Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/UA86EAGj7QTbtKsbfVXNt03iml4.roa
File: UA86EAGj7QTbtKsbfVXNt03iml4.roa (raw, json)
Hash identifier: 3CSosZWRaOOZB0y8/SxJRm5OAfDm4TDnHngYLlsVHrQ=
Subject key identifier: 50:0F:3A:10:01:A3:ED:04:DB:B4:AB:1B:7D:55:CD:B7:4D:E2:9A:5E
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C72F854775F658BE54E634243EBC50390
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/UA86EAGj7QTbtKsbfVXNt03iml4.roa
Signing time: Sat 16 Dec 2023 14:12:06 +0000
ROA not before: Sat 16 Dec 2023 14:12:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:72:f8:54:77:5f:65:8b:e5:4e:63:42:43:eb:c5:03:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 16 14:12:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=500f3a1001a3ed04dbb4ab1b7d55cdb74de29a5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:68:0a:ce:bd:f4:a7:6d:9c:d7:82:a5:b1:08:
9c:62:f6:43:b2:48:16:28:9c:bf:a0:eb:41:ae:de:
95:57:e9:fe:23:5e:e9:c5:8a:99:bd:bd:c2:db:52:
49:99:1c:80:5a:3b:37:95:65:16:e1:34:74:ee:26:
79:9e:7f:7a:de:70:c2:18:13:72:ba:a1:5a:8d:e4:
6b:18:39:c9:d3:23:e0:6e:b8:78:92:38:ed:72:40:
c7:dc:a3:d7:fb:73:b3:06:68:73:94:37:d1:37:7e:
ff:16:10:b4:90:35:1d:07:df:64:4a:15:48:32:1e:
fc:57:b0:9d:03:d6:9b:a6:28:52:b2:fc:40:84:c2:
ca:66:ac:90:35:3f:98:22:92:1a:5b:25:cd:7c:43:
cc:d9:aa:f3:91:3e:86:9f:0c:2e:59:22:05:04:4c:
db:98:d4:44:7f:9e:9e:70:e7:3d:c7:58:89:3a:02:
7c:a7:6b:ad:1f:43:5e:c9:15:3c:a5:9f:04:f7:0f:
a1:fa:e7:1d:f4:93:5a:39:82:b6:c6:4f:57:a5:f1:
0f:6e:68:b9:14:56:ed:62:e6:2f:7d:8c:12:2a:47:
0f:b4:46:e6:c9:7d:86:c2:e0:a3:17:5b:48:7e:72:
ad:00:44:a9:2e:ef:39:5a:60:af:a0:a0:4b:68:91:
44:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:0F:3A:10:01:A3:ED:04:DB:B4:AB:1B:7D:55:CD:B7:4D:E2:9A:5E
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/UA86EAGj7QTbtKsbfVXNt03iml4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
55:3d:ee:14:27:9e:fe:22:81:49:e1:44:c0:aa:02:13:af:73:
1e:0e:e8:6b:46:d1:41:14:25:1d:df:1a:af:73:12:52:0c:dd:
f7:4c:ea:32:d4:df:ef:6f:93:ea:d0:e2:6b:98:58:92:12:80:
5d:94:2d:6c:a9:a2:6b:62:22:ff:ab:7a:e0:06:ee:e7:9f:85:
b3:8a:bb:a7:16:57:ed:6c:c6:45:bc:36:b0:75:d5:0e:07:9d:
0f:f2:d0:77:a1:b3:65:bb:6d:d0:c9:e3:4f:73:d6:27:e9:77:
9e:60:27:e5:47:5a:6f:db:87:f9:87:c3:14:fd:db:94:6d:90:
e1:ed:50:1d:f5:a3:21:4c:61:11:72:b9:33:d5:24:bc:f7:f9:
20:c3:cb:5b:ef:fc:09:6c:03:c8:2e:58:f4:cd:1f:06:44:0a:
b7:5a:ea:be:26:f7:a8:d8:75:96:16:bc:76:76:b6:af:44:c4:
0a:a2:fd:dc:72:46:23:db:1b:b0:bd:32:39:f2:2c:e6:9c:68:
62:8e:51:a9:64:6a:52:18:f0:ce:0d:78:c5:37:40:32:6f:d9:
96:07:45:74:a2:04:d2:e2:ee:e4:c7:87:2c:70:33:24:1d:87:
d7:3d:52:34:0f:67:75:7e:79:6c:6a:f3:2f:d7:0a:2d:72:0e:
21:39:63:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 19:16:37 2025 by rpki-client