Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/RUeBwcKD8uqD6-2ck12LQ8LjqiQ.roa
File: RUeBwcKD8uqD6-2ck12LQ8LjqiQ.roa (raw, json)
Hash identifier: KdYhOwRPnX2vcC8W+OYUiidG1XDW6I4KXkwrNSLgar8=
Subject key identifier: 45:47:81:C1:C2:83:F2:EA:83:EB:ED:9C:93:5D:8B:43:C2:E3:AA:24
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BA2A26F098B4C1DA8305EE4A5A13E43AB
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/RUeBwcKD8uqD6-2ck12LQ8LjqiQ.roa
Signing time: Mon 06 Nov 2023 03:17:16 +0000
ROA not before: Mon 06 Nov 2023 03:17:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:a2:a2:6f:09:8b:4c:1d:a8:30:5e:e4:a5:a1:3e:43:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 6 03:17:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=454781c1c283f2ea83ebed9c935d8b43c2e3aa24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:54:29:a0:84:c4:f6:e4:ca:f5:b4:b1:25:e0:
5a:3c:cd:5a:71:55:d0:6e:da:fa:43:4a:01:2a:d8:
21:b2:ba:b6:08:5e:90:13:4f:be:ae:68:87:7b:ee:
d9:a1:fa:94:c0:6b:e5:17:cc:24:77:df:6f:f5:85:
2c:f0:e2:ba:b0:8e:0a:00:1c:cf:ac:59:ec:3a:0d:
38:36:f7:da:c1:32:61:7f:06:d3:8d:54:46:d1:19:
43:c3:5f:78:e1:7f:85:95:c0:d6:ce:49:6b:32:eb:
b7:93:65:d9:ac:7e:06:fe:35:7e:15:6c:d4:6e:1b:
ed:67:20:57:ea:5c:6a:47:9c:a8:de:a6:40:ed:ba:
5e:69:f2:21:96:bb:54:4f:78:f2:d3:14:7a:b7:ea:
cf:62:b9:82:72:a7:a6:8b:57:33:83:94:f6:0b:ff:
48:ce:c8:7f:a7:45:34:99:ba:db:18:6c:78:c7:a8:
34:ac:f9:07:80:bc:38:ad:5d:df:78:b2:87:7d:64:
95:c0:5a:1f:32:9a:fe:bf:b0:f8:cd:b9:68:bc:59:
7f:be:7f:e1:27:46:b6:ff:2c:5b:e0:eb:97:1b:f0:
5c:0d:47:b7:71:5c:31:0c:be:3f:a9:63:4b:b8:40:
15:ef:aa:4f:5f:54:aa:f6:fb:e6:ff:8d:a3:5d:65:
23:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:47:81:C1:C2:83:F2:EA:83:EB:ED:9C:93:5D:8B:43:C2:E3:AA:24
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/RUeBwcKD8uqD6-2ck12LQ8LjqiQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
85:04:91:be:60:a5:a3:d1:60:18:2f:37:b8:37:53:0f:49:7e:
ae:8f:fe:a2:08:a0:53:45:76:cd:89:04:fb:ae:8e:a4:dd:1b:
e2:c3:d1:ab:49:56:23:e5:d9:43:0c:c0:e1:af:37:f5:f9:64:
26:39:ff:ed:96:2a:95:2b:69:18:ac:7f:ed:46:c8:39:da:db:
4f:81:ec:b7:bd:a8:74:d5:48:70:99:e8:ad:34:7b:a2:66:5d:
12:39:19:a2:14:66:60:d9:ab:9b:c4:46:72:df:71:d0:ec:12:
20:09:de:53:92:2a:b6:ad:f8:d2:b5:33:d4:f9:e2:07:5d:da:
a9:64:4d:1c:b8:a4:84:3a:25:31:50:84:0f:69:1b:22:31:a4:
3e:ee:c4:73:ed:98:78:55:c6:b3:c2:72:1c:49:c0:03:a4:32:
83:03:ce:ac:57:b4:2a:76:7b:7b:14:7b:39:de:7b:dd:ed:a4:
3c:7c:2d:56:8a:97:e3:04:63:82:d8:f1:cc:8b:e1:35:91:93:
3a:f0:1a:15:c8:68:07:9a:41:6d:f5:e3:d3:09:d6:95:f8:3a:
75:ac:bc:11:f4:7b:dc:4b:23:90:9b:63:fa:d4:b7:5a:1c:9f:
7a:b0:44:5a:ce:0b:b5:6c:18:36:77:ea:2a:87:d5:24:1a:11:
65:ab:72:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 06:52:24 2025 by rpki-client