Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/umIxIzEFSaFYpU8O572nPLYt64A.roa
File: umIxIzEFSaFYpU8O572nPLYt64A.roa (raw, json)
Hash identifier: uTJO1LvwC2H7pfcZqGWsiPU4szpLksEQuEIuSdmz0dY=
Subject key identifier: BA:62:31:23:31:05:49:A1:58:A5:4F:0E:E7:BD:A7:3C:B6:2D:EB:80
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C35648009BE4F33D831122F008922AEF9
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/umIxIzEFSaFYpU8O572nPLYt64A.roa
Signing time: Mon 04 Dec 2023 15:13:47 +0000
ROA not before: Mon 04 Dec 2023 15:13:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:35:64:80:09:be:4f:33:d8:31:12:2f:00:89:22:ae:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 4 15:13:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ba623123310549a158a54f0ee7bda73cb62deb80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:68:e3:b4:c1:b5:b1:bd:0f:11:6a:40:9d:c4:
1b:4e:dd:c5:e9:1f:31:cc:79:4a:27:69:2f:91:72:
65:fb:85:2e:1d:85:ca:2c:25:85:f5:b5:57:96:9b:
cd:66:3d:36:22:98:c0:ce:90:12:4c:48:64:a6:06:
f0:46:82:f6:af:a2:a0:df:7f:80:db:de:4c:7d:69:
d5:c1:8f:56:86:a2:7b:2b:25:bb:1c:35:bd:5e:17:
6e:bf:14:13:49:94:39:5c:21:38:0d:33:3e:36:f5:
a8:d4:0e:49:ba:97:1b:cd:97:bf:4b:17:7f:a9:7d:
4f:f7:d7:dc:a7:e2:1a:9b:7c:e5:71:ae:74:64:7b:
50:96:cf:38:b9:e2:e8:ee:ca:55:0b:2b:56:9e:dc:
10:3f:cd:03:f2:15:92:36:de:72:49:f9:d2:e8:cc:
34:ab:c3:f5:fa:e0:e1:bc:89:55:ab:d2:c4:87:ed:
aa:77:dc:96:84:3b:f0:b4:26:69:c6:b3:4e:69:c4:
d8:2e:4f:35:93:89:6b:3a:74:5c:67:fb:3c:e0:41:
43:47:64:04:e9:68:31:25:9b:d4:23:a3:09:33:63:
c6:66:c2:b1:b8:7f:8c:f6:ec:2e:32:c4:5e:57:f3:
3d:62:04:aa:50:f1:d6:38:62:50:a5:8a:09:1b:f3:
35:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:62:31:23:31:05:49:A1:58:A5:4F:0E:E7:BD:A7:3C:B6:2D:EB:80
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/umIxIzEFSaFYpU8O572nPLYt64A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
58:a6:95:bc:d0:b7:b6:76:d3:64:79:98:1f:94:3f:bb:b3:39:
2f:96:57:05:c7:6d:42:50:e9:a1:00:3b:5e:6c:53:9c:7d:c1:
22:e1:35:45:d6:51:ba:af:57:39:fb:1e:e5:0a:73:e4:7b:35:
a8:04:06:00:08:11:d1:4c:80:d8:4c:04:1a:24:ed:5f:44:6a:
30:94:39:14:8c:3b:6a:5f:45:b6:6b:63:b4:bf:c2:8e:f5:d0:
c8:be:d6:f2:9c:a5:04:91:6c:c5:1f:5c:31:57:11:cd:82:89:
24:db:4b:f5:21:6d:97:8f:b9:b6:63:49:07:cc:ea:e4:95:b2:
70:b2:d7:4e:b6:09:c7:d1:f8:1c:d4:1d:39:8e:ea:64:7a:07:
4e:6c:28:63:67:74:ad:24:56:06:a3:d0:04:7e:0d:c0:45:18:
94:5f:3a:4f:eb:37:fb:ae:dd:f6:41:bf:1d:7c:88:6c:45:64:
58:c3:e5:d9:af:c3:81:dd:ff:c3:ba:19:14:9d:17:4b:3c:c4:
4f:78:ef:a9:4d:64:dd:7b:89:16:4d:33:cb:a8:34:f8:56:37:
43:10:ba:53:57:40:21:be:83:b4:90:43:d6:e1:ac:79:f2:2b:
06:a1:af:4f:eb:ca:a1:9c:7d:08:66:46:7e:15:66:e9:6d:d5:
d3:9d:dd:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:08:49 2025 by rpki-client