Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Q-YP4xaIoRsYAvEYxf_jXt3XAvg.roa
File: Q-YP4xaIoRsYAvEYxf_jXt3XAvg.roa (raw, json)
Hash identifier: RHC7ntfrH6UU5BQEdJl5bnM+QJzRMayknVqwuYKJGog=
Subject key identifier: 43:E6:0F:E3:16:88:A1:1B:18:02:F1:18:C5:FF:E3:5E:DD:D7:02:F8
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B18303A8C16CF5AEE8E5215C6909C75D8
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Q-YP4xaIoRsYAvEYxf_jXt3XAvg.roa
Signing time: Tue 10 Oct 2023 06:04:55 +0000
ROA not before: Tue 10 Oct 2023 06:04:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:1830:15e6/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:18:30:3a:8c:16:cf:5a:ee:8e:52:15:c6:90:9c:75:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 10 06:04:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=43e60fe31688a11b1802f118c5ffe35eddd702f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b2:78:06:3f:1c:f2:7a:89:9f:ad:1f:6b:41:
57:8e:2c:4c:86:48:03:b1:e7:d4:2d:7b:c4:c1:d9:
d7:92:2e:43:99:48:41:66:99:d5:31:8f:61:04:2b:
5e:97:8d:8b:98:99:69:7a:65:a2:52:48:ff:c0:90:
11:03:ee:56:3f:30:85:7c:75:b9:a3:b2:15:9d:36:
02:b9:a9:e0:b2:6e:bd:d2:c4:18:f2:4e:cf:99:d8:
d1:de:3a:37:09:d9:76:31:cf:0e:52:d6:85:d3:3c:
0f:f3:ea:5d:06:40:f8:91:fb:ae:b7:f4:2b:7f:f5:
ea:48:10:81:d5:b0:f0:c3:1e:cd:16:95:c5:20:cc:
6f:f3:96:44:74:8e:7e:19:f4:40:31:83:f1:01:3d:
fa:b3:95:28:e2:23:7e:b8:45:31:5b:b2:09:16:5b:
97:84:b2:69:e2:9c:05:35:58:96:2b:aa:61:64:7e:
60:f2:00:f6:d3:2b:50:64:76:01:dc:b4:36:e3:2a:
f3:20:69:7d:33:2e:06:ed:be:16:21:dd:a2:1e:bc:
d2:91:d1:5e:22:d5:e1:34:2e:3a:57:86:d1:e3:aa:
5b:71:20:33:da:7f:a6:48:59:fe:9c:04:35:d0:c8:
3a:8e:9e:7e:2c:b7:15:fe:ad:03:91:ca:18:73:ae:
4a:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:E6:0F:E3:16:88:A1:1B:18:02:F1:18:C5:FF:E3:5E:DD:D7:02:F8
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Q-YP4xaIoRsYAvEYxf_jXt3XAvg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
71:60:df:a4:9b:a4:99:4e:0a:aa:91:19:92:09:0e:ee:7a:52:
e2:7b:f3:8f:45:4b:55:14:cf:ea:be:33:49:0d:d8:22:88:66:
16:b5:8f:3f:92:a9:93:6d:fe:a5:3f:8f:21:a6:16:e9:55:7b:
6d:5d:46:f1:01:92:31:db:65:b3:0a:8c:6f:4e:f2:23:5f:ea:
ae:7c:a0:ec:66:16:0a:74:17:49:a6:e3:a9:2b:e5:03:99:6e:
8f:16:38:3d:de:82:8a:ec:75:89:50:67:4a:69:8e:e8:d0:31:
8d:b6:2b:2a:aa:bc:52:ea:bb:3b:d1:d7:af:a4:7f:b9:cf:6b:
d7:0a:26:a7:6d:76:3e:ef:a9:81:fc:1b:af:6a:76:51:f4:75:
62:63:04:a8:2d:b5:1b:0c:d5:1c:43:5a:50:6a:7c:d1:ed:df:
f2:37:8c:f5:8c:42:3b:a5:05:f6:76:c3:d7:db:fa:f3:4f:7f:
73:b6:83:38:ae:0c:31:e7:45:82:a3:b1:2a:74:6c:fe:d7:a7:
99:21:90:7a:09:99:7e:9b:01:8b:65:bc:0e:f1:44:01:e0:ec:
27:92:6d:59:ed:b5:d9:e4:e8:5e:5e:b9:56:76:61:79:c8:e1:
41:5a:3c:67:4f:be:fe:78:d0:46:35:2f:c4:3e:59:4a:55:d2:
69:e3:27:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 04:39:06 2025 by rpki-client