Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/u4NzNgwiFekbpYfV4QzwkaimEfw.roa
File: u4NzNgwiFekbpYfV4QzwkaimEfw.roa (raw, json)
Hash identifier: L4eP21F7eK+KbN3ESrsI+cZ0uV0rrtWxQm4eqqWx1rc=
Subject key identifier: BB:83:73:36:0C:22:15:E9:1B:A5:87:D5:E1:0C:F0:91:A8:A6:11:FC
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C72555CE7E21BF38CF3CD0B150A6E2276
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/u4NzNgwiFekbpYfV4QzwkaimEfw.roa
Signing time: Sat 16 Dec 2023 11:14:06 +0000
ROA not before: Sat 16 Dec 2023 11:14:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:72:55:5c:e7:e2:1b:f3:8c:f3:cd:0b:15:0a:6e:22:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 16 11:14:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bb8373360c2215e91ba587d5e10cf091a8a611fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:68:af:de:48:74:bf:e0:ea:d2:4d:5d:0c:a2:
f1:95:48:32:52:65:78:e3:5c:18:4e:68:45:81:c7:
3f:9c:e3:cf:e6:4f:86:39:4b:90:7b:03:8b:a3:e0:
a1:5c:53:a2:f0:60:fa:ac:1d:74:e7:ca:74:f8:aa:
81:e9:08:23:ec:af:2d:cd:3f:46:46:da:df:1d:d0:
2e:74:d3:fb:2f:3c:63:6a:68:6e:4d:04:f8:27:32:
72:4a:eb:75:a6:4c:c7:dd:6d:53:56:24:b6:c7:8b:
5b:34:63:ef:fc:52:90:2e:98:4f:06:7a:80:3c:54:
d6:96:a7:eb:4c:0d:b7:8c:8f:b8:e2:4e:19:ed:65:
6f:07:c5:b0:03:d9:c8:b7:78:bc:a5:bb:2f:d3:df:
75:e2:fd:de:42:a1:c1:98:ab:28:44:0a:23:89:f9:
80:8c:c8:d8:82:9e:1c:9b:e7:64:06:67:64:8f:f2:
87:33:ec:ac:ec:59:f1:88:3a:bd:3e:34:79:e7:e9:
d9:ae:dc:34:42:e9:0a:fc:fa:52:84:bf:19:8c:28:
16:ff:66:c1:c6:5d:95:5d:8d:a8:08:e3:e4:a9:99:
9e:f3:7a:c1:7c:24:1c:1f:38:a2:65:00:fc:7c:de:
0e:3b:2a:09:41:ac:a8:cf:bd:b5:0f:17:59:ea:49:
5e:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:83:73:36:0C:22:15:E9:1B:A5:87:D5:E1:0C:F0:91:A8:A6:11:FC
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/u4NzNgwiFekbpYfV4QzwkaimEfw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
01:e3:c4:ea:c0:49:0e:bf:a6:bb:a8:27:93:79:84:6d:4d:8d:
1d:5e:0d:6b:63:a2:0d:3b:37:45:45:50:a0:9d:8a:2c:96:0f:
c0:c8:d4:a8:91:3f:ea:02:e8:b4:fd:51:cc:91:a1:72:e5:7c:
ca:cc:9d:8b:e9:e8:09:a7:57:a7:6f:75:90:f9:3a:f0:b0:68:
00:00:c0:ba:e9:ba:4d:e6:f1:5d:c1:e3:90:87:a8:0c:d4:87:
68:fa:1c:dd:ab:a1:69:7a:93:b7:45:90:8f:76:0c:a5:c4:e1:
ff:b2:46:22:96:71:83:df:0f:f4:d5:77:f6:8a:af:1a:09:b5:
c9:20:3f:cd:2e:c3:a9:c2:93:8d:f0:8a:94:54:43:2a:f2:8a:
ce:de:c6:69:25:ec:0e:2e:17:ec:39:53:51:cb:68:c4:0b:22:
e9:6a:d1:64:45:77:5e:3f:36:e4:bc:0d:29:19:1f:0b:12:01:
90:bd:96:aa:14:21:67:9f:96:36:59:ad:c7:45:73:9b:05:49:
f2:7e:ed:eb:44:7c:c2:3c:5f:bb:02:2a:94:6c:2e:da:ae:4e:
2a:fd:b6:3f:68:12:65:56:e6:70:bb:f4:0f:e9:ce:86:e6:f6:
bd:e2:31:a1:cc:73:b7:4e:eb:83:e6:46:db:b4:de:69:10:bf:
99:19:29:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 13:47:50 2025 by rpki-client