Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/uiqr7pwn214Ul_nAllwInVJvGkA.roa
File: uiqr7pwn214Ul_nAllwInVJvGkA.roa (raw, json)
Hash identifier: lB8bQpg/P/5vembGw7bgyf68tL2ip/Sz6pay9p+8DAs=
Subject key identifier: BA:2A:AB:EE:9C:27:DB:5E:14:97:F9:C0:96:5C:08:9D:52:6F:1A:40
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C247380FFE05D2D8675CC26940C841937
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/uiqr7pwn214Ul_nAllwInVJvGkA.roa
Signing time: Fri 01 Dec 2023 08:16:38 +0000
ROA not before: Fri 01 Dec 2023 08:16:38 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:24:73:80:ff:e0:5d:2d:86:75:cc:26:94:0c:84:19:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 1 08:16:38 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ba2aabee9c27db5e1497f9c0965c089d526f1a40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e0:f9:05:db:6d:8b:71:2d:fe:4e:f8:b1:d5:
00:85:66:13:00:8c:d9:a0:06:eb:90:42:bf:c9:c8:
21:03:df:f8:78:0f:c6:ba:e5:da:e7:c2:98:9b:6f:
05:dc:ba:3b:bb:2d:f7:11:63:1b:71:cd:11:e4:c7:
86:13:58:5f:b2:21:1e:bf:2d:03:d4:47:06:9c:60:
e0:46:fd:db:51:1b:a9:a1:69:a6:78:cd:78:97:1a:
90:35:8f:c4:68:1f:1e:2c:0b:35:a7:e7:7c:e8:ef:
a9:48:9f:d7:28:df:aa:66:a7:64:71:ef:83:cd:5b:
7f:4f:99:dd:24:71:12:cd:db:ce:03:94:54:e3:6e:
db:fa:79:72:f8:2b:87:a8:6c:1a:3b:05:4a:ab:50:
95:68:05:d6:4c:ff:ba:5d:cd:00:f7:ad:29:a6:02:
1b:82:57:56:85:9d:84:ca:b7:33:5e:c1:56:8b:20:
93:09:f3:ec:a5:e5:aa:6e:2e:fd:0a:ed:82:82:8f:
ff:0f:84:fc:d7:cd:44:ef:df:38:0e:64:41:72:b5:
db:e1:24:e1:f8:17:90:7b:4b:e2:47:4b:32:2b:5a:
dc:8a:45:c3:12:72:01:19:d8:1c:90:61:5c:88:dd:
5f:da:e9:38:53:e3:70:4f:bd:8a:37:3c:e6:65:b6:
72:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:2A:AB:EE:9C:27:DB:5E:14:97:F9:C0:96:5C:08:9D:52:6F:1A:40
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/uiqr7pwn214Ul_nAllwInVJvGkA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6b:40:8a:04:04:5d:79:5e:a0:2a:1f:be:f4:9e:2d:c3:7a:c7:
dc:91:ff:87:d5:1f:3c:d1:d4:bc:93:84:19:c6:32:69:07:f6:
b6:8c:06:a7:1a:1e:d2:b7:63:29:f5:ab:60:2e:7f:97:71:1a:
0b:5d:32:61:2c:5c:e1:13:ed:d4:ac:03:12:a2:28:3c:09:4f:
40:b3:c6:8f:87:ca:98:73:28:a6:7e:e4:6c:de:e3:6f:75:97:
1e:80:a7:65:d7:36:dd:3c:fb:ab:fc:ef:c2:75:16:6e:3c:c3:
fd:8b:6a:54:64:84:e3:aa:8a:ac:5a:24:09:b8:98:06:19:0d:
7c:3a:1c:c5:fc:ae:b8:4d:4f:99:d0:e8:2f:e7:57:f6:15:41:
86:e9:cb:07:09:c2:ba:89:83:fd:b1:cf:4f:df:97:21:a5:37:
be:22:91:76:67:db:fe:87:41:e6:bf:c3:a2:0c:c6:04:9e:7b:
50:79:b4:70:89:8a:bf:b3:6f:3f:07:f6:c8:34:66:2f:49:01:
ea:36:93:30:46:0e:d4:75:ff:de:68:f6:53:f0:16:1c:38:f4:
1b:91:58:b9:99:bf:cb:cb:56:16:50:cf:56:db:0b:2a:1f:9e:
e8:b4:3b:b7:e2:79:a6:29:f0:ab:d9:ce:7b:41:a6:fe:06:07:
3a:14:27:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 16:00:26 2025 by rpki-client