Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QKUJJk6Na7ZnGkVX_RC1gZWxdBM.roa
File: QKUJJk6Na7ZnGkVX_RC1gZWxdBM.roa (raw, json)
Hash identifier: l9bvOczHMYfdf3HD/xzNCUcTFE4NhR93jhZb1x3p2lM=
Subject key identifier: 40:A5:09:26:4E:8D:6B:B6:67:1A:45:57:FD:10:B5:81:95:B1:74:13
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B50D67E278EEF020A5509687835737ABE
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QKUJJk6Na7ZnGkVX_RC1gZWxdBM.roa
Signing time: Sat 21 Oct 2023 06:05:16 +0000
ROA not before: Sat 21 Oct 2023 06:05:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:50d5:c93d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:50:d6:7e:27:8e:ef:02:0a:55:09:68:78:35:73:7a:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 21 06:05:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=40a509264e8d6bb6671a4557fd10b58195b17413
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:8c:2e:d9:d4:36:58:4e:10:fd:2a:c8:35:7e:
80:ba:e2:3d:ed:be:20:87:01:13:4e:0b:4d:33:ce:
91:0d:eb:49:95:ba:0f:2d:6c:e1:2f:84:d4:3a:62:
a9:16:45:da:05:15:03:b1:56:15:48:0b:43:fb:04:
08:dc:6d:ef:a3:28:c4:26:3e:4b:95:bc:c2:28:24:
da:cc:3c:3f:ec:a2:e7:51:e1:22:28:9c:a2:e6:de:
bb:4b:72:48:5c:9a:f6:d8:2b:41:d7:db:d7:13:c0:
98:9c:d1:4d:b5:3d:19:f5:32:b4:9b:3f:be:27:15:
a7:8b:e5:f1:ba:ea:ca:2b:ef:8d:08:8b:53:96:a9:
f5:54:09:2c:6c:cb:9d:36:5e:a5:d8:98:f1:cb:a6:
4c:66:aa:6e:b9:10:08:9d:a5:1f:8a:f0:27:4c:13:
ae:64:ec:1e:d5:4b:e1:90:b8:50:e1:f6:c7:86:38:
7f:89:2e:55:5b:12:01:5f:13:57:6d:89:ae:19:21:
bd:99:65:f0:b6:c9:f0:5a:ce:b1:52:ae:7f:5d:7d:
b6:6a:49:26:90:62:b9:79:31:8a:e7:c5:63:7d:d7:
c6:e1:4c:55:57:c8:75:a1:cc:14:f1:43:ef:46:2a:
21:11:39:e5:ab:59:42:7a:51:ab:f3:b0:34:8f:2d:
57:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:A5:09:26:4E:8D:6B:B6:67:1A:45:57:FD:10:B5:81:95:B1:74:13
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QKUJJk6Na7ZnGkVX_RC1gZWxdBM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
85:04:79:5c:68:74:c7:e9:4a:59:4b:78:7c:09:8b:73:68:66:
53:87:56:97:76:26:12:f3:ef:a9:ac:58:85:9a:4d:e0:25:e7:
c1:e2:2d:f9:91:9c:6c:9b:ba:9c:46:ea:be:c9:81:dd:85:1d:
58:ee:46:07:63:1f:0a:29:d3:0b:ef:1a:ac:51:5e:06:b6:30:
bd:bb:2e:24:1c:be:ca:5a:94:d5:09:60:26:6d:09:0c:e4:2d:
8a:d9:40:2c:36:0a:98:63:d6:f5:4f:49:78:8f:88:b1:1f:7e:
a8:ef:d7:ee:d7:bb:93:50:00:f1:88:ff:e2:f5:65:a9:c5:93:
54:ef:6f:45:e9:2e:76:99:03:9b:66:f0:59:78:bd:aa:f4:96:
03:ab:e6:33:d1:a7:7c:a0:eb:76:a6:69:21:19:12:c8:02:83:
52:24:21:2b:85:a1:a3:c5:22:e3:54:9e:06:4f:8d:e5:e2:b7:
c0:5c:3b:77:f4:67:5d:da:70:9e:54:5c:d5:7f:d7:07:c7:a9:
ca:44:c0:37:4b:39:30:6f:49:0b:f3:bf:7b:50:fc:80:ce:10:
74:dd:a4:eb:4a:64:74:11:7c:f2:ba:b3:15:bc:f5:0a:5d:07:
68:f5:7b:8f:96:6e:13:c5:60:d3:6a:2d:f4:1b:45:7c:ac:40:
6d:1d:9c:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 09:49:44 2025 by rpki-client