Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ubjvkg4R2lVNkMTdop8AYT7J8l4.roa
File: ubjvkg4R2lVNkMTdop8AYT7J8l4.roa (raw, json)
Hash identifier: WFC8FEsbpF31FFvMUUoWfM1EwpSjg2SSdUxm3RgQqPg=
Subject key identifier: B9:B8:EF:92:0E:11:DA:55:4D:90:C4:DD:A2:9F:00:61:3E:C9:F2:5E
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B41383D0EEF486587F0A2E5688D50A846
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ubjvkg4R2lVNkMTdop8AYT7J8l4.roa
Signing time: Wed 18 Oct 2023 05:18:06 +0000
ROA not before: Wed 18 Oct 2023 05:18:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:41:38:3d:0e:ef:48:65:87:f0:a2:e5:68:8d:50:a8:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 18 05:18:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b9b8ef920e11da554d90c4dda29f00613ec9f25e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:85:99:67:41:ff:80:a6:2c:bc:a8:b1:7f:fa:
4e:49:73:1a:f6:0f:75:da:fb:71:5a:a6:d2:85:82:
37:56:32:b2:49:46:0e:db:6e:1c:ad:8f:1d:77:7e:
5d:b4:65:72:1f:79:e3:82:46:d2:4b:d0:41:a0:2b:
4f:2b:b3:02:04:f0:cf:84:fc:56:5d:fa:ab:b0:ae:
d9:bd:94:c4:f9:28:61:93:1b:19:e3:f7:de:69:41:
84:49:dc:9f:a4:0c:67:08:27:34:ef:c2:27:de:ef:
70:d6:42:b1:75:fb:38:41:a5:8c:40:19:4c:81:d1:
09:95:ca:ea:54:67:2e:bb:6f:9e:30:47:ce:07:97:
0e:23:fe:83:42:ec:80:2a:49:09:7a:12:d2:81:56:
9b:39:d3:a7:71:5d:ae:3f:44:f4:42:62:c9:ca:5f:
90:d6:46:05:07:ae:70:5f:2d:27:2b:c8:5c:3c:33:
96:dc:22:a4:2d:a4:ad:b8:35:fd:90:62:81:ba:90:
ab:81:45:d5:61:14:09:f3:17:ac:88:74:cd:75:de:
c3:96:50:cf:75:93:fa:03:fe:11:94:c5:6e:9a:8c:
30:39:2f:5b:cf:39:b3:8c:1f:9b:d4:4b:bb:4f:82:
90:45:5a:0e:9b:bd:c8:6f:7a:67:df:52:52:38:8c:
e1:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:B8:EF:92:0E:11:DA:55:4D:90:C4:DD:A2:9F:00:61:3E:C9:F2:5E
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ubjvkg4R2lVNkMTdop8AYT7J8l4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
37:32:17:f2:87:20:b3:46:4f:8c:71:58:63:4e:eb:b4:71:46:
54:ab:d0:f9:62:6f:a5:3e:bc:2f:ec:8f:a1:c1:8a:7a:18:1d:
c2:c3:e6:ab:84:74:94:be:0b:8b:4c:eb:1a:7f:95:8f:bc:ea:
30:81:d7:19:bf:a8:ea:24:ec:be:ad:42:0f:5a:1c:b2:fe:fa:
21:68:c9:e3:07:a5:29:21:87:8b:ef:81:0e:5f:7c:59:87:26:
88:ce:7d:6a:e8:da:c7:a3:e0:ef:c7:92:b0:89:79:a0:09:a0:
44:c1:6f:6e:f5:22:ca:82:31:bc:96:4d:55:55:79:6d:da:60:
5a:05:6a:b0:77:4c:e1:31:9d:b2:11:a4:e6:6b:b6:ad:25:5e:
54:86:4f:62:99:dc:3f:58:b9:ad:7f:9c:27:a3:82:21:a2:9e:
0b:16:8f:46:36:84:df:0d:88:86:a5:e1:dc:a0:1b:16:27:ec:
d1:7f:06:db:8e:7c:86:b2:02:59:5c:1c:8c:6e:1d:1f:51:3b:
f5:c6:f4:34:4f:77:c2:ac:ca:d5:54:7d:7e:1d:e0:62:88:be:
a3:53:08:90:71:a5:b0:96:51:89:b3:76:f9:62:45:c2:27:5d:
0d:0d:29:1f:e7:f2:85:1a:d4:f0:d7:b3:d8:ea:4d:e3:98:d4:
fc:41:d7:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 07:36:45 2025 by rpki-client