Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/CUDRAV3x_RyZZhThqvmhB7_QUek.roa
File: CUDRAV3x_RyZZhThqvmhB7_QUek.roa (raw, json)
Hash identifier: 0mUJSyMGCAuf4O3T0DhRijsn/0Y9SuiRmdSDpQigSrI=
Subject key identifier: 09:40:D1:01:5D:F1:FD:1C:99:66:14:E1:AA:F9:A1:07:BF:D0:51:E9
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AEFE24C13C6C6CA2A5A1ADB0D7EEAC163
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/CUDRAV3x_RyZZhThqvmhB7_QUek.roa
Signing time: Mon 02 Oct 2023 10:14:59 +0000
ROA not before: Mon 02 Oct 2023 10:14:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:ef:e2:4c:13:c6:c6:ca:2a:5a:1a:db:0d:7e:ea:c1:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 2 10:14:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0940d1015df1fd1c996614e1aaf9a107bfd051e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:1a:6a:a8:0c:e0:e0:ed:51:46:be:bb:b5:2f:
03:13:7a:f5:1e:30:64:82:84:a4:1b:37:30:df:85:
8b:6a:f4:b7:31:2a:41:cb:91:a2:c6:d6:fe:8d:8b:
2f:ee:cf:a3:d1:27:5a:0c:98:9c:42:27:dd:f9:ff:
75:cc:32:2d:e0:7e:79:0c:7b:8d:33:b3:a7:07:77:
db:41:da:6f:c2:8f:24:77:6d:9c:bc:6b:20:c9:45:
1b:ba:73:f7:c0:88:b8:6c:c8:27:ab:6e:42:61:5c:
0b:69:bb:1e:2e:55:1b:e2:97:43:a6:e1:fa:7b:bb:
4a:76:dc:8b:f2:c4:e1:98:c3:f3:7c:f1:80:c2:75:
cf:e6:b4:0a:47:58:20:bd:63:9f:03:04:63:5c:53:
cc:5f:c1:db:bf:4c:85:4b:0e:8f:07:df:31:0b:0d:
b8:41:3e:b8:38:60:a2:02:71:b8:6b:5e:09:99:7c:
14:f1:41:00:47:e2:65:a8:2c:03:1f:90:f2:8a:62:
e9:37:32:1c:03:33:85:90:23:49:22:9f:e7:b1:27:
d9:c8:7d:fd:c1:ff:11:b0:9d:fa:c3:ab:4b:cc:fd:
c5:7e:5d:a2:f1:ad:c4:3d:d0:3c:73:a4:ec:57:a7:
54:23:8e:b3:21:be:a2:f2:d7:0b:c9:07:97:62:79:
31:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:40:D1:01:5D:F1:FD:1C:99:66:14:E1:AA:F9:A1:07:BF:D0:51:E9
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/CUDRAV3x_RyZZhThqvmhB7_QUek.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
43:67:4a:76:fe:60:1e:25:09:37:87:a6:5f:4d:95:95:f1:c0:
04:1e:06:51:93:fd:c8:7b:40:93:28:9d:e7:ee:ed:8f:1b:6d:
0c:22:c7:c0:96:6a:f8:d1:d1:3e:62:4c:29:bf:2d:e5:88:1b:
6d:6e:15:be:d3:47:1f:65:31:78:18:51:74:e1:98:1c:dd:bf:
21:e3:45:4a:26:3e:72:73:6f:b7:bd:8b:7f:6b:51:11:a0:8b:
f1:16:ae:86:69:23:55:c7:ba:fa:31:42:b3:3a:62:9a:8c:67:
34:de:67:d8:ba:29:e2:93:60:b8:c8:30:9c:3f:6d:72:18:6f:
72:65:48:b2:dd:ea:06:90:95:e4:fa:ad:e1:c9:cf:dd:50:f2:
41:66:c2:45:65:28:a5:5c:37:96:6d:70:fc:03:70:e0:f1:60:
5a:e1:92:fb:08:da:28:30:1f:ed:bf:9f:d4:9f:80:8b:fc:b7:
07:eb:1a:1c:03:5c:59:6a:e2:56:e9:f6:09:94:55:43:ee:60:
88:cf:b5:87:e1:40:31:27:20:63:10:cd:29:2c:58:fd:5d:dd:
99:f2:0c:da:8c:2e:0a:28:df:2c:03:c4:ca:2f:41:93:76:ad:
4e:d1:f5:34:7c:14:99:18:d3:e8:ae:0b:31:86:87:b4:ca:1f:
52:ab:1b:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 03:27:52 2025 by rpki-client