Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/uf0_Wiw6jVmLb_CguYH9TJoyLQc.roa
File: uf0_Wiw6jVmLb_CguYH9TJoyLQc.roa (raw, json)
Hash identifier: nNsVXSPN9EWjTxL9/l+JtOp4thWh5cWY24MyL+t8IcY=
Subject key identifier: B9:FD:3F:5A:2C:3A:8D:59:8B:6F:F0:A0:B9:81:FD:4C:9A:32:2D:07
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BD7D411590F8B095481949CAD03720D57
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/uf0_Wiw6jVmLb_CguYH9TJoyLQc.roa
Signing time: Thu 16 Nov 2023 11:11:21 +0000
ROA not before: Thu 16 Nov 2023 11:11:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:d7:d4:11:59:0f:8b:09:54:81:94:9c:ad:03:72:0d:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 16 11:11:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b9fd3f5a2c3a8d598b6ff0a0b981fd4c9a322d07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:49:9b:dd:89:84:75:28:f1:ab:99:90:c9:bf:
c7:2a:d0:c0:ef:c7:5d:18:53:01:f3:f9:3a:e3:4d:
8b:8e:c7:0a:a3:3e:2c:8e:82:47:8b:3b:65:b1:d5:
39:53:c4:40:cb:2a:40:e3:f8:7a:88:eb:ef:f5:9a:
58:cf:74:25:b9:93:9e:45:04:88:eb:04:c4:44:b0:
ba:29:1c:1c:03:27:96:2b:90:1e:5b:2d:56:0b:a4:
64:3d:70:a7:a9:69:e6:48:a2:7d:6c:20:e6:e3:47:
2d:7a:a0:63:36:98:ac:e5:2d:46:a5:70:62:f4:6c:
4b:31:03:5e:51:22:22:57:97:a4:18:44:7c:df:ac:
9b:2c:f6:4e:6f:17:ba:25:c8:9e:76:da:a7:78:02:
d4:26:35:4d:06:b5:03:4c:cc:f3:14:21:f2:b0:c1:
98:49:30:7c:33:b5:9f:8b:89:32:ca:22:da:dd:49:
5e:57:87:8e:ae:52:67:01:63:2a:41:ac:ca:94:54:
5d:6f:fb:be:67:87:e3:ed:9d:d4:aa:08:0b:a8:04:
09:b2:1c:85:1f:d5:57:f0:c0:f4:9c:1c:bb:a1:db:
35:e8:71:a5:dc:b1:64:5e:8d:56:65:d0:3c:75:2f:
a9:cc:65:31:aa:66:54:a3:a6:61:05:87:df:e7:2f:
f2:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:FD:3F:5A:2C:3A:8D:59:8B:6F:F0:A0:B9:81:FD:4C:9A:32:2D:07
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/uf0_Wiw6jVmLb_CguYH9TJoyLQc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4b:0e:d3:87:6a:3a:e4:e9:8d:90:b1:35:08:ff:3d:eb:2a:13:
24:2e:14:4d:36:7c:30:8e:f5:b7:1b:93:e5:74:f3:c5:a7:1d:
f6:f1:90:2e:38:0e:56:1b:da:62:bd:86:ca:ae:49:62:82:b0:
07:58:4e:42:66:c3:6d:e6:4a:10:f7:0d:dd:7f:23:87:fa:8a:
5c:a7:7b:3a:aa:d3:b9:83:46:ab:1c:48:98:68:4c:68:40:f6:
98:db:58:58:00:b1:f4:53:fe:fb:32:4e:9c:d9:51:41:b7:6c:
75:20:85:47:cc:6d:98:af:c4:dd:1e:64:f6:4f:0d:ae:7f:22:
21:1e:bc:cc:b7:16:38:a4:c6:8d:4a:63:34:11:45:29:da:96:
2a:d7:63:c5:e7:02:0c:d8:b1:46:3f:b7:ce:60:e3:fd:78:f5:
fc:d0:20:7c:a9:e7:2d:2c:4a:14:d8:58:1b:cd:a1:62:66:cb:
40:81:6d:49:1a:fc:5d:5e:1b:ef:c0:73:56:58:11:13:9d:f8:
8b:dc:1c:e5:73:a8:78:db:d2:60:93:09:98:92:ee:21:47:87:
46:fb:d4:2f:dd:25:33:30:c9:50:e1:50:2f:73:54:04:77:c2:
dd:46:e0:3a:ad:64:0b:5b:82:6f:77:f0:e4:ad:b0:29:28:74:
5f:49:47:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:54:58 2025 by rpki-client