Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/uIGVmNJjVExgb7TQ_lKE9azLU_I.roa
File: uIGVmNJjVExgb7TQ_lKE9azLU_I.roa (raw, json)
Hash identifier: lwZP725NOyrPgAXyPSgWFxU6/h/GSDy6i6ncHkLJWhU=
Subject key identifier: B8:81:95:98:D2:63:54:4C:60:6F:B4:D0:FE:52:84:F5:AC:CB:53:F2
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C4E4DF3D1C77DCE948946A8BE7A6D0CEA
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/uIGVmNJjVExgb7TQ_lKE9azLU_I.roa
Signing time: Sat 09 Dec 2023 11:19:40 +0000
ROA not before: Sat 09 Dec 2023 11:19:40 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:4e:4d:f3:d1:c7:7d:ce:94:89:46:a8:be:7a:6d:0c:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 9 11:19:40 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b8819598d263544c606fb4d0fe5284f5accb53f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ce:38:54:44:48:e8:06:19:bf:c1:44:33:8d:
d1:26:04:50:a4:e3:4a:91:10:31:91:3d:c3:ba:38:
5a:1e:9a:da:7c:80:a9:25:9a:61:2b:7d:56:49:63:
41:0c:67:8d:77:6e:99:88:1d:03:c0:fa:32:59:88:
e1:f9:39:df:3a:7e:1a:c5:09:bb:f9:8a:1f:f8:1e:
3d:ca:eb:7b:32:9a:65:53:73:c7:05:a1:30:e9:a0:
68:cf:c1:2e:d4:c8:17:e2:7f:38:00:07:dc:0d:af:
1e:e9:a8:72:fe:db:9c:4a:bc:f2:7c:70:59:49:c8:
da:78:5c:20:72:50:3b:13:db:48:81:53:93:bc:f4:
a5:12:88:e4:dc:57:a2:b9:8b:bb:ea:65:08:2e:66:
ab:ec:31:f4:03:1e:69:de:a3:a3:41:fb:e7:ed:59:
85:d3:75:fe:4a:5e:06:c0:80:86:0f:37:a3:d0:99:
36:98:76:8b:dc:e8:c6:75:44:10:b8:32:9e:2a:a0:
38:d4:60:29:8a:be:cf:07:d6:3c:43:13:1c:6b:97:
19:d4:d6:4f:b7:b0:f1:47:5d:cf:5e:45:25:f9:96:
20:d0:70:bf:0a:7e:4f:bd:d4:38:2e:59:e3:f4:3c:
7b:3c:d2:0f:c0:a3:1c:1c:38:4a:17:70:1e:2c:d5:
7e:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:81:95:98:D2:63:54:4C:60:6F:B4:D0:FE:52:84:F5:AC:CB:53:F2
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/uIGVmNJjVExgb7TQ_lKE9azLU_I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5f:55:8d:9b:0b:dc:80:b8:96:a0:cb:9b:17:be:d3:ca:24:a3:
f9:ec:65:af:31:2f:cb:45:82:db:a7:a9:5a:b7:f4:60:ed:49:
30:bc:80:b5:91:40:d0:68:cb:57:f2:6e:50:6e:cc:88:06:98:
e6:1d:33:af:ba:80:94:7f:e0:7c:5b:1c:fa:1e:93:34:7e:92:
c2:16:eb:e9:a1:6f:c8:cb:ce:1a:29:c6:12:83:40:a3:ff:23:
e8:04:02:40:67:81:55:9f:d4:34:a1:f9:5a:b4:54:5e:7c:f1:
46:a1:f9:51:76:2d:98:12:3c:e9:99:24:16:87:82:1f:8c:e0:
ee:8e:86:2e:ec:46:1f:89:a0:5f:6b:dd:f3:b8:f0:f0:3d:c2:
65:5c:53:9c:58:13:ad:2f:30:3e:5d:bd:02:d3:88:8a:18:b3:
29:44:c7:db:db:a1:8b:80:d0:37:4e:a6:cd:71:4f:5a:c3:ff:
c7:7f:0d:91:45:9f:3f:6b:89:1e:64:82:65:84:48:81:95:8e:
d6:51:67:44:bb:08:1f:9b:cc:db:84:dc:11:e9:ab:28:47:4e:
2a:79:71:44:1e:85:a6:47:53:81:e6:25:5b:54:70:35:d2:fc:
d3:98:bc:e7:d2:bf:c8:a8:d2:11:7b:c4:25:38:12:e2:69:15:
6b:28:a5:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:26:58 2025 by rpki-client