Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/qkJWRZxPa0uamo8SWT5rZYI3VFI.roa
File: qkJWRZxPa0uamo8SWT5rZYI3VFI.roa (raw, json)
Hash identifier: EhMGVAnwDMsWBr+ML8UOlzkRFrH48Ms58PjTrKNnLDc=
Subject key identifier: AA:42:56:45:9C:4F:6B:4B:9A:9A:8F:12:59:3E:6B:65:82:37:54:52
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AEFD9248716EA31174772D6B936F8DC20
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/qkJWRZxPa0uamo8SWT5rZYI3VFI.roa
Signing time: Mon 02 Oct 2023 10:04:59 +0000
ROA not before: Mon 02 Oct 2023 10:04:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18a:efd8:a139/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:ef:d9:24:87:16:ea:31:17:47:72:d6:b9:36:f8:dc:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 2 10:04:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aa4256459c4f6b4b9a9a8f12593e6b6582375452
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:9c:ff:4e:99:19:6a:26:4f:da:e5:82:01:39:
da:7c:d9:33:5f:37:cd:eb:eb:71:b1:ab:a5:1b:10:
fb:2d:e7:2f:b6:ba:84:83:20:df:9e:28:77:d4:66:
26:04:b7:ea:f5:fa:e2:5b:01:bb:95:a6:a2:df:5d:
5d:e3:9f:3f:14:a8:96:40:82:b0:b8:3a:09:13:4d:
8b:d2:03:65:48:57:56:f4:16:13:e5:a2:3c:03:7a:
81:fc:5a:d0:18:07:ea:7b:37:78:1a:21:a8:b6:c9:
4c:94:90:fb:a6:c8:54:ec:96:b1:e7:2d:06:77:74:
36:82:c2:41:8b:1f:70:bb:42:a5:75:b8:6d:93:45:
cb:a4:18:ef:a1:77:b5:46:78:51:3f:4e:ef:4d:c7:
84:29:e1:ac:5e:41:54:31:f3:61:c9:5b:e8:99:c9:
8a:f6:a5:24:69:bd:15:7c:3a:5e:b4:86:f2:e3:a4:
93:92:aa:96:f5:70:ad:ee:b3:85:7b:01:8b:d8:8b:
f8:de:29:b0:e2:aa:a6:89:d7:a3:32:c5:01:30:d9:
c4:08:80:14:41:9b:16:b1:71:4e:a9:e8:35:b1:41:
6d:0b:15:4e:e3:b3:53:11:a5:88:04:05:ef:5d:fe:
18:17:40:1d:a4:12:d3:58:aa:b3:e7:f5:4e:de:4b:
d6:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:42:56:45:9C:4F:6B:4B:9A:9A:8F:12:59:3E:6B:65:82:37:54:52
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/qkJWRZxPa0uamo8SWT5rZYI3VFI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
31:4f:ec:98:01:f8:5f:08:46:c4:49:19:7e:4d:4c:ab:c4:84:
21:39:80:1b:76:10:f0:b4:24:23:74:bf:8f:22:15:63:2d:3a:
a3:60:4a:c2:79:4b:d2:4b:8c:e8:34:54:e1:fa:f2:8f:e9:95:
f3:53:7c:a6:6e:da:f8:0c:82:a4:9a:30:c1:05:44:2b:60:fb:
ab:82:86:2e:50:8d:fd:d8:ca:37:70:93:75:5f:2d:65:37:f8:
eb:fd:14:f2:5c:5f:dd:ae:7b:08:bc:ec:c8:f9:ca:fe:1c:7e:
62:f7:26:5a:ad:fb:32:8b:c8:50:4f:f9:5b:51:1e:91:56:f7:
fb:56:35:a6:68:57:2b:ad:00:41:0d:d9:89:82:f1:a1:4d:2f:
73:4d:49:20:ac:4b:43:fc:71:22:1b:19:b3:1c:87:e6:1a:59:
5a:8f:d8:54:f5:8c:28:c2:59:cf:a1:c0:ab:84:ad:3a:b6:18:
cc:15:a9:32:9c:e9:f3:3b:1e:29:28:b2:58:04:b4:e2:b0:85:
53:8c:23:06:db:a5:b9:26:b0:89:4c:ee:d0:fa:b7:8e:2f:e2:
fe:2f:0f:7c:28:9f:07:70:58:31:27:5d:99:68:9f:97:35:7c:
b4:90:3f:50:72:a5:63:8e:d8:84:b6:80:55:e9:7e:89:ef:81:
a2:ad:21:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 04:51:47 2025 by rpki-client