Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Q0xNiMIqPyzFkzTQVYBlRi70AbQ.roa
File: Q0xNiMIqPyzFkzTQVYBlRi70AbQ.roa (raw, json)
Hash identifier: KOBDowkRdhq3OOwInSRrxBi3rMVMIvNJIlojuSVDZwU=
Subject key identifier: 43:4C:4D:88:C2:2A:3F:2C:C5:93:34:D0:55:80:65:46:2E:F4:01:B4
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B3A51B6EE9296A5B595E2914E80922C12
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Q0xNiMIqPyzFkzTQVYBlRi70AbQ.roa
Signing time: Mon 16 Oct 2023 21:08:35 +0000
ROA not before: Mon 16 Oct 2023 21:08:35 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:3a4d:d195/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:3a:51:b6:ee:92:96:a5:b5:95:e2:91:4e:80:92:2c:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 16 21:08:35 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=434c4d88c22a3f2cc59334d0558065462ef401b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:7b:44:9f:ce:86:5e:f1:77:37:10:32:bd:b2:
81:45:eb:1e:b8:d8:ad:7d:22:39:16:9b:1b:be:2c:
ab:37:a6:9c:cc:5f:20:db:6d:a0:0d:c6:48:d6:71:
a2:f5:1a:8b:0b:8f:59:4c:ca:2a:82:fe:1f:a9:bd:
9d:31:5b:d7:2d:63:68:d5:12:68:2d:7e:99:24:d5:
e2:ab:1f:a6:f2:50:8c:57:bc:81:e4:e4:88:7f:fe:
68:f1:d2:cc:e4:af:1b:ff:1a:24:3c:65:24:c1:b8:
6e:83:2c:22:c0:92:d8:f1:c7:f2:2a:1f:32:db:ee:
4f:34:54:fa:8b:a8:53:63:30:96:55:b7:58:01:70:
80:e5:b7:cc:53:08:4d:0c:e1:dd:7d:3f:b0:70:dc:
fb:56:2e:ee:9e:cd:fb:2a:6f:5c:a1:d1:55:24:5f:
80:04:df:96:98:78:d4:73:47:7d:da:dc:b7:50:72:
84:a9:e2:0d:2e:f1:55:d2:40:ea:c8:1e:c5:5e:98:
b5:1e:01:a3:16:27:b7:3f:a5:a5:3d:c8:30:60:1b:
eb:43:1b:77:dc:99:82:0e:4c:ac:e9:96:e0:58:86:
a0:81:91:4d:45:2d:f1:5b:9a:a6:d3:bd:d6:82:fe:
75:a4:35:f5:7e:e0:3c:4a:c5:a8:16:77:57:db:8a:
83:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:4C:4D:88:C2:2A:3F:2C:C5:93:34:D0:55:80:65:46:2E:F4:01:B4
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Q0xNiMIqPyzFkzTQVYBlRi70AbQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
84:e4:43:80:95:ec:91:e8:32:3d:c3:52:31:54:0c:10:8e:5d:
83:ab:06:06:ac:b9:f7:6d:5b:5f:5f:59:4f:8c:5c:0c:c5:72:
bd:bd:41:94:83:68:4e:86:65:c9:2e:2c:f3:52:af:64:e6:0e:
20:2c:5e:59:6e:d1:ce:7a:ee:bc:9f:b6:47:56:ed:a0:97:c5:
75:c6:c7:d5:59:e6:8b:ab:aa:ca:e2:4c:85:43:fd:5d:63:af:
63:88:64:c8:88:e2:62:b4:4a:31:c3:f0:7f:02:7f:f5:29:7e:
f0:4a:45:8c:e7:d2:5a:26:87:82:b7:59:9f:5f:2c:eb:0f:37:
d6:46:cf:fe:60:9a:c3:53:62:c1:9e:12:bb:1c:dd:37:31:a7:
0c:16:c2:8f:f1:a5:78:30:73:4f:6f:94:1d:94:56:c9:cd:e5:
56:e0:6f:3e:e2:23:89:2e:fd:cf:9c:30:db:bb:8f:48:ea:fe:
6e:c1:21:73:1d:fa:bf:7b:08:49:0f:7b:91:fd:06:d5:08:22:
85:ad:46:0a:20:ed:48:2c:fd:c0:5a:e6:d3:a8:2f:f6:63:42:
4e:c0:39:44:d3:44:54:74:35:ea:ca:14:31:5c:f1:f4:46:5e:
6d:d6:60:23:a4:e4:86:13:16:0c:d2:a9:fa:f8:09:73:45:e9:
15:c3:b3:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 12:22:36 2025 by rpki-client