Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/DMSUkrJEw45XI0WJ0LzkAIesgE8.roa
File: DMSUkrJEw45XI0WJ0LzkAIesgE8.roa (raw, json)
Hash identifier: G4IbHhLMjo986ETJAlQeOXWsknba9hNr+nfqOX0dUz0=
Subject key identifier: 0C:C4:94:92:B2:44:C3:8E:57:23:45:89:D0:BC:E4:00:87:AC:80:4F
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C5CA107ADCFB6EE1F34379696270FF622
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/DMSUkrJEw45XI0WJ0LzkAIesgE8.roa
Signing time: Tue 12 Dec 2023 06:05:06 +0000
ROA not before: Tue 12 Dec 2023 06:05:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18c:5ca0:4a38/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:5c:a1:07:ad:cf:b6:ee:1f:34:37:96:96:27:0f:f6:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 12 06:05:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0cc49492b244c38e57234589d0bce40087ac804f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:b1:23:29:08:e7:a6:27:09:46:a4:f9:f7:b1:
bf:4b:cb:e0:8b:d3:6b:93:ee:d3:fe:f5:f1:77:7a:
37:c6:4e:33:ea:c6:14:7f:fa:01:0e:fc:33:34:ca:
d4:7c:c5:9f:67:58:a3:64:0f:f8:5c:a4:31:de:98:
85:fa:82:67:30:ff:6f:73:e3:71:dd:54:16:cb:c2:
13:73:82:14:be:48:52:99:64:5b:39:47:68:11:32:
de:fd:7d:8c:20:0d:c9:40:95:98:9c:70:05:1c:fd:
e2:c1:f5:b3:21:da:11:bd:1c:f4:09:a3:b8:dd:f7:
c5:a6:d6:0f:44:c9:7e:08:84:eb:43:2d:48:8b:ef:
66:4d:56:9f:21:f8:d6:ee:4f:bd:cc:33:c8:15:92:
27:ef:db:06:1a:e1:2f:73:8a:34:a3:18:dc:fe:5a:
d5:32:1c:09:d8:7f:3e:c0:af:8d:7a:c7:7e:cb:e8:
c6:0e:96:27:24:78:f8:20:6d:8b:70:30:94:6e:c8:
52:e9:3d:d3:79:9e:9f:9a:8c:82:e4:27:6e:e0:c2:
46:5f:27:b8:22:58:35:73:1d:4a:31:37:8c:6b:f3:
3e:31:50:cf:14:55:19:73:70:14:a9:26:40:0a:10:
07:d6:d1:23:5b:3b:dc:ba:6c:59:c0:37:83:f2:2c:
1b:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:C4:94:92:B2:44:C3:8E:57:23:45:89:D0:BC:E4:00:87:AC:80:4F
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/DMSUkrJEw45XI0WJ0LzkAIesgE8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
60:5d:13:45:00:f7:ab:0f:5f:d2:0a:a0:a5:82:5d:7b:44:8f:
64:fc:5b:fc:44:6e:70:02:5a:13:75:46:73:00:2e:e0:01:2d:
3f:42:14:b5:9e:b3:43:e9:68:50:01:5d:1f:b6:15:c4:8a:69:
b0:bd:e1:14:81:b6:88:90:b2:53:f4:66:95:0c:b7:f4:05:d2:
04:99:45:f1:f2:86:7b:a3:a8:db:4e:aa:8c:42:92:d5:80:e6:
59:2f:a5:e3:18:04:c0:61:ae:f4:9d:03:f6:2c:1a:fa:ff:d9:
fe:45:da:de:fb:03:02:45:f9:32:59:51:4f:64:96:82:e4:4e:
e4:a8:e8:87:67:b5:32:cf:fb:22:65:dd:5c:32:37:ea:ba:3c:
50:1f:3e:38:62:26:ae:74:fe:26:9c:7a:ea:cf:89:be:7c:4d:
6e:6c:c1:dc:f5:be:5d:0e:f6:44:1c:93:05:db:79:72:c2:a8:
1b:7d:98:22:e9:61:62:a2:da:92:8a:67:0d:08:44:c6:99:4d:
23:31:94:42:70:c4:52:0e:92:fb:d5:8f:81:9f:02:4d:32:61:
63:b8:89:d1:73:56:d2:5f:a0:03:f1:94:cf:4e:64:e2:19:e2:
bc:42:47:ad:14:cf:f1:e2:4d:82:fb:73:fd:bd:2a:d2:6b:f9:
b2:72:89:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 05:05:44 2025 by rpki-client