Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/uxX-bOMix1ZxHbJBPzPjYrePeoY.roa
File: uxX-bOMix1ZxHbJBPzPjYrePeoY.roa (raw, json)
Hash identifier: p0psqLiBCrFrK5D7A2DD3i6Z8Zq/xX47kxWbXz4ZXPs=
Subject key identifier: BB:15:FE:6C:E3:22:C7:56:71:1D:B2:41:3F:33:E3:62:B7:8F:7A:86
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BB35952E4B05B2A8B758C34468BB6DC2E
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/uxX-bOMix1ZxHbJBPzPjYrePeoY.roa
Signing time: Thu 09 Nov 2023 09:10:57 +0000
ROA not before: Thu 09 Nov 2023 09:10:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:b3:59:52:e4:b0:5b:2a:8b:75:8c:34:46:8b:b6:dc:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 9 09:10:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bb15fe6ce322c756711db2413f33e362b78f7a86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:51:b1:f3:37:fd:a5:4b:a6:e5:8c:6f:4d:27:
90:09:72:b6:59:01:92:8c:1c:88:9c:50:40:c1:0a:
f6:5e:f6:9c:ad:a9:cd:2a:87:29:09:91:8e:77:99:
aa:3d:1b:2a:cc:0c:23:fd:40:4a:25:55:84:ef:6d:
42:93:23:36:54:91:91:57:f6:72:5a:62:2f:92:2f:
22:24:40:81:7a:f4:8f:b7:81:30:28:ec:0c:50:e4:
3a:18:f7:42:a6:dd:f7:21:c4:94:40:24:35:66:1c:
ed:bb:83:c0:97:8d:89:5c:be:0d:40:55:b8:c4:72:
ad:d0:bb:b8:46:30:bc:6d:1c:2e:4d:80:d9:77:60:
e3:15:ee:11:50:fc:7d:d1:ea:b9:34:f1:e4:8d:36:
6f:71:43:a1:9e:72:9b:d3:ee:b3:72:c7:59:9a:ca:
80:cb:06:7e:d5:37:1b:55:28:0e:90:3d:5b:32:c4:
15:a1:16:43:f6:c8:a7:8e:74:bc:f2:66:d8:c1:e5:
29:17:c5:fd:41:ff:05:a2:d5:df:2d:f3:7f:fc:2b:
9d:0e:3b:c3:22:84:89:02:59:7d:38:f3:5e:6c:ee:
f6:a3:9e:03:ad:4e:d2:68:bb:28:83:10:18:f1:20:
99:9c:ed:d9:52:5b:2e:41:04:65:fc:51:36:38:cd:
bd:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:15:FE:6C:E3:22:C7:56:71:1D:B2:41:3F:33:E3:62:B7:8F:7A:86
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/uxX-bOMix1ZxHbJBPzPjYrePeoY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8f:5d:a3:64:3f:28:57:af:64:e1:2a:61:7d:c3:7c:cf:ee:d2:
81:cc:45:1f:04:39:89:07:ef:a0:af:05:1c:59:ce:fa:91:06:
8b:d6:44:89:22:09:68:4c:97:ef:50:29:b6:6f:f9:a0:06:7a:
e3:9d:77:b0:ea:19:c7:ee:32:4f:7f:35:8f:61:c8:1f:85:d0:
f6:68:21:6d:db:37:db:2f:9b:1b:c4:65:36:03:37:64:af:1a:
92:3f:e9:e2:93:d7:ea:62:46:10:58:82:12:98:1e:f7:c3:82:
3c:b7:ac:d8:94:e5:42:1b:d4:22:1e:7b:6e:57:55:de:e9:64:
20:18:7e:d1:9b:15:96:70:01:89:a5:38:39:ea:89:ea:e4:eb:
0e:cf:c1:4e:f0:0d:2b:27:22:33:59:b0:24:47:9f:b1:c5:d2:
79:30:47:df:50:25:0e:15:b5:2a:50:c1:69:ef:ee:bf:f8:4b:
63:1e:b0:6a:6e:08:d3:9a:71:ad:f3:ca:77:69:f3:0c:20:50:
73:6a:44:47:dc:dc:93:54:cc:1e:d1:e4:6a:7a:8e:24:3e:21:
6d:e9:3a:a8:1e:5a:ab:37:3d:ee:2a:fc:8f:70:1e:e9:43:0f:
9b:0b:cc:8a:8b:4d:2b:01:c3:f4:3b:1a:37:57:e7:fc:f2:af:
73:e9:99:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:11:06 2025 by rpki-client