Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ujt4MZJQH1rR-jh6FvD_hfjUo7s.roa
File: ujt4MZJQH1rR-jh6FvD_hfjUo7s.roa (raw, json)
Hash identifier: 9lV4Te85BInkSHu3BhVsykNfpcjA0Ayucwa3IvXbYbM=
Subject key identifier: BA:3B:78:31:92:50:1F:5A:D1:FA:38:7A:16:F0:FF:85:F8:D4:A3:BB
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BBB444D8FA697021CEFC57B7CA9F32C84
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ujt4MZJQH1rR-jh6FvD_hfjUo7s.roa
Signing time: Fri 10 Nov 2023 22:04:57 +0000
ROA not before: Fri 10 Nov 2023 22:04:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:bb43:c96f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:bb:44:4d:8f:a6:97:02:1c:ef:c5:7b:7c:a9:f3:2c:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 10 22:04:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ba3b783192501f5ad1fa387a16f0ff85f8d4a3bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b9:6a:21:9a:7b:c6:64:80:94:b7:70:14:56:
4f:f6:49:9a:3b:e8:04:25:b7:ee:19:64:65:b7:b1:
6a:25:90:bc:dd:18:17:2c:cc:0c:0d:d9:11:6a:cb:
c7:c1:49:4b:66:7b:2b:01:ed:b5:0c:8d:f7:1a:48:
71:43:13:e5:a3:04:25:b5:4e:87:77:ab:6a:bd:78:
21:c3:45:6f:7c:0d:43:8c:32:44:34:e2:fb:eb:0a:
11:7d:46:16:13:dc:2a:f0:ca:8d:db:6b:3c:1f:2d:
61:76:74:b0:81:77:e4:e2:9f:4b:cf:61:c1:23:7a:
8f:88:c5:bf:ef:da:aa:22:15:bd:81:c0:b7:53:0b:
4a:72:f0:67:60:0a:bc:84:1a:d8:45:17:42:52:d0:
89:fc:8c:59:d9:e0:16:48:b0:84:c5:de:22:1a:d2:
e4:02:0b:fb:b2:8c:d9:6b:8c:33:8c:75:42:98:78:
15:97:ec:ff:a9:80:68:86:fe:26:4a:b3:5f:e3:87:
20:97:ca:0f:98:65:e7:62:b3:18:bd:c5:5b:8b:cb:
c2:80:95:3e:1c:93:ae:b7:e0:05:0a:06:31:be:a9:
af:77:ad:f5:16:c4:b0:da:2a:fa:7d:80:5c:2c:c0:
59:a8:1b:cb:45:a5:e3:b2:76:97:57:4b:8e:0b:31:
72:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:3B:78:31:92:50:1F:5A:D1:FA:38:7A:16:F0:FF:85:F8:D4:A3:BB
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ujt4MZJQH1rR-jh6FvD_hfjUo7s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a7:ba:33:e8:c6:e0:fd:a9:2b:0c:07:59:2a:a8:33:31:8f:0d:
86:03:b3:80:48:ce:84:e6:ef:05:1d:df:67:43:f2:fd:a6:db:
f7:bf:0a:ea:4b:86:3b:10:ab:16:0e:ae:b1:54:48:f9:93:d2:
f5:d5:8a:0b:78:97:b6:c5:67:a5:14:f4:dd:44:4a:dd:49:a2:
7c:43:a9:d7:4f:84:08:d3:43:10:e2:89:77:5f:bd:2a:bd:7d:
e4:ad:7a:cd:e0:56:1c:ac:2f:61:a1:d3:87:95:92:bd:ea:f0:
c5:c7:a0:70:94:5d:98:88:d3:15:ee:41:bd:0e:0a:65:d6:0e:
34:e5:91:90:84:00:fb:10:f6:22:87:b0:29:a4:56:c7:62:a9:
53:11:1e:37:ea:3b:77:84:b0:ad:8a:c3:38:31:b9:f3:30:17:
36:6e:cd:5a:a3:8a:94:09:af:cf:db:52:5c:7b:1b:36:14:38:
19:fd:1b:5e:57:8e:cd:e8:ad:77:bf:f7:22:64:d1:68:18:20:
72:1e:8b:7a:e6:67:88:0f:f2:f0:a9:eb:09:59:7f:90:d4:09:
54:93:ea:50:1d:67:a9:d6:b5:1f:59:c0:58:c6:d8:90:b3:5b:
1d:1a:95:9a:ec:34:ad:bf:25:67:eb:95:65:5e:e2:4b:83:ec:
41:e7:7e:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 01:08:29 2025 by rpki-client