Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/uQmJcJxQlKF0wzYzFmRSCjyECTY.roa
File: uQmJcJxQlKF0wzYzFmRSCjyECTY.roa (raw, json)
Hash identifier: AZF4vq/OPAtXwhsTcVNdP5nysSAkVhZrc+JwogODFYo=
Subject key identifier: B9:09:89:70:9C:50:94:A1:74:C3:36:33:16:64:52:0A:3C:84:09:36
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BFEAFC72A6411D45A18EB53EA2E04C448
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/uQmJcJxQlKF0wzYzFmRSCjyECTY.roa
Signing time: Fri 24 Nov 2023 00:16:54 +0000
ROA not before: Fri 24 Nov 2023 00:16:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:fe:af:c7:2a:64:11:d4:5a:18:eb:53:ea:2e:04:c4:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 24 00:16:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b90989709c5094a174c336331664520a3c840936
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:7f:21:ed:03:c4:8d:56:36:d4:26:48:5c:dd:
f8:77:22:7e:89:da:8e:92:ec:97:38:c1:31:f4:1c:
2d:b4:5c:4c:c7:4f:75:af:0c:e0:0a:a9:4a:7c:b8:
af:89:d2:1e:33:38:bc:f0:20:43:09:8e:dd:dc:bc:
f9:67:ec:c9:c3:e0:52:58:9c:90:c2:9f:17:c4:85:
d9:20:54:e4:d7:23:44:1b:96:b7:55:73:75:68:89:
70:2d:a0:8d:3c:a2:ae:e9:06:5e:02:44:e9:a0:1a:
c9:3e:3e:41:e1:d2:7b:50:8a:8a:76:8e:c5:1a:35:
65:56:72:01:2f:0c:d1:a6:14:96:a4:9f:f0:5a:9f:
27:ce:25:1f:fe:a2:04:5f:4b:e8:6a:22:5e:7d:6b:
04:1f:9d:d5:2c:dc:f3:3c:d7:5a:38:43:18:9c:89:
51:d6:4b:72:64:66:6f:1a:4e:6e:62:fe:91:ee:38:
cf:99:c7:60:28:c3:d6:87:66:07:b0:5e:9b:b4:e0:
90:93:b4:31:14:47:0f:d7:da:f2:16:0e:03:aa:96:
c9:fb:0a:e1:03:dc:78:79:ee:76:8b:30:9c:f8:9e:
3f:3b:23:1c:9f:6a:11:57:1c:90:f7:2b:43:c4:e1:
cd:da:db:c7:f3:ff:3a:5b:ff:ff:d6:ea:c5:51:d2:
12:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:09:89:70:9C:50:94:A1:74:C3:36:33:16:64:52:0A:3C:84:09:36
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/uQmJcJxQlKF0wzYzFmRSCjyECTY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b6:19:8b:61:81:9f:9d:66:88:c2:ea:80:ee:f3:b8:46:70:f4:
a6:90:ae:ca:25:cf:09:80:d4:c5:07:2c:d2:3d:48:71:49:12:
f7:46:51:4f:d1:c1:06:18:ca:b2:13:22:d1:16:82:1f:1e:17:
54:a8:98:44:dd:6c:bb:63:7c:3a:07:c1:90:9a:5c:a8:e6:ba:
cf:7e:9c:77:7d:79:e8:c0:a0:69:22:26:de:02:61:28:57:2c:
c5:cf:ee:7a:50:59:f2:65:db:66:bb:67:1c:9b:ac:22:5c:b4:
ff:69:f5:7e:c2:83:7c:ea:6b:d6:c7:5f:b5:a6:29:6c:af:1e:
fd:6a:48:a9:7a:7f:d3:3b:b2:b3:b6:10:5a:5f:a9:ca:e6:89:
dc:1f:14:c5:0c:6e:45:e8:4f:2a:bd:4a:d6:c4:a0:3a:38:c6:
99:91:69:51:45:2d:cf:af:54:30:dd:92:21:4c:6d:3b:03:db:
0c:f4:bb:7b:f6:34:66:fa:b0:51:bd:ca:4c:f0:91:6c:ff:53:
29:8d:7c:81:0e:f0:58:d9:16:c4:ea:1f:dc:b4:a6:11:35:ba:
0d:f5:e4:f7:6c:f6:8f:c0:f3:e8:9b:23:48:b0:e0:12:57:6b:
3e:c4:bb:31:e9:5c:cc:54:61:21:a6:94:9a:23:c5:c6:ca:6b:
47:e8:e4:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 22:48:25 2025 by rpki-client