Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/qpgrYD4rrVtQq1s9z-ZtEbd7WtU.roa
File: qpgrYD4rrVtQq1s9z-ZtEbd7WtU.roa (raw, json)
Hash identifier: CHJxzdbNq283OVx4REePqtEPT48RgQzb90POe6QwEcc=
Subject key identifier: AA:98:2B:60:3E:2B:AD:5B:50:AB:5B:3D:CF:E6:6D:11:B7:7B:5A:D5
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B826C99F7068B2C82E9527B0D814E4233
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/qpgrYD4rrVtQq1s9z-ZtEbd7WtU.roa
Signing time: Mon 30 Oct 2023 21:10:37 +0000
ROA not before: Mon 30 Oct 2023 21:10:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:8267:59af/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:82:6c:99:f7:06:8b:2c:82:e9:52:7b:0d:81:4e:42:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 30 21:10:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aa982b603e2bad5b50ab5b3dcfe66d11b77b5ad5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:fc:c2:fb:2d:0b:d4:0f:0d:d9:fe:de:2b:81:
e1:0f:44:dd:dc:cb:b3:b9:2c:25:0f:99:d2:aa:4f:
ea:dc:42:bc:3c:a1:97:1b:da:65:5b:3f:de:9c:3e:
c6:90:cd:26:03:ca:b0:9b:cd:cb:23:f5:8a:a5:4c:
d6:d9:69:4f:56:4a:c8:c1:4e:84:73:24:35:4e:d9:
91:ba:51:1e:18:db:b7:bd:d9:0e:6c:67:92:82:6f:
5c:3c:be:69:e1:a4:75:53:40:67:20:7b:14:8b:cb:
b6:71:8d:19:a6:ac:db:a3:82:9b:a8:a7:28:d3:2b:
b9:06:ce:9b:2a:1b:86:2f:fc:47:59:65:d8:5d:15:
67:13:4e:78:d7:d4:7b:81:97:7f:55:8d:11:a9:9f:
1b:eb:b7:69:5e:6a:84:f5:22:ed:70:cd:dc:65:d4:
d9:3e:83:9d:d5:0d:68:24:88:63:e9:8e:5e:02:f2:
ee:93:af:cd:13:c7:cf:e7:fc:84:a7:48:d6:65:76:
7d:74:2a:9c:10:85:97:db:33:4b:1a:dc:fd:38:8c:
0a:e7:74:d9:40:42:2e:49:35:a9:5c:2d:c3:5a:65:
a0:1a:07:61:76:e0:df:cb:41:38:7a:63:1a:c3:04:
d5:03:9b:7e:f6:4e:03:45:dd:33:fe:84:68:25:cb:
e4:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:98:2B:60:3E:2B:AD:5B:50:AB:5B:3D:CF:E6:6D:11:B7:7B:5A:D5
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/qpgrYD4rrVtQq1s9z-ZtEbd7WtU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
ca:eb:5a:99:b6:7b:c5:03:d1:f1:54:43:02:4c:cc:ba:a8:80:
46:a5:b8:95:81:32:3a:4e:56:e9:0d:de:14:b9:53:1b:96:86:
34:b1:a9:6b:72:20:f1:65:59:51:0b:23:12:2b:4c:6f:9d:5b:
bc:95:71:38:1c:b4:66:89:63:6d:78:b8:0c:26:7e:21:48:4a:
1a:1a:a5:9a:8d:86:51:79:12:24:06:4a:01:9b:3f:da:38:27:
25:c1:14:be:22:4b:1d:7f:a1:93:c8:c3:2f:04:81:d4:23:b3:
93:f6:50:57:af:76:96:7d:ac:ee:58:0d:1c:06:50:e0:00:7c:
2f:9a:70:af:ba:47:c5:58:87:f3:ed:06:c2:e0:bb:ce:16:e3:
d8:06:9a:78:1f:1b:3b:84:38:bb:dd:59:fb:9a:b7:f1:c5:31:
2f:4f:16:af:2c:8c:66:60:91:07:02:a8:98:a2:5c:76:02:8a:
2e:77:17:f2:6b:3e:a8:bc:7c:c7:49:51:23:35:ea:7f:57:fc:
0a:ca:4a:c2:f1:b0:7b:18:81:12:c5:e4:6f:b6:f4:6a:7c:16:
d3:38:2d:53:3d:22:d6:80:da:cf:42:ba:1e:c1:79:56:dd:a9:
a9:87:6c:4e:66:92:3c:16:c3:61:a6:5c:f1:a9:e2:aa:d0:24:
d8:53:b7:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 19:52:00 2025 by rpki-client