Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/UuElFu6RcBxbeAMXEGXVcGnj7CQ.roa
File: UuElFu6RcBxbeAMXEGXVcGnj7CQ.roa (raw, json)
Hash identifier: WrBA0jObrQPVeJ5h+EGUS0ziliWoiTg27DKdqdQ1cR4=
Subject key identifier: 52:E1:25:16:EE:91:70:1C:5B:78:03:17:10:65:D5:70:69:E3:EC:24
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B9E83BF26E98B4A054EED1987F814F7AF
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/UuElFu6RcBxbeAMXEGXVcGnj7CQ.roa
Signing time: Sun 05 Nov 2023 08:05:15 +0000
ROA not before: Sun 05 Nov 2023 08:05:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18b:9e82:db41/128 maxlen: 128
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:9e:83:bf:26:e9:8b:4a:05:4e:ed:19:87:f8:14:f7:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 5 08:05:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=52e12516ee91701c5b7803171065d57069e3ec24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:1b:92:4a:08:36:70:19:d5:e0:83:55:dd:dc:
0f:52:45:f3:7c:de:d3:6c:54:a7:15:e0:32:b6:3d:
6d:5f:3f:b5:c7:25:cc:74:a1:ba:38:22:27:27:ea:
88:6e:aa:18:35:f2:ab:24:5b:eb:b3:b1:54:7e:f9:
59:89:b5:d3:02:26:fb:2f:b6:6b:be:13:a2:aa:87:
db:0e:9b:09:0d:c8:60:62:20:5c:00:3b:81:ea:ad:
1b:0d:bd:87:0e:50:82:3f:9d:98:49:f1:62:e0:fb:
fc:84:6a:f1:4b:88:73:b9:31:18:27:84:67:5d:09:
dc:1d:43:c8:27:11:af:ff:a1:85:84:b1:b8:72:a7:
2b:94:ab:53:7c:78:08:8e:81:93:47:b5:e4:d9:11:
2e:ff:10:33:b8:84:58:d8:10:91:2f:13:78:d6:84:
39:fe:a7:54:37:13:1b:25:e2:40:ae:5f:3b:58:42:
c2:87:1a:ac:93:54:75:9e:a1:a1:85:66:94:7f:23:
cf:b0:e0:df:3c:6e:8b:dd:08:06:fa:b3:02:03:67:
bd:da:f2:40:06:1c:19:66:b5:c4:c4:28:1c:56:95:
30:33:7d:31:07:60:4d:4f:4e:79:c8:6c:9b:ae:fe:
d4:41:43:ba:44:1c:39:ba:e3:d0:ab:c4:9d:bc:5c:
ed:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:E1:25:16:EE:91:70:1C:5B:78:03:17:10:65:D5:70:69:E3:EC:24
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/UuElFu6RcBxbeAMXEGXVcGnj7CQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
00:6b:b5:b0:40:53:5a:fe:13:21:8b:e7:80:57:72:c2:0d:56:
5f:96:80:65:2a:9c:2d:5b:e9:a4:9a:28:05:7b:00:38:9d:ff:
72:c4:f5:a7:79:f6:57:24:1b:6f:76:41:10:2c:0d:91:83:95:
24:a3:0b:52:3a:f6:e8:62:4e:5e:d1:98:aa:d2:9d:f0:89:e8:
66:a1:60:e0:3a:ab:37:b8:76:7e:40:49:9f:aa:0c:94:c0:7a:
9f:a7:16:b0:7d:96:f8:7e:2b:94:a7:7e:3a:39:02:ff:c4:f4:
f2:86:27:f9:6f:31:58:61:5b:a3:c6:18:c4:58:de:42:ab:5d:
4a:ba:90:fa:09:07:cb:5b:f1:30:40:c2:c8:b9:f1:60:53:fe:
39:b1:5d:84:1b:d9:0d:86:1e:c1:8a:05:95:da:6c:28:7d:e6:
92:d4:8f:d1:0b:e2:b9:e3:a1:de:02:58:65:d3:67:b3:2c:a1:
a3:f7:f8:a6:e0:8b:bb:79:4b:19:47:f5:67:b1:67:89:3f:25:
73:b8:0d:51:ad:ae:e9:a2:5a:8d:07:9d:98:70:cc:af:d5:40:
2f:ba:37:8e:a2:8d:0e:15:dd:f3:94:e2:47:04:90:80:89:34:
30:33:7d:7b:65:28:d6:83:16:11:3f:31:0e:57:61:55:49:5b:
a8:2e:6e:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 06:02:25 2025 by rpki-client