Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/USHTdqSLNennADCB_ziwBNUm_yQ.roa
File: USHTdqSLNennADCB_ziwBNUm_yQ.roa (raw, json)
Hash identifier: /94UtxCIU2EZg2xTLzzY7wDwl1Er0vvzK4KlcyACG8k=
Subject key identifier: 51:21:D3:76:A4:8B:35:E9:E7:00:30:81:FF:38:B0:04:D5:26:FF:24
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C2EC075E9B81B658157F056017B2EEC43
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/USHTdqSLNennADCB_ziwBNUm_yQ.roa
Signing time: Sun 03 Dec 2023 08:16:54 +0000
ROA not before: Sun 03 Dec 2023 08:16:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:2e:c0:75:e9:b8:1b:65:81:57:f0:56:01:7b:2e:ec:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 3 08:16:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5121d376a48b35e9e7003081ff38b004d526ff24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:ce:e8:f7:3c:14:d5:47:15:d7:1f:b0:3b:f3:
66:68:33:5f:95:c8:68:b0:14:c5:6d:f3:a6:9e:c8:
6d:ab:5d:84:a7:8d:93:07:3a:0b:6e:0e:b5:37:2d:
da:77:e3:af:aa:db:bc:f6:8a:ce:d5:7a:f6:2b:4e:
13:fc:e5:36:70:b7:57:db:f7:5c:d6:77:f7:25:1e:
17:35:b2:9f:59:b5:22:f6:fc:c2:8f:a7:ed:b6:9e:
87:d9:af:e9:0b:03:e9:a4:4f:19:79:e4:b0:25:89:
ea:41:19:16:04:99:95:f4:71:af:ae:2a:2d:21:ba:
25:09:24:55:73:16:c7:f9:48:3f:69:5f:62:59:79:
18:22:f4:cb:7c:6d:64:4c:bd:ec:0f:41:47:7f:bc:
ee:30:fc:e8:49:a0:f8:17:79:58:d3:10:c1:36:2b:
b7:d1:ee:c6:e3:89:3b:11:11:ca:5d:47:40:15:43:
02:58:83:9f:7a:ed:06:90:5c:86:a6:a2:fc:92:b2:
59:9f:e6:63:27:86:68:fa:53:b1:de:67:84:70:fb:
d9:9a:de:89:7c:17:c0:56:b6:8d:e6:7e:f9:8b:22:
6a:f3:ce:92:b4:97:8e:68:75:ce:f4:37:53:04:49:
82:49:42:4d:96:74:7e:16:37:a9:d2:31:d2:33:9c:
c2:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:21:D3:76:A4:8B:35:E9:E7:00:30:81:FF:38:B0:04:D5:26:FF:24
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/USHTdqSLNennADCB_ziwBNUm_yQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
77:23:53:92:5d:5e:60:4c:a3:42:e9:d4:33:7b:04:8a:9e:fc:
e2:fe:a5:94:9d:49:08:da:f2:32:38:0d:76:00:4a:dd:df:c3:
8d:02:ff:eb:fe:08:38:f8:f9:7b:e5:43:25:63:8c:42:f2:c6:
a4:10:b2:12:19:56:54:f2:18:a4:cb:5a:ac:36:b4:b9:ed:43:
35:aa:85:c5:9f:05:8d:ca:1d:92:db:d4:8f:2b:2e:a3:e2:05:
2c:61:df:86:c2:d4:53:f3:b3:9f:ab:2f:b7:5f:33:63:9a:65:
19:97:b1:15:99:65:69:14:2c:dd:d2:4b:d0:3a:20:20:34:7c:
98:1e:af:6e:ce:85:34:76:e0:a3:ab:c9:7c:9a:b1:a1:8f:d9:
9e:c1:87:2e:6f:21:87:f6:c4:11:d2:3e:13:b9:c8:75:39:d9:
ed:f3:c7:e7:5f:5e:d0:ad:09:17:12:a2:a0:3d:d6:4c:2c:f3:
28:8d:2c:7c:50:f6:a4:74:9a:2d:da:ec:62:bb:a6:f7:46:3f:
ae:d2:7d:87:4d:11:aa:58:92:0b:0c:21:71:e7:3a:68:0f:c8:
ef:fd:21:d1:ce:e7:8b:76:72:37:18:64:25:a1:41:e5:5d:14:
5d:bc:a1:12:dc:54:d7:bf:d7:bb:e1:d1:88:20:3d:35:09:cc:
1f:95:f7:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 06:42:29 2025 by rpki-client