Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/UDHCdwQJnfYQbH8ijsPfSvHPndU.roa
File: UDHCdwQJnfYQbH8ijsPfSvHPndU.roa (raw, json)
Hash identifier: 3LFavTqIN89r6WMLcp6ZJYctbJLRNfgdxPJySgTVx9s=
Subject key identifier: 50:31:C2:77:04:09:9D:F6:10:6C:7F:22:8E:C3:DF:4A:F1:CF:9D:D5
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C099EF59AEC3BC4BBB7C84B9B656C93C0
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/UDHCdwQJnfYQbH8ijsPfSvHPndU.roa
Signing time: Sun 26 Nov 2023 03:14:21 +0000
ROA not before: Sun 26 Nov 2023 03:14:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:09:9e:f5:9a:ec:3b:c4:bb:b7:c8:4b:9b:65:6c:93:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 26 03:14:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5031c27704099df6106c7f228ec3df4af1cf9dd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:61:6c:4a:ac:72:47:b5:cf:7b:04:54:b9:16:
8c:82:5c:83:0b:fc:04:28:a6:29:eb:0f:51:e7:27:
b6:e1:d4:4e:b0:e6:c6:a8:c0:0a:e7:41:03:fa:85:
64:cf:85:93:8e:9a:08:eb:5f:5c:4b:29:a2:da:28:
4f:a9:92:46:80:fd:8b:5c:fa:29:3a:a0:c5:8c:7b:
6a:c5:f7:f8:0f:74:86:21:d7:b2:8d:b8:4f:4a:14:
38:51:77:0b:81:dc:93:a2:32:4f:8b:2b:02:a8:7d:
b6:a1:2a:b4:b0:b1:3b:36:84:30:ba:e7:2e:60:39:
3a:e6:ff:4d:02:df:68:17:8c:f3:09:8b:4f:fb:22:
84:ff:e8:89:de:dc:a9:e2:5e:38:15:6d:07:de:0f:
0c:cb:73:e3:77:de:04:c6:47:cf:5c:49:67:3c:32:
66:7e:0d:9e:be:85:5d:e5:0c:42:8c:fb:52:27:b2:
be:15:a5:57:bc:fb:ba:78:d3:36:a8:d7:98:51:5b:
39:95:20:1c:35:8f:1d:c1:c3:46:e3:ed:f0:dc:dc:
47:ba:cd:a1:fa:71:9b:af:51:71:ea:fc:b9:d3:f9:
1c:c1:39:96:67:18:3c:43:13:93:9c:f4:b1:d9:ff:
af:e5:d8:66:de:7c:4a:38:b8:c5:b8:44:16:01:7d:
50:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:31:C2:77:04:09:9D:F6:10:6C:7F:22:8E:C3:DF:4A:F1:CF:9D:D5
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/UDHCdwQJnfYQbH8ijsPfSvHPndU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
73:c4:d9:b5:23:35:a3:36:50:bc:f8:3f:fb:75:6c:45:1e:5d:
f9:31:20:69:ee:e4:ef:46:8e:43:dd:b5:10:51:0d:3a:c9:4c:
0a:38:04:7f:91:9e:ce:54:82:25:69:55:0c:09:f7:3f:63:8e:
52:12:81:c8:ba:b9:ff:bb:c3:45:00:c7:a9:4d:74:7c:0b:f3:
be:a8:dc:5b:f3:f2:b6:1d:46:ef:4e:37:15:3b:d1:dc:23:81:
f0:b5:60:5b:ba:69:e6:92:2a:ad:2f:d0:49:7f:e7:02:54:a5:
59:a7:ef:52:d0:2e:85:5a:f9:30:7c:22:7d:df:3b:f6:76:3d:
b4:c4:87:49:74:ec:d5:9b:ff:97:b1:25:3f:33:39:53:81:22:
0d:d9:ba:18:ab:53:49:45:35:73:b5:93:01:41:b7:03:b4:3c:
12:12:10:56:7d:f3:ce:45:19:28:ec:2c:34:9e:f1:ac:46:e2:
5d:39:f1:f7:1e:c5:91:7f:56:7a:05:10:3d:02:bb:92:86:a0:
19:87:4c:6e:8d:bf:e2:9f:ae:78:6f:76:2c:51:41:01:5b:46:
b0:54:75:dd:e9:d1:7a:aa:f7:d4:af:a0:3e:d9:55:2a:41:78:
de:1e:b5:c2:49:d6:1e:0c:91:de:4f:b7:6d:59:a1:3b:1e:0c:
80:39:9d:f8
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYwJnvWa7DvEu7fIS5tlbJPAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMTI2MDMxNDIxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MDMxYzI3NzA0MDk5ZGY2MTA2YzdmMjI4ZWMzZGY0YWYxY2Y5ZGQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkGFsSqxyR7XPewRUuRaMglyDC/wE
KKYp6w9R5ye24dROsObGqMAK50ED+oVkz4WTjpoI619cSymi2ihPqZJGgP2LXPop
OqDFjHtqxff4D3SGIdeyjbhPShQ4UXcLgdyTojJPiysCqH22oSq0sLE7NoQwuucu
YDk65v9NAt9oF4zzCYtP+yKE/+iJ3typ4l44FW0H3g8My3Pjd94ExkfPXElnPDJm
fg2evoVd5QxCjPtSJ7K+FaVXvPu6eNM2qNeYUVs5lSAcNY8dwcNG4+3w3NxHus2h
+nGbr1Fx6vy50/kcwTmWZxg8QxOTnPSx2f+v5dhm3nxKOLjFuEQWAX1QlwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFFAxwncECZ32EGx/Io7D30rxz53VMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvVURIQ2R3UUpuZllRYkg4aWpzUGZTdkhQbmRVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAHPE2bUjNaM2ULz4P/t1
bEUeXfkxIGnu5O9GjkPdtRBRDTrJTAo4BH+Rns5UgiVpVQwJ9z9jjlISgci6uf+7
w0UAx6lNdHwL876o3Fvz8rYdRu9ONxU70dwjgfC1YFu6aeaSKq0v0El/5wJUpVmn
71LQLoVa+TB8In3fO/Z2PbTEh0l07NWb/5exJT8zOVOBIg3ZuhirU0lFNXO1kwFB
twO0PBISEFZ9885FGSjsLDSe8axG4l058fcexZF/VnoFED0Cu5KGoBmHTG6Nv+Kf
rnhvdixRQQFbRrBUdd3p0Xqq99SvoD7ZVSpBeN4etcJJ1h4Mkd5Pt21ZoTseDIA5
nfg=
-----END CERTIFICATE-----
Generated at Sat May 10 19:03:38 2025 by rpki-client