Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/1-UzQf6YLJ11j36ZY9kLhrnK0MAE.roa
File: 1-UzQf6YLJ11j36ZY9kLhrnK0MAE.roa (raw, json)
Hash identifier: bfFSiYykh2S9ZA0VCUM5qfHj35LCLIbVwP+mSGFWGSQ=
Subject key identifier: F9:4C:D0:7F:A6:0B:27:5D:63:DF:A6:58:F6:42:E1:AE:72:B4:30:01
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B0331E6A1DC7FFA4B68E389FB71739CE0
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/1-UzQf6YLJ11j36ZY9kLhrnK0MAE.roa
Signing time: Fri 06 Oct 2023 04:14:43 +0000
ROA not before: Fri 06 Oct 2023 04:14:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:03:31:e6:a1:dc:7f:fa:4b:68:e3:89:fb:71:73:9c:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 6 04:14:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f94cd07fa60b275d63dfa658f642e1ae72b43001
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:cf:fc:39:5b:38:dc:8e:0c:ad:17:34:26:c2:
b5:10:94:f6:ea:c1:05:5a:69:fd:85:11:f7:4a:af:
2a:a3:a2:f4:2d:b4:ee:e2:f9:3b:10:09:25:6e:d8:
56:76:f6:62:2e:55:24:76:7c:e1:58:db:12:aa:9e:
50:aa:a0:e1:27:37:42:d9:e7:ef:a1:57:37:7f:93:
65:3f:26:7a:de:84:43:7a:69:84:da:be:63:d5:2f:
bc:51:69:89:fd:3c:38:8c:8b:37:77:05:c3:70:e9:
36:45:e7:fe:a4:41:1c:df:ae:54:51:cf:5a:63:bd:
e1:12:11:35:68:07:d5:2f:b8:8c:3f:79:8f:4d:36:
76:b9:9a:bb:64:11:71:61:64:1b:d2:0a:a7:25:50:
d1:d1:f7:7a:bc:6e:7c:82:e0:4a:2f:55:77:0d:bb:
44:e9:99:78:66:23:c8:48:f6:46:59:ac:2e:2e:23:
49:c6:08:20:56:c5:64:ac:ce:72:4f:28:68:d4:89:
26:a6:42:8a:62:2d:7e:bb:31:ff:c1:b0:48:c1:63:
c0:31:b0:b1:d0:63:11:36:b4:41:96:8f:43:70:b9:
9e:38:e0:3a:28:27:0f:e4:84:6e:11:f5:93:9c:8c:
55:a0:51:fd:54:55:0c:76:b8:a6:32:89:59:8a:ac:
8b:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:4C:D0:7F:A6:0B:27:5D:63:DF:A6:58:F6:42:E1:AE:72:B4:30:01
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/1-UzQf6YLJ11j36ZY9kLhrnK0MAE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
39:97:a3:32:d9:bc:96:57:96:1b:62:33:34:ce:f7:f9:ed:43:
c2:ca:80:22:20:9c:c1:ea:7c:68:ba:11:d2:bf:44:41:4c:a5:
3f:68:12:0f:35:ed:18:82:41:b3:82:48:16:af:8b:b7:b7:84:
bc:be:cd:20:df:b6:de:ee:80:78:e7:57:06:a1:9f:09:8b:e4:
de:24:36:fe:82:f2:8d:61:4f:7c:a4:18:08:92:a2:db:eb:54:
d5:b7:3a:45:10:26:e4:83:ac:e3:a5:b6:17:50:8b:bb:73:bb:
b1:ed:11:80:c3:7a:b8:11:c5:28:e0:20:34:0a:02:a7:92:87:
58:1d:7a:aa:04:2d:a9:fa:c1:1f:1d:e8:40:9c:a7:08:48:48:
38:fb:b6:46:3b:95:c1:8c:77:28:76:a0:9c:fe:13:c2:1b:52:
6e:e1:e5:93:52:b4:35:d7:35:ad:71:e8:9a:d4:ab:0b:45:fd:
b7:d6:54:06:31:dc:94:bc:f9:5f:67:11:59:6f:b3:a2:c4:16:
10:02:f2:19:c5:af:52:34:13:37:d1:62:b3:5e:6b:d7:b6:99:
0d:05:4b:b8:62:04:ce:5c:c2:89:9d:08:0b:49:c3:06:1d:28:
95:ec:53:c1:69:91:82:03:49:cb:17:43:9b:0e:f6:a1:c1:91:
58:24:bd:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 04:32:26 2025 by rpki-client