Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QizT5M8GpVm0vx99Yi4AAwUxMrw.roa
File: QizT5M8GpVm0vx99Yi4AAwUxMrw.roa (raw, json)
Hash identifier: +xFcDx1yA7B8xIzwlh5E3bcPkAY+6Yo5SYAfzdtt+JI=
Subject key identifier: 42:2C:D3:E4:CF:06:A5:59:B4:BF:1F:7D:62:2E:00:03:05:31:32:BC
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AFCEFF168CB1D2073BF3BEC361C78715E
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QizT5M8GpVm0vx99Yi4AAwUxMrw.roa
Signing time: Wed 04 Oct 2023 23:04:57 +0000
ROA not before: Wed 04 Oct 2023 23:04:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18a:fcef:5e6c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:fc:ef:f1:68:cb:1d:20:73:bf:3b:ec:36:1c:78:71:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 4 23:04:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=422cd3e4cf06a559b4bf1f7d622e0003053132bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:7a:f9:32:a7:66:ee:e2:99:77:d1:2f:b8:24:
bf:8f:c7:c1:a5:fa:8f:ae:ae:3b:5a:30:ae:95:31:
a5:c2:b7:0c:68:a1:0b:fb:e4:1b:8b:f6:c8:cd:3e:
08:e8:0c:ed:4b:d8:f7:81:72:85:21:ca:c5:8c:e7:
17:aa:4d:44:97:cb:4f:9f:bb:a5:5b:ea:53:a2:3e:
ec:74:86:8f:d7:5a:db:07:25:3a:5a:f5:d4:6c:0b:
9c:e3:c5:e2:b7:ba:18:27:f3:fb:a1:2e:f9:ea:66:
49:64:a2:6e:35:97:89:58:1f:65:e8:c6:91:a3:13:
1e:97:22:b8:7a:bf:c6:cb:bb:6a:73:f7:8a:bf:58:
91:28:a2:40:35:43:85:be:3f:21:c8:a3:f7:61:d7:
59:58:5f:24:0e:5e:ec:40:0c:4e:63:d1:0e:e6:ae:
a8:f3:37:bf:8a:af:39:3e:5c:19:ec:f9:63:03:ca:
1b:83:5c:3d:1f:36:16:e4:0d:82:b7:b4:27:ef:a7:
ea:8f:b3:8a:92:07:76:11:16:c4:71:cc:18:c0:1e:
be:32:5c:fd:17:1c:78:42:26:97:61:05:92:bf:ed:
6a:0f:1f:0d:44:e7:e1:4a:37:81:5e:d6:04:ba:c7:
22:c6:36:56:2c:d6:1e:3c:06:19:b7:e7:78:38:5e:
65:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:2C:D3:E4:CF:06:A5:59:B4:BF:1F:7D:62:2E:00:03:05:31:32:BC
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QizT5M8GpVm0vx99Yi4AAwUxMrw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9b:38:ae:56:e8:a1:b8:01:71:b5:b0:61:b9:69:bf:0a:29:60:
ad:dc:28:99:57:c1:f6:d1:07:d1:da:34:39:69:5d:99:78:b4:
88:69:d2:ee:cc:53:cd:96:0d:60:22:f2:ef:cf:0b:ea:a6:2f:
f6:fd:ee:80:47:f0:a4:e3:f0:5e:3d:b8:8d:a8:43:91:65:0e:
65:0f:52:de:7d:dd:9e:6b:40:65:c6:9e:d6:6b:dc:33:a6:40:
9f:db:21:7b:12:d4:0b:9e:22:80:f7:04:33:bd:27:39:f4:71:
dc:2b:b8:49:c7:a4:09:76:79:de:aa:bc:f3:51:b7:8a:6d:19:
a7:f7:8f:f4:aa:ea:ae:e2:b1:a2:c4:fa:71:ff:67:86:f0:fb:
e2:c5:d4:ff:86:b1:f9:99:ad:ee:21:7d:3b:aa:47:1b:c9:b5:
c7:a9:8e:e7:f3:c7:26:95:65:68:72:40:02:39:b7:1e:ca:71:
6d:cb:0a:51:65:c6:31:4f:eb:f3:61:f8:b1:5f:a7:2d:3d:72:
cd:6d:36:d7:63:bd:c0:a8:03:8a:ab:a6:6e:29:2d:39:d7:db:
91:aa:28:42:f9:5a:87:54:aa:2f:8a:26:47:98:e1:43:01:85:
e6:51:b9:e6:4e:7d:08:e5:e8:ce:1f:7c:d6:c8:70:92:c1:de:
aa:7d:33:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 20:08:02 2025 by rpki-client