Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/_Uhnrm_s_FPgxxNZU9byTnun68s.roa
File: _Uhnrm_s_FPgxxNZU9byTnun68s.roa (raw, json)
Hash identifier: 8CogPZptxXnMeJmF7VF/1r7Wr0qrYAVMzKYfO2FNxT0=
Subject key identifier: FD:48:67:AE:6F:EC:FC:53:E0:C7:13:59:53:D6:F2:4E:7B:A7:EB:CB
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AB80E91D53ECDF50BA5424273F3F6E88E
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/_Uhnrm_s_FPgxxNZU9byTnun68s.roa
Signing time: Thu 21 Sep 2023 14:04:37 +0000
ROA not before: Thu 21 Sep 2023 14:04:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18a:b80e:36e3/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:b8:0e:91:d5:3e:cd:f5:0b:a5:42:42:73:f3:f6:e8:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 21 14:04:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fd4867ae6fecfc53e0c7135953d6f24e7ba7ebcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:1a:b8:c8:de:9b:6f:87:91:a5:7b:b8:89:9c:
4c:3a:48:99:c6:ba:e0:7d:64:84:5c:e1:20:bf:72:
f5:71:e4:e4:60:cf:6e:db:f0:03:22:4b:e8:6e:56:
16:d5:a7:f4:dc:1b:f3:8f:10:2f:6d:6d:9b:70:ae:
01:92:b6:af:5f:51:83:5e:be:2c:a8:74:9c:22:65:
4f:01:83:c2:d4:bc:6d:c3:5b:14:1c:7e:85:b0:b7:
dd:45:1b:28:69:4e:a5:74:99:a1:99:44:3d:82:7c:
f2:59:a5:d8:88:38:39:9d:81:d4:23:4c:26:55:20:
99:ca:3c:c6:e9:6f:36:ff:d6:e0:e4:8b:f6:4f:15:
01:65:da:ee:b2:2d:d9:cd:3d:12:d7:6d:b2:cc:e4:
48:57:22:4a:ba:04:a1:91:a4:c6:a9:05:e5:fa:b4:
76:ba:77:54:07:11:90:b4:52:40:a7:14:c4:bf:7f:
ff:98:9d:3d:73:4c:b1:65:ef:d6:ae:d1:89:c8:f2:
0c:7c:15:23:03:fa:e2:0d:77:8f:cb:3c:2c:1b:d5:
d7:4c:28:64:0d:69:67:e7:a9:a7:20:fe:f2:65:00:
29:cb:ba:98:3b:09:95:31:95:d8:86:58:75:a4:b6:
b8:27:91:80:73:e6:70:7e:6d:fe:62:fa:18:ad:98:
d3:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:48:67:AE:6F:EC:FC:53:E0:C7:13:59:53:D6:F2:4E:7B:A7:EB:CB
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/_Uhnrm_s_FPgxxNZU9byTnun68s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
33:6a:59:89:46:13:5d:dc:e2:2f:55:5a:22:32:46:9f:7c:4f:
d5:78:da:1e:27:44:73:79:ec:e7:2b:49:a8:ab:fd:0f:a4:15:
cc:cc:0a:77:4b:43:e9:c9:74:05:2b:fe:7d:b6:17:d5:30:a7:
5d:3d:c0:ec:69:1d:03:dd:97:bc:0b:41:5b:f2:19:b4:b2:84:
d8:43:34:e5:65:74:88:c3:c1:aa:06:b0:ba:36:b9:6c:a2:e8:
27:2d:16:a8:5a:a2:26:8c:77:cd:12:be:5a:f5:01:13:6a:79:
2f:63:0e:38:86:2b:92:3d:ac:85:68:ed:cd:4d:46:dd:a6:6f:
c9:06:bb:60:64:e7:dc:ae:c4:8f:74:2e:63:d0:9a:fa:ac:51:
c4:9a:e7:e1:e5:06:95:2d:ff:85:ef:ec:86:39:dc:00:e1:ee:
49:c5:5d:62:52:f4:f6:26:e0:6a:b1:33:51:d5:d0:4a:c4:b0:
2a:71:a5:fb:c0:23:a8:29:6f:ae:58:b2:32:21:90:10:6d:49:
d6:3d:96:80:7c:91:9f:81:ad:a0:54:6f:8e:51:f7:87:2d:fc:
23:83:ce:4e:84:b2:bf:e5:c9:8d:15:44:5f:54:c0:87:cb:62:
1e:97:9a:13:0a:87:6a:44:b7:aa:22:ed:e0:a8:e5:70:1f:07:
28:57:c1:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 01:49:20 2025 by rpki-client