Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/UYnLB-Ux3KYYKO8OkDsGFxZ57-M.roa
File: UYnLB-Ux3KYYKO8OkDsGFxZ57-M.roa (raw, json)
Hash identifier: /Jvi0A8Vyp6MkMPFtNObE+nNisKx73icGICwPIamUNg=
Subject key identifier: 51:89:CB:07:E5:31:DC:A6:18:28:EF:0E:90:3B:06:17:16:79:EF:E3
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BD8E5CF9EE6C08F2A495CC164D1EB0FAB
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/UYnLB-Ux3KYYKO8OkDsGFxZ57-M.roa
Signing time: Thu 16 Nov 2023 16:10:21 +0000
ROA not before: Thu 16 Nov 2023 16:10:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:d8:e5:cf:9e:e6:c0:8f:2a:49:5c:c1:64:d1:eb:0f:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 16 16:10:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5189cb07e531dca61828ef0e903b06171679efe3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:0a:50:95:78:5d:80:f3:83:cd:b6:88:3c:34:
63:02:5c:e4:28:f2:77:70:7a:e3:26:fe:71:df:39:
7a:5b:ee:05:97:9d:dc:1b:d5:85:2b:03:71:11:7c:
ee:58:9f:8c:c3:ce:47:9f:fe:5a:57:7a:9b:c7:f4:
65:c1:70:00:c5:8d:86:f6:82:dc:f6:7f:08:41:7a:
74:c5:c8:d8:35:0e:6f:62:a7:bc:59:f8:64:31:70:
88:ea:55:28:26:04:0f:df:53:0b:20:1a:3a:73:f3:
c2:93:7e:77:07:01:54:c7:ff:41:1a:21:a4:b5:2e:
d7:52:87:90:3b:24:bf:bb:c6:e0:ff:17:29:ee:f1:
f3:48:96:05:86:34:dd:20:0d:cb:c9:ed:a9:a5:21:
6e:ac:03:2e:97:6f:ca:8f:6b:09:d5:12:04:eb:23:
09:88:5f:06:ae:13:c9:3e:2b:df:82:82:f7:a9:51:
af:b0:e6:8b:f4:af:0d:b1:05:90:a9:96:66:e8:7a:
6c:a9:38:6c:8e:8a:b1:e7:be:62:53:76:15:e0:fe:
38:6f:bb:62:f9:d0:ba:ff:6e:76:d3:61:36:ce:e4:
34:e8:ee:92:c1:39:8d:01:95:62:db:25:7b:6f:24:
2f:09:0c:d3:b0:f2:69:2b:30:0b:05:35:c2:15:5f:
f9:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:89:CB:07:E5:31:DC:A6:18:28:EF:0E:90:3B:06:17:16:79:EF:E3
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/UYnLB-Ux3KYYKO8OkDsGFxZ57-M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
94:72:19:9b:e3:e9:2d:fb:74:d8:05:f9:a3:4b:e2:a7:36:61:
ec:60:8d:4c:9c:f5:86:ca:19:1d:86:cc:ce:9e:19:ec:84:c6:
b1:f8:4e:41:a1:91:ba:69:5a:66:39:e6:2f:60:11:ba:28:f2:
2c:42:7f:84:d7:41:74:7a:4a:f1:2d:b3:91:ff:97:7c:c6:2c:
29:7d:0f:21:23:05:32:2a:79:45:f1:b8:fc:aa:34:a9:cc:0c:
14:e8:3c:a0:b1:bc:b3:5d:71:0a:f0:2f:9b:12:34:c8:d8:63:
35:3b:8a:33:32:5f:ea:fa:e1:fb:8a:d7:cb:5a:85:57:85:fc:
97:32:eb:6d:ce:cc:1a:cb:7c:83:db:7c:a2:df:e8:0a:ee:25:
a9:05:31:65:95:d2:2f:5c:bf:3c:6b:5b:0d:89:e4:b2:44:e7:
89:11:1b:7a:e5:c2:38:80:78:c3:2e:17:29:69:08:d5:0b:92:
fc:70:14:6a:50:9b:4a:29:3f:32:dc:4f:9b:d6:6e:9c:10:3f:
ba:1c:1d:46:78:a0:b0:1d:19:6b:ba:b4:35:4b:55:a9:e8:ee:
55:ea:ab:cf:59:71:85:27:1a:62:73:e5:c5:49:c1:15:37:18:
fe:30:72:39:03:a2:52:e7:97:c6:3d:00:f5:a5:7a:45:14:12:
f0:af:18:e5
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYvY5c+e5sCPKklcwWTR6w+rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMTE2MTYxMDIxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MTg5Y2IwN2U1MzFkY2E2MTgyOGVmMGU5MDNiMDYxNzE2NzllZmUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgApQlXhdgPODzbaIPDRjAlzkKPJ3
cHrjJv5x3zl6W+4Fl53cG9WFKwNxEXzuWJ+Mw85Hn/5aV3qbx/RlwXAAxY2G9oLc
9n8IQXp0xcjYNQ5vYqe8WfhkMXCI6lUoJgQP31MLIBo6c/PCk353BwFUx/9BGiGk
tS7XUoeQOyS/u8bg/xcp7vHzSJYFhjTdIA3Lye2ppSFurAMul2/Kj2sJ1RIE6yMJ
iF8GrhPJPivfgoL3qVGvsOaL9K8NsQWQqZZm6HpsqThsjoqx575iU3YV4P44b7ti
+dC6/25202E2zuQ06O6SwTmNAZVi2yV7byQvCQzTsPJpKzALBTXCFV/5/QIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFFGJywflMdymGCjvDpA7BhcWee/jMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvVVluTEItVXgzS1lZS084T2tEc0dGeFo1Ny1NLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAJRyGZvj6S37dNgF+aNL
4qc2YexgjUyc9YbKGR2GzM6eGeyExrH4TkGhkbppWmY55i9gEboo8ixCf4TXQXR6
SvEts5H/l3zGLCl9DyEjBTIqeUXxuPyqNKnMDBToPKCxvLNdcQrwL5sSNMjYYzU7
ijMyX+r64fuK18tahVeF/Jcy623OzBrLfIPbfKLf6AruJakFMWWV0i9cvzxrWw2J
5LJE54kRG3rlwjiAeMMuFylpCNULkvxwFGpQm0opPzLcT5vWbpwQP7ocHUZ4oLAd
GWu6tDVLVano7lXqq89ZcYUnGmJz5cVJwRU3GP4wcjkDolLnl8Y9APWlekUUEvCv
GOU=
-----END CERTIFICATE-----
Generated at Tue Apr 22 16:05:19 2025 by rpki-client