Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/0UPkzPNL_CCrl_IyqH3a4RCmrlQ.roa
File: 0UPkzPNL_CCrl_IyqH3a4RCmrlQ.roa (raw, json)
Hash identifier: jMtx700DGfVECK+8N5ptcBjjIU7iMQm4Nu+9Kpstra4=
Subject key identifier: D1:43:E4:CC:F3:4B:FC:20:AB:97:F2:32:A8:7D:DA:E1:10:A6:AE:54
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B7855933D4DD014E73576D95F5E247026
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/0UPkzPNL_CCrl_IyqH3a4RCmrlQ.roa
Signing time: Sat 28 Oct 2023 22:09:16 +0000
ROA not before: Sat 28 Oct 2023 22:09:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:78:55:93:3d:4d:d0:14:e7:35:76:d9:5f:5e:24:70:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 28 22:09:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d143e4ccf34bfc20ab97f232a87ddae110a6ae54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:7f:cb:83:d6:3a:50:54:25:0f:c3:3d:07:ae:
32:8f:46:a1:d2:4f:2c:c0:42:d2:01:bc:92:8b:5e:
f1:9d:13:64:01:28:b0:9c:45:db:1e:85:8a:cf:74:
e9:a8:70:af:06:c2:36:3e:1b:03:77:f4:32:a1:fc:
e7:c6:55:48:aa:a4:bc:35:f8:62:e2:21:13:6b:c0:
00:0d:49:b5:ce:e4:e9:cc:da:46:35:c7:80:94:14:
9c:ee:7c:c1:cd:df:04:e4:52:9c:8c:92:2b:b2:79:
97:9a:0c:ac:dd:b2:53:e3:66:b1:f1:74:a8:99:e5:
44:0f:bc:85:5e:0c:80:f7:5c:d5:44:31:77:e0:c9:
a2:54:04:53:7d:da:51:84:4c:ed:a1:ec:81:20:93:
d2:d7:22:af:d6:bf:41:a6:65:db:e8:a7:21:3f:b9:
1f:6a:f4:00:bb:ec:3d:8f:65:9c:0d:bd:80:e2:b6:
a3:dd:40:02:99:03:b0:55:ce:f4:54:9f:54:d4:80:
5f:68:51:12:d6:9a:f0:c9:8e:7f:cb:15:4a:43:cf:
7d:4d:b0:ab:7f:a7:0e:97:b0:f3:37:01:c4:73:ae:
fa:43:18:11:3c:f8:ed:9c:52:5d:42:83:15:f5:12:
32:04:b5:32:26:7f:29:85:8a:0e:a6:1e:fa:68:45:
ab:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:43:E4:CC:F3:4B:FC:20:AB:97:F2:32:A8:7D:DA:E1:10:A6:AE:54
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/0UPkzPNL_CCrl_IyqH3a4RCmrlQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
12:a6:07:e2:9f:11:cf:ec:b0:3e:4b:00:a4:e1:2b:35:4b:b0:
4d:43:3d:2b:84:ae:f2:dd:cc:f2:16:05:98:75:e1:0d:ea:77:
49:5b:d2:94:01:1b:c6:b2:14:a6:0e:ab:5c:4d:5a:32:b0:c4:
45:37:e8:60:7d:74:15:9a:23:59:f0:cc:16:47:11:2e:ef:f1:
61:32:17:d6:a5:ab:d4:6e:81:d8:a3:1c:a1:fa:f2:6c:94:ae:
c5:98:27:0c:0a:86:b8:a8:81:a5:f1:8a:c5:88:f7:dc:be:62:
12:41:72:59:44:ff:ab:b8:91:f3:b5:1d:61:e0:84:8c:08:ad:
fb:00:d7:f8:07:61:45:16:bf:a0:81:66:00:d0:33:6a:61:10:
1e:01:0b:d8:cf:57:8f:29:ab:14:bc:2d:bf:68:b6:18:94:dc:
a4:33:bc:3c:f8:1a:47:32:87:26:86:9f:a9:e5:34:0e:5c:17:
ea:33:a3:c7:9d:6b:cb:a2:e8:6c:aa:16:32:6f:27:db:79:f3:
e3:21:a1:91:2b:98:ca:fe:bd:93:e2:fa:0e:4b:47:54:76:6e:
87:dd:8f:5b:43:7e:17:65:f2:87:f3:66:01:c0:3b:ae:32:71:
41:1d:6c:5b:61:c7:68:6b:5d:80:26:89:1f:35:0e:22:fa:cd:
ea:78:07:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 10:48:40 2025 by rpki-client