Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Ue-RcXDzUFikcoqovBGRSavkalU.roa
File: Ue-RcXDzUFikcoqovBGRSavkalU.roa (raw, json)
Hash identifier: 6gfSZg5JgEUachoeMQ/jsbjAQ/iJK0l+Y8yeS9X9uw4=
Subject key identifier: 51:EF:91:71:70:F3:50:58:A4:72:8A:A8:BC:11:91:49:AB:E4:6A:55
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B56DE1216D9D9D2EE7457244DCC0529FF
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Ue-RcXDzUFikcoqovBGRSavkalU.roa
Signing time: Sun 22 Oct 2023 10:11:16 +0000
ROA not before: Sun 22 Oct 2023 10:11:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:56:de:12:16:d9:d9:d2:ee:74:57:24:4d:cc:05:29:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 22 10:11:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=51ef917170f35058a4728aa8bc119149abe46a55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a9:74:ab:41:67:6f:b0:ba:eb:19:70:76:3e:
65:49:eb:da:7e:5e:8b:7a:ee:79:b7:32:10:3e:af:
4b:a8:f6:38:89:db:72:88:5f:67:6a:c3:ca:be:cf:
7f:1b:6f:06:12:e3:12:f2:43:0a:a3:49:4f:f8:8f:
67:51:b5:ca:54:1c:af:b9:c3:00:1a:b5:93:fd:a2:
23:9e:cf:2d:ea:35:33:a3:5b:8b:ff:37:a2:5b:6a:
3c:40:4b:2f:c1:e6:34:79:de:72:ac:1d:16:73:e7:
72:2f:c2:ee:11:3f:4f:bc:97:0f:5a:c5:ea:d3:0b:
c4:34:fa:be:55:c1:25:ab:df:fc:9d:45:c6:4b:fd:
e0:3a:a2:21:3f:0d:cd:6a:af:bb:49:19:66:78:a3:
60:15:cb:59:34:ce:be:98:19:a9:3c:91:15:4c:9e:
18:23:a3:8c:05:14:38:24:a6:8b:80:a0:66:08:99:
bd:56:e2:4f:10:2f:5d:13:74:37:dc:bc:c3:ae:85:
4b:22:01:ca:78:f9:08:d8:52:2b:c3:33:16:6b:81:
22:69:ed:01:9b:c2:2a:f0:20:37:05:bf:51:7b:c1:
45:36:87:73:37:d1:a8:70:72:19:9f:f8:f7:4d:c7:
aa:51:a6:86:63:09:da:71:28:ff:46:4e:fb:1e:5d:
71:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:EF:91:71:70:F3:50:58:A4:72:8A:A8:BC:11:91:49:AB:E4:6A:55
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Ue-RcXDzUFikcoqovBGRSavkalU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1b:64:bb:1d:1c:65:ad:56:fe:ee:dc:f1:67:4a:e5:ba:fb:57:
db:84:41:6f:7b:11:02:3c:c4:b9:7b:48:77:ac:a9:53:28:2e:
e9:6f:75:ca:c5:8c:ab:6b:21:80:6c:46:8c:12:f7:40:db:73:
b8:fa:6d:58:d1:15:f6:d7:f2:14:7f:81:3f:a7:28:88:81:d3:
2e:98:c6:4d:57:f1:7d:29:69:51:7d:85:6d:bf:b3:1b:3b:05:
4b:2a:eb:29:82:80:e9:27:74:f5:70:73:eb:72:6d:fe:dc:de:
13:28:fc:ac:a3:ae:8d:6a:45:d7:06:85:bb:72:7f:39:58:cc:
a6:db:83:e9:e0:8f:52:e7:25:d7:1e:08:fa:72:01:f6:17:a2:
f7:28:e4:a1:5f:28:d7:0e:30:3c:af:af:77:4a:af:fe:ab:52:
a1:43:0c:cc:6d:b0:5d:1d:72:f6:de:f9:00:e3:cf:e1:49:ae:
6e:ef:a2:22:91:2a:90:a3:7f:de:6f:ff:9b:09:f9:43:22:ba:
66:c7:9c:3a:48:0d:22:63:5a:1e:de:5d:b4:78:18:a6:25:75:
98:7d:02:da:52:d3:10:87:7b:e6:28:ce:67:e9:15:e9:c3:b0:
10:d2:4d:91:66:57:90:41:d0:f2:59:b9:3d:70:0c:ac:24:5d:
c8:23:22:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 02:13:59 2025 by rpki-client