Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/UtdLsyVyI_sU5qFs2USkWaPHXXQ.roa
File: UtdLsyVyI_sU5qFs2USkWaPHXXQ.roa (raw, json)
Hash identifier: E1HRVYDU72+z2sKCoUCwlLOaqmlGoS9L3IYv567mZ1U=
Subject key identifier: 52:D7:4B:B3:25:72:23:FB:14:E6:A1:6C:D9:44:A4:59:A3:C7:5D:74
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AB705110BF87FAEB69E93FC1896BE8F92
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/UtdLsyVyI_sU5qFs2USkWaPHXXQ.roa
Signing time: Thu 21 Sep 2023 09:14:37 +0000
ROA not before: Thu 21 Sep 2023 09:14:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:b7:05:11:0b:f8:7f:ae:b6:9e:93:fc:18:96:be:8f:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 21 09:14:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=52d74bb3257223fb14e6a16cd944a459a3c75d74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:9b:22:8f:3c:a7:e2:cc:10:58:fb:82:c4:5a:
05:98:8e:3c:d7:26:a9:6d:f4:1d:32:b0:41:c5:48:
b1:ae:39:fb:90:dd:e6:cd:b8:51:65:66:03:30:6a:
0c:ed:5e:40:56:0e:77:bb:c1:f4:04:91:98:76:d9:
3f:93:4e:62:2f:ad:2a:93:81:9a:8d:15:63:d4:d1:
34:dd:d1:37:c3:94:f8:d9:f5:8e:ca:e5:96:95:f8:
69:94:1c:f5:b1:be:64:30:54:b7:2d:19:d0:e2:87:
9d:62:ae:c1:e5:82:b1:e7:eb:1c:3e:9f:c9:41:68:
29:9f:f1:52:6d:53:ab:ec:5e:f9:f3:ce:e2:8c:39:
cd:06:71:b0:06:fb:64:79:c6:b8:1c:c8:76:58:c0:
6a:89:15:9a:99:e9:1b:78:16:ad:e6:a5:e9:c6:5a:
12:00:09:37:5a:11:b4:4a:42:a1:41:95:2e:4e:57:
2c:d6:a2:34:f8:92:98:0f:43:f9:02:ea:4d:39:e7:
18:e0:20:23:57:10:12:57:90:92:0c:4e:a8:48:76:
6a:ad:e5:89:52:2e:de:2b:17:8c:2f:f4:1d:e5:21:
5a:7d:f4:99:c8:80:37:1f:d9:69:89:cc:1e:2f:22:
60:48:da:7f:79:94:c4:91:df:db:82:3c:18:f6:90:
60:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:D7:4B:B3:25:72:23:FB:14:E6:A1:6C:D9:44:A4:59:A3:C7:5D:74
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/UtdLsyVyI_sU5qFs2USkWaPHXXQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
bf:81:ee:be:69:5d:36:3d:0f:a4:82:d5:8c:87:72:98:4b:3b:
ee:9c:d2:fb:78:6e:84:a4:8c:61:b8:79:c9:89:33:85:df:11:
8d:f3:d2:a6:b7:8d:87:32:3a:ad:bc:4c:2b:0a:15:3f:d8:aa:
ca:e6:41:a7:44:e8:10:6c:fc:ed:e1:90:a8:77:6e:fc:32:61:
1a:a9:c4:36:6e:10:fd:7b:43:87:ba:c6:2f:30:08:8b:91:90:
9b:da:d9:3e:16:48:71:b5:f2:ce:da:15:62:1b:0d:79:ff:ec:
b0:bf:3c:ec:52:d9:ce:26:15:e6:55:c4:fa:d6:e1:dc:ac:0c:
86:11:0d:2c:a9:a0:b7:b0:47:d4:e8:4e:a5:b6:57:c5:8f:5f:
70:59:c7:bf:5b:20:eb:6b:2d:7f:53:48:3e:d5:4c:eb:a4:b9:
a9:ab:71:51:fa:b7:ab:91:b0:48:bd:aa:29:fc:9b:2c:32:09:
54:cb:17:12:99:54:42:94:58:cb:02:44:8d:d8:1b:5f:17:f1:
08:28:1d:83:77:04:1e:20:2e:c7:ef:40:e5:ef:5b:cf:a0:84:
c9:ca:b5:dd:54:28:69:b4:5c:f0:a2:dc:dd:59:bd:75:00:ef:
af:dd:b4:51:bd:e3:a0:e0:84:ce:7a:76:c2:f3:70:03:26:4f:
3f:41:b7:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 01:05:42 2025 by rpki-client