Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/2UIM5Pf7x4S2PakDLsPmTbA5IGU.roa
File: 2UIM5Pf7x4S2PakDLsPmTbA5IGU.roa (raw, json)
Hash identifier: KfXPwLWsUdymbuwpuDlEWN+NbjG2mlLgExeKAl+CgUE=
Subject key identifier: D9:42:0C:E4:F7:FB:C7:84:B6:3D:A9:03:2E:C3:E6:4D:B0:39:20:65
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BEE94A877C6215337F8D35A46E91F4E98
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/2UIM5Pf7x4S2PakDLsPmTbA5IGU.roa
Signing time: Mon 20 Nov 2023 21:13:21 +0000
ROA not before: Mon 20 Nov 2023 21:13:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:ee:94:a8:77:c6:21:53:37:f8:d3:5a:46:e9:1f:4e:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 20 21:13:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d9420ce4f7fbc784b63da9032ec3e64db0392065
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:1f:31:3c:df:43:b8:b1:58:56:57:19:46:6b:
36:2e:7e:26:76:63:9c:51:28:06:d0:e3:f0:73:22:
d1:34:17:63:22:23:50:48:f2:28:eb:3f:c2:93:1c:
6a:96:0a:26:2c:02:73:2b:97:d2:ed:b3:fd:d2:2c:
7e:48:5a:5e:aa:75:aa:bb:7d:6c:26:98:b9:91:37:
56:6a:fb:d7:91:bd:b9:66:f9:58:a2:ba:d8:87:64:
19:06:81:35:e0:7c:e7:ce:7b:11:f9:ae:24:fe:52:
cf:85:08:19:bc:d4:f2:fe:fe:75:44:9e:21:76:f9:
58:10:d1:da:21:3f:86:53:30:27:00:7a:e9:0d:e8:
9c:ab:f1:87:b1:fb:20:18:5c:c3:94:58:05:5b:de:
f4:8e:d4:93:07:72:ec:fe:c4:ba:f4:0e:03:0e:88:
d9:b1:e8:d8:89:7d:be:34:20:f4:98:59:42:c3:36:
24:23:e1:0d:2e:ee:ce:99:cf:2d:29:7c:52:ee:8c:
a3:fb:a8:79:07:4c:71:81:e3:b4:d3:4d:09:f8:83:
20:62:62:da:84:3b:bf:90:e4:cf:73:49:4f:0b:06:
d0:91:e9:84:6b:aa:91:e2:b2:1d:7e:18:25:78:29:
b0:89:ab:fc:c4:16:86:90:78:07:0d:cd:d7:88:bd:
f8:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:42:0C:E4:F7:FB:C7:84:B6:3D:A9:03:2E:C3:E6:4D:B0:39:20:65
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/2UIM5Pf7x4S2PakDLsPmTbA5IGU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
14:11:08:14:6c:fc:a2:5b:b4:89:07:aa:15:c0:dd:cc:3f:60:
a4:f3:1b:3e:4c:b6:82:da:d8:dc:22:a5:7f:f7:e7:d8:9b:ff:
eb:85:f4:4f:d7:00:2a:6d:32:cf:75:08:76:05:6d:75:8d:80:
07:20:cc:26:75:1d:e4:e5:b3:fb:4c:e6:3e:35:af:b7:5e:2c:
28:88:d4:4a:4e:0e:84:33:d5:78:db:9c:b2:77:4c:78:a0:16:
d7:aa:d9:dd:9e:a2:49:29:18:f2:55:6e:8f:7f:61:ed:7a:28:
c0:cb:c2:f8:33:2c:b7:82:43:2c:f1:68:a9:1f:f8:e2:36:21:
80:ad:61:29:1f:9c:3a:19:d2:36:6c:e6:2c:79:78:4b:98:bb:
87:63:79:e7:fc:b8:e9:10:4c:a2:f2:3d:de:02:25:9a:8b:03:
8f:cc:8a:59:ec:5e:34:ea:86:29:6a:86:2e:5b:d5:06:d9:5e:
50:62:0d:f1:e4:52:e8:87:40:a1:f3:74:99:e9:3c:2b:03:0f:
7e:a2:97:9c:61:71:80:df:0e:f8:88:82:2e:c4:03:fa:0f:f9:
6b:a3:32:be:72:3a:1d:2b:83:c1:5c:1f:73:af:a4:19:df:a9:
9c:bc:56:5e:21:57:f0:36:09:92:9b:63:ff:b4:dd:a3:30:4a:
a4:04:73:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:16:25 2025 by rpki-client