Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/uHZ_L-qIzkpyhpx4uzs2FwM2P7Y.roa
File: uHZ_L-qIzkpyhpx4uzs2FwM2P7Y.roa (raw, json)
Hash identifier: QIGOkQyFQFlggkj53RS0kkYVwMG2iT3WLscl8GNoDVs=
Subject key identifier: B8:76:7F:2F:EA:88:CE:4A:72:86:9C:78:BB:3B:36:17:03:36:3F:B6
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B2D40AF07FA30BCA018D637026C1BBEE7
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/uHZ_L-qIzkpyhpx4uzs2FwM2P7Y.roa
Signing time: Sat 14 Oct 2023 08:14:55 +0000
ROA not before: Sat 14 Oct 2023 08:14:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:2d:40:af:07:fa:30:bc:a0:18:d6:37:02:6c:1b:be:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 14 08:14:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b8767f2fea88ce4a72869c78bb3b361703363fb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:55:50:12:ea:b5:9a:b1:c9:fb:85:52:cf:75:
a5:c2:9d:38:e1:73:74:a1:28:69:99:f8:1e:33:e8:
64:ff:e8:94:e3:4a:1b:cf:42:3d:c2:01:e0:60:c3:
cd:b5:37:31:18:74:85:c3:51:96:7a:fb:bd:65:54:
eb:4e:c7:2e:59:83:d3:35:0d:ba:54:4d:3b:81:5f:
ec:f7:ea:3b:c6:79:90:e6:13:a8:58:98:30:18:6a:
23:27:46:c4:0c:bb:de:7f:4f:43:04:ec:1a:ef:36:
44:66:df:12:76:4e:71:21:b0:49:52:c7:e0:36:15:
f2:68:0f:a5:6a:68:35:71:52:08:e3:d9:c3:c1:16:
88:9c:fb:bf:72:15:1d:5b:74:5a:69:c0:c6:db:00:
fa:20:c7:07:a2:d2:46:35:e4:23:05:8a:df:59:92:
d2:8e:64:2a:84:b5:03:48:0f:1e:20:b1:d0:8d:00:
08:95:bd:5b:c3:b4:20:94:61:14:6d:3b:cf:6f:d9:
3f:a3:b7:cf:f0:89:b0:83:78:e4:76:a9:06:bf:60:
a5:0b:48:c8:52:1a:28:49:38:0d:de:42:dc:aa:d4:
64:fa:19:90:0a:c6:c0:54:c8:09:1a:aa:37:dc:b9:
86:89:c0:b7:c4:a4:d6:ac:93:d1:df:26:a7:5b:58:
bb:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:76:7F:2F:EA:88:CE:4A:72:86:9C:78:BB:3B:36:17:03:36:3F:B6
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/uHZ_L-qIzkpyhpx4uzs2FwM2P7Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3a:46:9b:32:f5:26:39:97:f0:99:9d:e0:84:aa:e1:86:60:79:
16:42:ef:bd:1d:22:dd:ef:8e:1b:0a:b2:87:a8:0a:6f:8b:31:
73:a5:8c:36:1a:e8:6e:85:94:2d:20:04:2a:e4:34:cc:4d:60:
ef:8a:c3:58:78:b3:22:fb:9c:11:53:a0:c2:7c:17:1b:12:f3:
7a:18:2e:0a:57:b2:b6:f9:c5:28:74:f5:32:15:ec:32:99:d5:
bf:95:11:9f:eb:3f:28:19:1d:59:39:c3:0e:ff:5a:31:bd:21:
33:45:7a:7b:cd:50:bb:dc:b6:ca:34:5b:09:64:ce:a1:df:71:
95:be:09:fb:1b:c5:5c:a4:79:67:c8:e1:83:e4:0d:bf:e3:84:
bb:c8:6c:03:f5:85:85:4e:69:42:1b:1b:91:bc:30:c6:78:7d:
b2:a7:6d:27:6d:67:c0:3c:3e:01:af:c8:8f:fc:2b:44:ad:94:
d2:d2:38:8b:e4:6d:e5:cb:3a:f1:cf:f4:4d:03:79:2d:58:86:
78:4a:28:f8:0e:5e:59:c6:89:85:09:6c:df:4c:9b:4b:99:6d:
78:5f:74:9e:8f:ca:e7:68:f5:c7:75:92:cc:3a:88:01:c1:f3:
f7:55:ac:c4:67:80:fb:6e:67:67:5d:e9:62:3e:6f:09:43:85:
8b:e3:e4:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:51:12 2025 by rpki-client