Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/UHqmMwFkyZsWtVhtSwDrArOBECc.roa
File: UHqmMwFkyZsWtVhtSwDrArOBECc.roa (raw, json)
Hash identifier: p9hX2aCqpBRIxh+YebC2ay6EDhcrVzgbN7n8TgYOrfk=
Subject key identifier: 50:7A:A6:33:01:64:C9:9B:16:B5:58:6D:4B:00:EB:02:B3:81:10:27
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BF64C5DA79855905229FEBACDC022CB18
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/UHqmMwFkyZsWtVhtSwDrArOBECc.roa
Signing time: Wed 22 Nov 2023 09:11:21 +0000
ROA not before: Wed 22 Nov 2023 09:11:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:f6:4c:5d:a7:98:55:90:52:29:fe:ba:cd:c0:22:cb:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 22 09:11:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=507aa6330164c99b16b5586d4b00eb02b3811027
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:d8:c1:2d:65:86:4e:be:97:f2:b6:0b:70:61:
14:92:1d:5f:2c:d0:42:43:66:e5:88:00:a2:24:6c:
56:b6:e0:11:88:ec:cc:04:62:ab:58:72:4d:21:f5:
a3:2f:09:b1:07:0c:a0:da:28:77:a3:b2:20:0b:60:
09:9e:f7:9b:41:39:74:d3:74:c8:ad:8b:a9:a9:7a:
9d:30:38:b7:fd:1d:68:18:27:4e:44:ff:eb:93:d0:
07:65:47:10:3a:ed:e0:eb:d1:f6:f3:00:ca:96:a2:
85:4a:3d:e5:e7:b0:d8:a7:8c:e2:14:92:fb:05:79:
47:c3:45:0e:ad:ec:91:80:50:b5:e2:02:9d:6d:69:
ed:9d:e0:d9:e0:ff:c0:d3:17:1d:34:34:df:51:70:
76:50:c2:77:df:19:1c:67:d2:78:5d:a3:91:06:d1:
45:b4:8e:44:aa:c9:ef:cd:30:b4:7c:51:e4:c6:9e:
fa:b7:51:e9:a1:23:30:9e:16:e3:a3:92:e9:1f:3a:
b6:69:b4:a0:e2:71:25:b8:16:40:ac:8d:31:20:56:
67:96:36:0d:8c:b5:fd:92:c8:15:d7:0f:fb:56:00:
17:d3:4d:ba:e1:31:53:55:20:97:05:79:a9:94:ec:
89:c1:37:6a:10:45:59:b9:ba:b6:e4:53:33:79:9f:
75:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:7A:A6:33:01:64:C9:9B:16:B5:58:6D:4B:00:EB:02:B3:81:10:27
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/UHqmMwFkyZsWtVhtSwDrArOBECc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
27:01:aa:08:3a:d6:6a:40:e8:d8:a5:a7:1e:71:14:17:f1:2a:
a4:c7:bf:5c:52:97:ff:ac:e2:63:0c:e1:c0:43:87:06:37:5a:
e3:d8:5f:6e:af:25:ab:cf:59:a9:e9:f0:11:d8:2d:c4:dd:f6:
d3:d9:f9:1f:0e:30:0f:71:b9:b7:24:82:57:79:d3:d0:99:c9:
38:75:6b:05:c7:b0:fb:28:97:81:84:95:91:07:6f:ae:b9:da:
2d:09:11:54:77:d0:a2:80:8e:e0:70:78:35:7d:16:1f:85:04:
7d:26:c3:db:48:f5:ef:05:fb:be:6f:da:86:a9:be:85:88:74:
de:39:6f:d3:a3:af:8c:dd:d9:5d:a1:ff:38:35:3c:6c:d2:be:
80:fb:82:cd:44:56:85:e9:9c:7a:c9:0f:8d:db:04:fa:bf:bc:
a3:19:d4:23:79:04:ee:b1:1a:12:79:35:d4:4e:ee:d5:f9:b1:
19:1d:39:13:8e:38:06:a1:aa:87:d8:9f:8a:30:3f:0d:43:42:
27:96:6e:75:00:57:42:bd:fc:57:18:26:05:62:f9:dd:e2:36:
82:6f:17:c8:e9:0b:bf:5c:9d:bf:78:71:03:ea:d7:62:68:85:
f4:48:9a:a5:01:2e:5c:2c:9d:b8:a8:79:1b:37:24:a9:39:30:
4e:25:9e:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:43:57 2025 by rpki-client