e2:c0:fe:15:6f:42:92:f8:1e:05:68:
be:b6:7c:94:f0:51:79:75:cc:8a:06:0b:da:2e:84:
0f:fe:8f:78:b8:f6:77:77:9e:a6:f5:89:9a:20:8b:
75:2c:01:f3:de:3c:43:7b:9b:84:12:fb:07:aa:ac:
c0:81:67:5e:17:c3:b6:c9:82:b7:b3:77:aa:ab:a4:
f2:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:0E:1C:FB:8B:5C:B4:DD:B9:CD:8E:34:9F:59:DC:23:86:91:5F:A6
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/4Q4c-4tctN25zY40n1ncI4aRX6Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
07:87:f2:5b:2b:82:46:b4:23:bd:4a:d2:37:11:38:29:42:10:
33:e1:44:7c:27:2d:43:0d:8d:2c:58:1a:22:48:ce:67:19:7c:
27:a1:18:5f:10:a5:f1:a5:dc:d2:b5:19:d0:1d:74:9e:0e:b5:
e1:54:cb:06:3b:24:16:4c:6d:e4:14:a0:fc:03:d4:80:71:f9:
6a:e0:12:8c:23:b0:bf:f6:be:3f:ac:d4:16:ab:f6:01:7c:7e:
c3:b1:c1:ee:ed:f6:1e:a4:c4:fc:ae:25:1e:72:7d:e7:a5:b5:
f9:fc:a1:e6:1d:5c:87:02:6a:ea:9a:0d:f0:87:05:2a:1b:bc:
af:d1:c5:6c:b0:2f:6a:6f:cc:58:cd:74:00:81:36:f3:a5:32:
7e:84:02:a1:04:d1:83:54:5d:c5:08:cc:3e:95:31:6d:a6:5e:
53:d3:25:11:1b:9e:9f:35:0c:24:01:f7:4c:4a:c1:db:49:c7:
a2:49:4d:b5:b4:18:80:a3:73:3c:cf:f5:1d:7f:fe:b5:6c:d4:
91:15:2e:21:86:68:ad:92:50:f8:ab:45:ee:2d:73:fa:ef:f0:
93:5a:cc:8c:23:fd:68:ed:49:dd:43:0d:95:ea:42:f8:e1:5a:
b3:ac:68:d2:0e:ff:d3:ff:8c:9b:3b:74:0d:40:f6:e0:d8:0f:
5b:8f:a7:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 02:51:54 2025 by rpki-client