Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ubDcYQw951r5RAU1DxsH4F9GBWY.roa
File: ubDcYQw951r5RAU1DxsH4F9GBWY.roa (raw, json)
Hash identifier: 29IMFtr2guy0jA+walXQ1K1qNViku5OBXxreUAYkS2A=
Subject key identifier: B9:B0:DC:61:0C:3D:E7:5A:F9:44:05:35:0F:1B:07:E0:5F:46:05:66
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BEF714C69F99B18CE7C49C40AD34B8AA4
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ubDcYQw951r5RAU1DxsH4F9GBWY.roa
Signing time: Tue 21 Nov 2023 01:14:21 +0000
ROA not before: Tue 21 Nov 2023 01:14:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:ef:71:4c:69:f9:9b:18:ce:7c:49:c4:0a:d3:4b:8a:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 21 01:14:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b9b0dc610c3de75af94405350f1b07e05f460566
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:7c:44:7d:7c:b6:0c:c4:45:d0:75:93:b1:51:
83:71:e5:64:56:21:0f:b0:70:12:8a:f7:d1:fb:68:
07:9d:f1:44:29:20:72:21:37:93:4a:3d:42:d2:a2:
d6:e8:24:bc:77:66:fb:7a:3e:e6:62:62:10:5c:26:
ca:4a:28:51:e0:74:d8:ec:b0:9f:06:47:11:f5:c1:
19:f0:3d:c1:71:8b:19:0e:e9:e4:86:5c:8b:48:bc:
a2:04:0a:e7:9a:ee:1e:a0:1b:01:a7:a6:19:e1:8f:
97:7b:ac:25:b1:df:9f:1e:d5:88:e1:4e:f6:b9:84:
60:2d:e0:0d:c8:8f:c9:c8:ef:58:b2:c6:e3:f6:54:
68:0f:fa:1a:1d:0b:7a:aa:bc:c6:2d:36:42:9f:dd:
55:6a:c6:5b:f6:62:ea:2f:ec:8b:08:c6:d7:c7:fe:
c6:de:39:fb:e3:e5:39:a8:04:d0:04:4a:41:d9:33:
bd:77:93:20:0e:2e:2b:21:fb:cf:39:02:97:cc:90:
6b:1d:17:b0:d5:57:85:66:42:60:92:f0:ed:ba:03:
88:d6:0d:cf:c6:1e:16:30:fe:8b:f3:77:2c:c6:af:
37:3c:0f:70:e0:07:b5:ad:f8:e7:9f:02:4f:a5:7f:
87:cf:3b:ea:d5:63:cd:e4:6b:d9:35:33:cf:56:e0:
fd:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:B0:DC:61:0C:3D:E7:5A:F9:44:05:35:0F:1B:07:E0:5F:46:05:66
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ubDcYQw951r5RAU1DxsH4F9GBWY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
56:05:26:dd:88:af:b1:16:92:b2:7c:dc:f6:8f:84:45:73:88:
91:20:02:9a:8f:31:fe:7f:65:ee:f7:c8:73:f0:b8:73:34:7a:
c8:a2:64:71:59:06:80:8c:2c:58:fc:ea:eb:0c:e6:83:9b:3c:
83:91:ab:1f:41:95:53:b5:59:b8:70:bb:bb:46:67:1c:ee:be:
bb:2f:d7:64:90:12:57:35:de:cc:d3:08:a4:65:7c:80:73:00:
9f:71:36:40:63:83:d6:10:71:f1:e7:22:c4:f3:6d:cf:94:66:
24:40:3b:1d:2b:73:f1:74:e5:4c:77:20:6e:43:a0:61:cb:f0:
81:49:02:f4:f4:c9:aa:2f:8a:7b:41:27:fc:cb:6b:28:44:4c:
4e:7a:83:ca:90:f3:be:78:f1:56:1e:c8:f2:fb:06:cc:84:cc:
3a:48:a2:77:ec:da:ce:eb:05:bb:fb:0a:90:27:29:9e:8b:b4:
ab:90:46:6e:73:82:d6:09:51:6b:94:c8:0d:c5:bc:d2:a6:3d:
8a:1b:d7:3e:74:ee:1e:e5:fa:f6:96:3c:36:87:e2:34:43:99:
a7:e7:75:7e:0c:8d:e1:de:62:98:75:fd:b9:9c:e5:95:20:16:
32:10:d5:9a:57:35:0f:68:0d:8e:1c:a1:55:7f:8a:bf:d0:e7:
fd:7b:e0:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 06:06:10 2025 by rpki-client