Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/qz_Ko9t7Ueh3W_o7Kl28Y-7e5UI.roa
File: qz_Ko9t7Ueh3W_o7Kl28Y-7e5UI.roa (raw, json)
Hash identifier: mDbqvHK+JIKocDZFGGN/tf2EgVFCvQeGr3EK/KoJrJ4=
Subject key identifier: AB:3F:CA:A3:DB:7B:51:E8:77:5B:FA:3B:2A:5D:BC:63:EE:DE:E5:42
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B10AD701D3070CA577D0CCA93AE9E1550
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/qz_Ko9t7Ueh3W_o7Kl28Y-7e5UI.roa
Signing time: Sun 08 Oct 2023 19:04:43 +0000
ROA not before: Sun 08 Oct 2023 19:04:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:10ad:3064/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:10:ad:70:1d:30:70:ca:57:7d:0c:ca:93:ae:9e:15:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 8 19:04:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ab3fcaa3db7b51e8775bfa3b2a5dbc63eedee542
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:f9:24:2e:0e:df:f1:eb:99:62:c7:0d:33:03:
d1:be:0f:0b:ea:0d:79:70:26:6d:dc:76:77:db:2a:
ea:41:e3:f6:69:db:f8:cb:7f:de:05:f3:29:82:e9:
64:06:71:85:ba:7b:58:86:a5:3e:ea:d5:e5:bf:a2:
3d:d8:e1:79:e5:28:aa:bf:a1:51:09:b3:1a:ca:5b:
8b:d4:cc:09:ba:bd:64:7b:f0:58:1e:70:fa:a8:29:
50:a7:96:f0:f1:77:a3:77:af:6c:fb:33:8e:39:19:
b0:34:1c:5b:b1:42:29:8f:2a:12:90:c2:02:90:3d:
9f:0c:f1:ed:40:e7:f1:23:40:c2:26:8d:d3:81:0b:
bf:c0:b6:47:97:63:32:42:42:61:b0:05:fc:be:75:
01:b8:83:c8:f0:26:a1:f8:cd:86:ba:a2:43:39:44:
28:86:52:86:07:76:09:ab:35:06:d2:50:b7:10:e5:
ef:60:91:c5:96:76:5a:13:30:24:66:71:b0:8e:94:
13:6f:ab:1c:fd:90:19:5d:8d:a4:50:48:18:55:74:
62:2a:5a:c2:fb:5a:1e:98:55:40:79:35:00:2e:dc:
95:9e:b6:90:06:36:10:f3:93:cb:a6:41:02:6a:6d:
77:12:32:e9:38:ae:86:c2:df:c3:49:1c:8e:68:23:
a1:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:3F:CA:A3:DB:7B:51:E8:77:5B:FA:3B:2A:5D:BC:63:EE:DE:E5:42
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/qz_Ko9t7Ueh3W_o7Kl28Y-7e5UI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
65:55:fe:58:72:9b:f8:82:2f:54:a3:46:f5:84:32:3f:04:0e:
be:11:dc:2b:b8:f2:ce:72:9a:7f:37:cb:4c:56:21:c6:b1:df:
a9:07:7b:9f:31:85:49:0a:dd:2a:fa:e7:54:d0:e3:a5:9e:88:
ab:d5:2b:64:69:0c:bf:3f:6a:1b:93:87:1e:41:f1:5e:05:78:
5f:b6:86:0f:93:f6:30:0e:53:56:b7:54:63:b4:bd:f0:ed:c6:
52:a6:ba:58:8d:c9:9f:89:dc:91:1d:04:a7:44:af:92:00:fd:
16:44:7e:b3:84:75:79:d9:96:9f:b6:f0:f7:16:ee:10:ea:d7:
19:4a:6c:8a:99:b2:ee:c9:66:05:fb:40:af:a9:f4:cd:05:d1:
38:08:45:f1:90:87:e2:e1:92:37:b4:64:60:4e:5c:b1:aa:b3:
ff:44:3f:bd:4d:9b:5d:4a:9d:c1:bf:90:7a:de:1b:89:37:26:
d9:7d:6e:e5:84:22:50:25:4c:03:ed:8a:65:07:7a:a1:77:83:
7f:e9:f9:8b:2e:a9:c6:ea:0e:1c:17:c4:64:52:3e:6a:2c:0c:
b7:6b:4a:03:26:ed:2c:cd:e1:e7:f5:c2:e0:96:e1:fb:6b:b0:
09:ba:35:90:67:6e:96:38:0b:52:72:4b:39:b5:08:54:45:82:
35:3d:ef:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 11:24:21 2025 by rpki-client