Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/unwttXMPl4j_RT-CFgd8Uom2W8k.roa
File: unwttXMPl4j_RT-CFgd8Uom2W8k.roa (raw, json)
Hash identifier: o3+cb/OqjDY6M+TkpXKagR1NFJEthpXav/X8ejZyO+g=
Subject key identifier: BA:7C:2D:B5:73:0F:97:88:FF:45:3F:82:16:07:7C:52:89:B6:5B:C9
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BF67DCDE4FD9B0B8D66E37E6600163C9C
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/unwttXMPl4j_RT-CFgd8Uom2W8k.roa
Signing time: Wed 22 Nov 2023 10:05:21 +0000
ROA not before: Wed 22 Nov 2023 10:05:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:f67c:efe1/128 maxlen: 128
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:f6:7d:cd:e4:fd:9b:0b:8d:66:e3:7e:66:00:16:3c:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 22 10:05:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ba7c2db5730f9788ff453f8216077c5289b65bc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:1b:7b:62:d1:b8:24:14:1b:2b:0c:4c:75:73:
54:ea:2d:e6:66:ed:0a:27:2c:27:2c:67:42:70:77:
e8:eb:f2:04:c1:e9:e2:78:90:c9:80:64:cc:e7:86:
8b:4e:c2:3c:a5:d0:70:19:db:d0:2b:d4:0d:3c:fd:
0a:42:9e:71:65:74:ff:f0:d6:9d:8f:eb:f3:2e:92:
ec:3a:6f:c2:8d:da:21:0b:fe:d9:f4:a8:47:4d:8a:
dc:b9:31:b5:81:3a:c5:39:d9:ba:26:92:cd:95:44:
19:79:27:ff:c0:11:2a:15:4f:40:43:ba:d5:e5:0e:
4d:18:b7:4e:2e:8e:b9:d7:81:88:dd:45:a6:4e:42:
d9:2f:cd:e2:8d:f0:09:b6:53:00:9a:49:c8:35:5c:
2a:21:99:fa:e7:57:62:38:fd:ff:b4:6c:50:bd:93:
37:4b:e2:13:31:ac:37:bd:f5:32:ff:3c:b0:bb:79:
59:70:a8:7e:06:a4:87:f0:43:d7:75:fd:e1:d6:74:
cb:22:35:e9:9f:63:e4:cf:f4:28:b4:5c:8f:04:2e:
bc:c2:ea:15:c5:4b:0c:7a:38:b0:3d:2a:8b:fb:fd:
80:a3:3b:d3:0b:27:54:01:1e:c6:92:d0:d6:1d:96:
1c:f3:38:74:42:07:43:07:f6:db:69:5e:29:9a:d7:
68:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:7C:2D:B5:73:0F:97:88:FF:45:3F:82:16:07:7C:52:89:B6:5B:C9
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/unwttXMPl4j_RT-CFgd8Uom2W8k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2b:fc:d5:f5:09:0e:4b:80:ef:04:b5:72:c0:7c:8c:12:28:79:
ea:bd:b0:10:29:4c:d6:c6:e0:64:04:a1:90:e2:21:09:d7:14:
2b:09:89:1a:db:dc:cf:80:28:4a:da:44:de:2b:ee:a9:45:b2:
d8:e3:80:fc:45:5a:73:47:b1:00:60:c7:24:56:bb:ac:e5:00:
89:75:13:c9:5e:77:65:ab:b0:fb:37:1e:cf:e2:20:21:63:2e:
10:67:ca:3f:42:16:5e:59:bb:61:c2:5c:50:02:15:af:0a:16:
ec:33:c3:c8:f0:f1:61:87:ab:09:a0:81:8f:7f:38:87:0f:75:
3c:3c:72:f5:4a:95:5d:ae:6f:74:89:ea:87:45:fe:08:16:26:
c6:c2:bd:20:e8:8f:7e:9c:72:16:62:38:f9:30:f6:43:d9:f8:
c2:89:89:13:a3:88:e2:0b:a8:53:8f:e4:72:74:5a:2b:77:b2:
28:c8:64:45:c0:b4:3c:b1:3e:36:7b:a0:47:d6:3b:0c:76:20:
d0:ed:8c:33:b3:57:6e:22:18:df:3a:34:fa:b0:b3:60:39:d5:
21:4b:4d:de:8a:86:9e:3a:99:58:a3:91:19:5b:54:c3:04:33:
6c:ff:13:7d:b6:bd:3b:30:ae:f6:f0:fd:e9:b5:10:7a:07:67:
fe:80:3f:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 18:12:17 2025 by rpki-client