Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QagmOl8ydEz0bsenGBACR8fvQ1s.roa
File: QagmOl8ydEz0bsenGBACR8fvQ1s.roa (raw, json)
Hash identifier: y4hleRRkah84c3YrpXpHmwIhkKZ0JEmbb8K516SEqDE=
Subject key identifier: 41:A8:26:3A:5F:32:74:4C:F4:6E:C7:A7:18:10:02:47:C7:EF:43:5B
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AE2C24FF4E8CD15263DE29753600A7D82
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QagmOl8ydEz0bsenGBACR8fvQ1s.roa
Signing time: Fri 29 Sep 2023 21:04:59 +0000
ROA not before: Fri 29 Sep 2023 21:04:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18a:e2c1:9d5e/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:e2:c2:4f:f4:e8:cd:15:26:3d:e2:97:53:60:0a:7d:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 29 21:04:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=41a8263a5f32744cf46ec7a718100247c7ef435b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f6:4f:95:45:95:49:e7:7a:69:e3:d2:51:15:
9f:08:f4:7c:aa:98:ae:59:94:8e:0f:69:53:d6:39:
f7:14:c2:0d:9a:ad:07:d8:24:37:94:68:ca:dc:f9:
37:1a:01:d0:b8:ce:13:6f:3b:f7:01:da:e8:c1:57:
a6:d0:d1:b3:2c:6f:b4:e0:26:27:94:a9:11:b1:8d:
b8:7d:6d:cc:ec:cd:90:ac:22:5d:dc:9c:07:4b:b0:
f2:f1:89:f0:67:79:fd:25:2e:25:f1:f4:f2:76:75:
c5:71:be:e3:6a:1f:ec:b2:b4:c3:15:7d:e6:88:fe:
2e:97:89:75:26:b9:c9:74:a7:8f:32:56:c1:d0:8b:
a1:91:0b:56:43:65:22:48:84:87:b4:ff:fe:25:ec:
87:dc:0d:e7:8d:72:2b:72:02:e7:e8:a0:ec:11:f8:
6f:32:ee:b1:e0:eb:44:ff:44:46:46:d9:99:b9:e7:
2b:92:f7:0c:a9:66:c1:4f:04:a8:12:8a:b6:ab:a0:
80:5e:75:cc:7c:08:6d:5b:20:af:0f:eb:a2:d5:15:
d3:1c:3b:f7:e2:76:5f:0d:17:0a:f3:29:fe:d6:45:
71:d2:30:d7:06:ba:a2:b4:7f:b5:e6:0b:7f:1b:21:
39:07:4f:6f:ec:8e:ff:3c:b5:79:62:40:10:a1:75:
fd:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:A8:26:3A:5F:32:74:4C:F4:6E:C7:A7:18:10:02:47:C7:EF:43:5B
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QagmOl8ydEz0bsenGBACR8fvQ1s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3a:3e:91:92:8d:ef:ee:30:a9:6c:e0:b7:c3:b3:4e:b6:3b:7a:
bc:34:19:8f:79:bd:e2:24:02:69:56:7b:1e:18:e5:20:8d:5a:
3b:4f:17:10:6b:40:15:57:e6:55:79:e8:e8:99:e5:9c:0c:c6:
f0:2b:8b:db:0c:7a:4b:52:ef:fe:67:8c:7c:fc:c0:6c:ec:bb:
9c:41:7c:7f:b7:8d:8f:31:c3:f6:45:82:0e:9c:37:52:de:08:
0e:23:a1:37:ac:a1:3f:29:60:1f:ab:d2:83:81:90:b9:77:88:
88:06:2d:a4:d8:12:e7:30:c4:1b:c0:ff:23:af:9b:ca:df:cb:
32:99:8e:5a:2a:ca:d4:28:39:26:9e:97:9d:21:35:a1:81:b7:
02:67:d7:c9:df:98:c9:96:e9:93:77:21:25:25:4a:1e:47:37:
87:a4:c6:ea:be:18:36:f2:2b:fd:3b:4d:e2:ff:83:c6:b3:65:
45:0f:29:12:a9:2b:e4:9c:39:de:6d:d4:e3:b2:44:7d:1f:33:
f7:f2:4c:bb:eb:97:28:23:ff:14:b9:45:01:1d:86:87:b3:41:
60:6a:dd:42:e7:44:af:7b:a0:ae:54:1c:6a:63:89:7f:43:39:
69:fb:d8:2a:38:5a:ac:09:69:58:f8:70:41:3a:a3:43:18:87:
fe:d4:cd:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 18:20:31 2025 by rpki-client