Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Ulyv2o8k41_TKVivGzEgW-oy17w.roa
File: Ulyv2o8k41_TKVivGzEgW-oy17w.roa (raw, json)
Hash identifier: gVzFBw0B22Mng012x1e7GePVVS92iZ45NC4rflNU6ag=
Subject key identifier: 52:5C:AF:DA:8F:24:E3:5F:D3:29:58:AF:1B:31:20:5B:EA:32:D7:BC
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AD6C8A0A196F510F747992A1A371D868D
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Ulyv2o8k41_TKVivGzEgW-oy17w.roa
Signing time: Wed 27 Sep 2023 13:16:27 +0000
ROA not before: Wed 27 Sep 2023 13:16:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:d6:c8:a0:a1:96:f5:10:f7:47:99:2a:1a:37:1d:86:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 27 13:16:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=525cafda8f24e35fd32958af1b31205bea32d7bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:13:83:af:87:93:b4:6e:b8:ed:d8:8a:09:4b:
aa:5a:f3:45:00:54:e6:64:93:3d:01:ca:45:b5:6c:
44:c2:85:a0:0f:fb:28:a6:db:ec:e8:d3:80:56:49:
9f:70:91:16:1f:ea:93:47:8c:3c:00:5e:66:c9:95:
22:93:da:34:15:28:c1:bd:cb:3d:42:ff:0c:c3:cd:
e0:04:ee:c1:87:9b:ed:9f:f7:e7:fb:78:fc:88:6f:
c5:e3:f6:c2:93:97:b7:2c:5c:0d:1e:a2:9a:07:02:
de:9d:d5:cd:b5:29:f4:cf:ed:a1:04:f3:ea:f5:db:
d7:58:b9:5b:93:3e:91:a7:e1:47:96:93:8a:7a:02:
7a:8e:40:ef:b4:6a:4e:6f:f6:d5:6e:5c:9e:4d:db:
04:bc:eb:53:7e:df:8d:a9:f2:f8:75:e7:ef:3b:3a:
43:2e:a8:90:03:24:00:f7:7d:bc:18:24:6f:47:78:
44:ba:99:c9:84:da:d9:30:9a:3e:b2:dc:2a:79:44:
0a:a2:2b:a3:bb:ae:fc:cc:3f:29:ab:a7:8e:be:61:
2e:f7:51:57:8b:73:fe:33:c7:f7:9f:5a:59:f7:0a:
46:bd:df:5b:13:77:6f:be:09:58:1a:a9:dd:48:45:
b9:98:f9:a4:ad:73:fa:e3:de:b6:56:29:21:4d:b7:
e4:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:5C:AF:DA:8F:24:E3:5F:D3:29:58:AF:1B:31:20:5B:EA:32:D7:BC
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Ulyv2o8k41_TKVivGzEgW-oy17w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0c:a5:e6:d1:36:6c:27:ca:0d:0d:cb:de:c0:c5:23:e3:f2:8e:
c7:91:4f:d3:6f:62:2a:87:ec:1a:31:c5:2e:95:90:66:2c:29:
74:1c:ba:a0:ac:9a:18:30:a8:77:fd:fc:ef:88:a6:36:38:20:
4f:41:26:50:96:e6:cc:91:61:de:34:10:e8:9d:d9:e9:ca:c9:
97:f5:f4:d8:2a:2c:fb:2b:bf:3e:87:0a:35:dd:db:61:7f:b6:
04:59:7c:45:51:c3:bf:42:82:81:53:12:a9:4a:91:eb:a5:52:
8c:04:d9:e2:fb:e6:11:4c:6b:5a:45:4b:6a:e7:2d:ea:a1:8b:
2a:e1:24:5f:8f:06:48:4b:33:ae:8f:e8:b0:3c:4f:64:9c:3d:
14:3f:d5:3e:49:ff:a1:35:1a:95:b0:f8:13:55:a4:62:60:1d:
cb:93:06:d9:b6:47:f9:13:8d:d6:54:79:8e:9e:65:13:b2:d0:
86:6b:35:7b:a9:19:7f:c6:84:5e:e1:a6:71:2a:9c:35:13:4f:
69:af:30:27:f4:92:65:e5:fb:d7:f9:9a:3d:2e:ca:e8:50:c7:
d8:45:76:0d:48:0e:a1:d0:8f:09:57:3f:22:f1:c1:b4:f9:22:
a0:40:27:d8:c2:67:a1:c7:09:1c:00:8c:5c:fa:84:6e:16:be:
c4:11:f3:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 22:37:38 2025 by rpki-client