Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ru6c-UEENDxMNGu8IhKwCyuJB2o.roa
File: ru6c-UEENDxMNGu8IhKwCyuJB2o.roa (raw, json)
Hash identifier: cEhk/fm2jqjHTb1OTZRcwB4SOuEcfRvr8mqAyFN/X84=
Subject key identifier: AE:EE:9C:F9:41:04:34:3C:4C:34:6B:BC:22:12:B0:0B:2B:89:07:6A
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B12A410E3EE5E19439287C014A28D6CD4
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ru6c-UEENDxMNGu8IhKwCyuJB2o.roa
Signing time: Mon 09 Oct 2023 04:13:43 +0000
ROA not before: Mon 09 Oct 2023 04:13:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:12:a4:10:e3:ee:5e:19:43:92:87:c0:14:a2:8d:6c:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 9 04:13:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aeee9cf94104343c4c346bbc2212b00b2b89076a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:12:5c:49:80:7c:72:c4:88:cb:1c:c1:66:58:
79:36:b6:d4:b0:6e:f3:73:f0:39:ce:69:43:d3:4a:
4e:03:4e:97:19:8a:65:e3:e7:93:2f:66:fc:2a:11:
bd:4c:ef:ab:b7:f1:94:6a:f0:c8:54:21:51:f6:36:
bd:ab:2f:58:02:bb:78:ca:7d:d9:57:c5:0d:17:6d:
29:2f:01:f9:cb:f7:9b:24:f6:b9:30:84:d0:c9:ca:
ad:ed:70:9c:93:6f:0c:8c:2c:03:e3:59:02:b7:f5:
90:a0:f8:7b:f5:7c:9e:40:8a:9f:e8:03:61:82:b5:
0d:54:64:5d:dc:ca:fe:4e:d9:d9:60:63:85:d5:21:
4c:25:31:34:aa:e8:77:07:65:b3:48:41:a8:f8:bf:
2d:9e:36:04:56:95:f0:ed:5c:53:77:e4:b1:2a:9e:
96:0b:34:21:25:c1:af:44:d1:76:29:13:35:a5:d0:
94:15:bd:44:a1:56:08:c6:4b:5b:6e:3d:c8:13:2f:
8c:89:05:10:07:a5:6b:70:de:00:ef:8e:1e:39:c7:
f0:49:a4:3e:55:9b:91:19:c1:77:c9:40:46:09:ee:
a5:90:bc:ab:df:c6:a9:6d:05:03:f2:9e:3e:41:38:
3b:37:ea:b8:f7:a4:44:a3:29:c2:ae:fa:05:ce:65:
0c:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:EE:9C:F9:41:04:34:3C:4C:34:6B:BC:22:12:B0:0B:2B:89:07:6A
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ru6c-UEENDxMNGu8IhKwCyuJB2o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
24:2e:72:87:de:4d:03:26:e8:d1:ce:ef:1c:bc:90:fc:40:29:
4e:80:10:ba:14:5b:9a:7b:67:47:11:0e:fc:69:41:ca:5a:f4:
ec:88:05:12:21:0c:43:22:5c:2e:fb:3b:ac:1d:45:ca:63:89:
0b:04:5d:96:29:b7:6b:d8:14:b2:96:83:f9:cc:af:c1:74:6f:
47:42:e8:b5:89:5d:fc:ba:69:ab:75:99:ac:91:2e:2e:54:46:
03:09:08:06:4d:13:81:65:37:9d:0c:b6:ff:f6:40:a1:25:dd:
f1:fd:2a:ec:0e:01:e2:92:58:81:16:67:28:57:01:81:6d:8d:
9e:f2:11:26:10:c1:44:59:61:ef:76:89:57:8f:b2:ce:a9:c5:
13:16:43:fc:7f:0f:24:56:8f:bb:3c:0a:dd:46:c9:78:13:a3:
2e:59:a3:7d:d9:89:1d:2b:5b:e6:41:51:17:c1:5e:84:5f:8f:
1c:5b:41:05:40:0e:56:96:14:e7:ea:3c:c3:67:10:20:da:9e:
01:67:45:60:a0:b1:6e:16:f6:ee:09:1b:70:7c:9d:b5:56:d6:
13:63:cb:71:73:46:75:e7:14:96:fe:ac:20:f4:19:bb:0b:ea:
b4:f1:db:5e:ca:c1:dd:a7:93:25:d8:c9:2c:1b:f6:58:1a:41:
6a:a5:a2:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:45:38 2025 by rpki-client