Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/U2mVKgrt7UEd75Y-hGcXTPM5VjA.roa
File: U2mVKgrt7UEd75Y-hGcXTPM5VjA.roa (raw, json)
Hash identifier: GCQ+ddlCJDHpUu2ch608mjTHAqWuLxemq9XM5BZinWU=
Subject key identifier: 53:69:95:2A:0A:ED:ED:41:1D:EF:96:3E:84:67:17:4C:F3:39:56:30
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B566AB700E7660EDD7F11B2AB89725F1E
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/U2mVKgrt7UEd75Y-hGcXTPM5VjA.roa
Signing time: Sun 22 Oct 2023 08:05:16 +0000
ROA not before: Sun 22 Oct 2023 08:05:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64:ffff:0:18b:5669:d35d/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:56:6a:b7:00:e7:66:0e:dd:7f:11:b2:ab:89:72:5f:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 22 08:05:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5369952a0aeded411def963e8467174cf3395630
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:7b:5e:96:d6:89:af:22:4c:b4:3f:e9:13:0e:
a7:54:ba:f1:89:4a:9f:67:7b:4d:da:ca:32:fb:50:
d4:b5:6b:65:9a:6e:14:f8:dc:aa:22:a7:f6:f4:6d:
54:6d:62:84:6b:46:b1:8b:66:ad:d8:2c:73:97:51:
90:32:7c:24:9f:8c:55:e6:93:f7:c1:42:e8:0a:33:
4e:2f:48:25:20:05:56:01:9d:d8:78:45:03:bf:a8:
5d:99:e9:ac:e1:52:2f:c4:fe:b6:e4:c7:e8:bf:60:
3d:b3:0e:a2:19:a0:fc:aa:0b:2f:a0:48:05:02:f1:
9a:df:9d:7a:6d:49:74:3f:42:18:81:7e:d5:05:32:
05:af:39:da:d7:09:4b:85:da:e3:b7:59:e1:d6:f1:
e6:1d:ea:07:49:66:fd:d8:2d:49:f3:a3:20:0f:cf:
b7:dc:fe:24:ee:ea:1b:36:ce:ba:1d:97:05:16:ef:
7b:77:d5:72:cb:a2:48:2d:8d:e7:2d:43:35:ab:13:
fd:c0:62:68:b3:8f:aa:5d:2c:b3:33:af:a5:02:69:
ff:e7:a7:6e:a6:93:4f:9a:07:34:b3:8c:86:9e:14:
24:b9:41:68:c0:25:17:4a:3b:a8:52:75:5b:b2:be:
71:d2:d7:44:f3:1e:70:06:f3:a7:2f:e2:0a:7d:cd:
a8:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:69:95:2A:0A:ED:ED:41:1D:EF:96:3E:84:67:17:4C:F3:39:56:30
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/U2mVKgrt7UEd75Y-hGcXTPM5VjA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b3:d6:83:d2:8a:63:84:85:e6:6e:8f:8c:48:7f:2b:fb:1c:d0:
02:64:2d:3e:3f:02:6b:26:29:09:db:e8:b8:1b:0c:d5:71:57:
f4:23:db:f9:e4:15:8e:ab:40:f6:ea:7e:c3:77:e2:2f:58:f8:
98:74:e7:b5:4d:29:23:d8:60:30:1e:16:7a:9e:87:24:78:ca:
54:42:f2:66:ab:8a:db:01:d0:c0:fe:a6:8f:47:4c:ba:cc:bc:
a2:8f:f7:00:b4:ca:fb:67:9e:21:c6:e1:bf:27:44:59:a3:d6:
cc:df:4a:26:9b:94:3e:c7:8d:36:a7:01:a7:19:1e:f7:87:48:
e6:76:17:30:cd:2f:24:d9:ba:9c:cc:13:b7:76:a0:7b:33:aa:
6a:8b:4a:c3:54:98:eb:7f:b3:cd:18:f1:e2:6f:a3:da:3b:f1:
cc:c9:af:54:f5:95:03:49:22:9f:11:ea:16:1e:80:9a:0b:4c:
ed:9d:7c:14:28:b8:72:3c:fb:1d:15:da:ec:83:9e:3e:f2:b3:
99:8e:07:0d:f9:1d:71:40:70:2f:09:7a:fd:a2:e8:c5:87:be:
e9:ea:16:c9:d9:b4:30:45:56:32:e9:b5:b2:e1:19:de:5f:c1:
1e:99:7e:31:5d:13:fc:be:75:e3:37:ad:19:2e:e0:9c:02:ec:
df:30:13:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 16:31:36 2025 by rpki-client