Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/mUukC5F_sx_dmKZntroCThiGUHQ.roa
File: mUukC5F_sx_dmKZntroCThiGUHQ.roa (raw, json)
Hash identifier: U3eUXheZ7vJOP1KC18iRwUNae5WJm3+9vjz15KtjJaY=
Subject key identifier: 99:4B:A4:0B:91:7F:B3:1F:DD:98:A6:67:B6:BA:02:4E:18:86:50:74
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018A566D17137F0FE7CF67DE19B54FED9F2B
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/mUukC5F_sx_dmKZntroCThiGUHQ.roa
Signing time: Sat 02 Sep 2023 15:05:04 +0000
ROA not before: Sat 02 Sep 2023 15:05:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18a:566c:5412/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:56:6d:17:13:7f:0f:e7:cf:67:de:19:b5:4f:ed:9f:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Sep 2 15:05:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=994ba40b917fb31fdd98a667b6ba024e18865074
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:80:22:9a:49:88:05:9f:47:ff:6a:6a:2e:5e:
a0:88:dd:63:f4:85:49:65:71:1e:9b:d9:bd:ae:fc:
d7:3f:2b:a2:b4:4b:66:9a:02:bc:36:f1:09:d5:69:
63:43:a9:a9:e9:1e:26:c1:ba:4a:da:9f:f9:df:44:
91:f3:57:98:f1:2a:4a:2d:fc:2e:13:e0:16:12:5b:
ae:92:54:bb:fa:19:14:f5:35:a4:fb:38:a3:1c:35:
8d:f5:9d:8c:ab:68:8a:32:c8:f6:a4:dc:21:3b:d4:
39:eb:6e:f5:f4:bf:af:74:f5:7b:58:39:61:85:83:
59:a0:e3:c8:a4:1a:bf:ed:88:19:87:79:6f:00:4b:
c1:13:cf:ba:0a:fe:03:6d:10:ec:8c:68:7f:78:aa:
03:91:de:19:11:f1:94:c3:9e:4e:10:ce:b0:a8:09:
2e:c6:03:c3:ed:b8:5f:58:0d:ef:4c:6e:61:29:f8:
79:65:d5:4f:6d:15:05:c8:f4:8b:b6:e9:bf:85:a7:
77:dd:9e:f2:f8:2b:9c:cc:46:00:8b:c2:1b:8f:91:
dc:e2:de:58:bf:39:ca:46:74:6b:06:22:51:8b:9f:
e4:d5:0f:b7:86:81:4f:52:cb:ad:97:bc:66:e5:2a:
e4:56:02:d9:e2:db:cb:ab:c5:61:87:38:75:fc:75:
94:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:4B:A4:0B:91:7F:B3:1F:DD:98:A6:67:B6:BA:02:4E:18:86:50:74
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/mUukC5F_sx_dmKZntroCThiGUHQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
68:6f:b3:27:05:b5:9b:02:89:f5:ab:07:31:ec:54:e4:64:b0:
01:62:a8:de:91:a3:e0:10:cc:1f:5a:6a:b9:cd:1a:1f:4f:d1:
79:05:80:77:e1:49:06:75:a5:b9:97:69:f1:ba:79:99:94:15:
dd:30:8c:bf:ad:e2:f1:de:47:9f:d3:a7:57:e3:9f:41:1a:ce:
f5:ae:58:9f:be:d5:ec:0c:6b:ea:78:45:05:ba:a2:ca:64:d3:
39:87:68:fe:5f:67:59:a8:90:0d:bf:db:43:b4:b1:08:d1:6a:
ea:64:d9:ad:51:ed:e6:96:cd:95:48:dd:37:8c:cc:b8:64:b8:
2f:29:40:4f:56:14:3d:0f:84:32:71:d0:71:da:dc:29:a3:50:
eb:d5:1d:1c:65:34:54:2c:be:f7:7a:20:2b:50:ff:52:8e:f0:
9b:dc:c3:d1:63:3b:8e:76:a7:71:f4:bb:80:92:b9:6b:c9:4a:
01:aa:87:29:c6:26:eb:a4:a2:91:cd:66:9a:50:0a:2e:33:fa:
e7:56:f4:14:a4:c3:2e:a5:75:ae:8d:ea:7e:28:2f:a9:d3:6a:
f5:8a:ff:28:4b:2b:43:71:19:34:49:9f:41:81:61:61:26:4f:
bd:c4:7a:8e:c1:3a:74:44:a9:c1:a4:32:7a:37:86:ae:f5:a9:
8e:fc:ba:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 18:38:09 2025 by rpki-client