Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/u8nIQLzo4Db0LXhE86ccOwA5tss.roa
File: u8nIQLzo4Db0LXhE86ccOwA5tss.roa (raw, json)
Hash identifier: /n2Msl1Z9yPMYzNsu2MLHRJgT8SUrutSHwM1gVk5QO0=
Subject key identifier: BB:C9:C8:40:BC:E8:E0:36:F4:2D:78:44:F3:A7:1C:3B:00:39:B6:CB
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B78C459BD7AC52ECB3E3317DABEBC0F0A
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/u8nIQLzo4Db0LXhE86ccOwA5tss.roa
Signing time: Sun 29 Oct 2023 00:10:15 +0000
ROA not before: Sun 29 Oct 2023 00:10:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:78:c4:59:bd:7a:c5:2e:cb:3e:33:17:da:be:bc:0f:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 29 00:10:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bbc9c840bce8e036f42d7844f3a71c3b0039b6cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:2b:57:74:3e:53:67:fa:34:ce:eb:b1:6b:5d:
e2:cf:0e:86:e0:7b:1e:b5:e7:f2:34:b6:74:27:78:
0c:fc:48:f6:95:8e:f0:d5:4a:67:34:c2:2d:2e:10:
0a:ae:07:96:a0:f4:5a:6b:ca:af:35:ae:00:b2:64:
11:2c:3a:09:41:ef:e1:b0:20:68:ac:bc:15:bc:7e:
f1:ca:32:8f:be:48:6f:3f:49:e2:e3:73:cb:4a:d2:
3f:83:a5:eb:72:01:ee:69:6f:53:17:56:9d:08:7f:
13:4e:ba:0f:df:ea:a8:ac:e4:36:c3:71:7f:a8:9e:
72:e5:39:01:90:c2:5f:67:f5:9d:db:4e:a2:f6:8e:
aa:66:6e:18:ed:a6:22:28:21:f0:b0:9f:2f:19:bc:
e9:a6:34:13:e5:c3:cc:6b:67:be:f8:c5:f1:6f:04:
e6:f4:7d:fb:5d:64:f3:b6:76:99:0d:f6:57:b5:84:
a8:b1:41:04:8d:59:67:40:6e:ed:cd:2a:a7:c7:2f:
13:4a:e5:dd:79:f6:6e:0c:5e:72:fb:0a:c0:39:13:
df:1e:37:d4:02:6e:4b:a1:41:48:88:05:a8:c3:e8:
47:74:af:24:09:bd:f3:f0:6e:a8:1e:5d:b4:33:46:
13:81:89:70:ac:7b:a7:8d:a7:6a:3f:e0:d3:79:2a:
58:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:C9:C8:40:BC:E8:E0:36:F4:2D:78:44:F3:A7:1C:3B:00:39:B6:CB
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/u8nIQLzo4Db0LXhE86ccOwA5tss.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
12:03:b9:36:ab:34:09:9a:fc:06:5f:47:3c:9b:55:4f:ad:2d:
f7:23:c2:86:f0:c3:d6:50:ca:07:d3:9f:31:2f:20:9f:96:fc:
51:98:cc:63:a0:e1:e0:5a:63:55:47:60:1f:73:87:76:10:04:
72:f7:a7:b1:90:af:31:de:fe:a3:f6:99:c8:8b:9a:c4:b7:a2:
f2:fd:52:e2:c5:be:33:7a:45:3a:64:c3:49:6b:00:f1:8c:75:
7f:22:f6:8b:78:ca:70:dd:49:a7:51:5d:85:e3:4f:09:24:82:
ac:83:f3:14:fa:f8:61:9a:31:1b:32:03:9b:32:75:84:d4:2b:
eb:75:14:e1:a4:f8:59:a5:72:1b:f3:ef:1a:d3:9c:16:2a:3d:
32:22:28:29:cf:cf:b0:f4:f8:4b:87:07:9a:81:77:78:54:84:
42:4e:34:56:1c:cc:ef:52:42:c6:92:b6:42:eb:d2:e2:12:b4:
dd:66:1e:46:4f:e3:18:e7:59:04:3e:55:6f:93:09:fe:13:cc:
70:55:1c:a0:20:a1:b0:b5:eb:e4:ca:ea:e1:91:96:3b:1f:18:
67:7d:12:b9:65:6e:80:90:4a:8f:9c:e4:7b:94:34:8d:98:b0:
f8:11:08:e1:46:ba:ed:be:03:ba:9e:77:c6:e7:d4:a2:43:07:
0c:00:5e:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 06:02:26 2025 by rpki-client