Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/UGRhmBjp3TPLuHC8d-2EzhNd9BY.roa
File: UGRhmBjp3TPLuHC8d-2EzhNd9BY.roa (raw, json)
Hash identifier: 5jS9/PPvSxEYQJIRonJXB1KpNzyb5BraT6wnSseddQE=
Subject key identifier: 50:64:61:98:18:E9:DD:33:CB:B8:70:BC:77:ED:84:CE:13:5D:F4:16
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B902D655DDEA2BD7877557444688AD0BE
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/UGRhmBjp3TPLuHC8d-2EzhNd9BY.roa
Signing time: Thu 02 Nov 2023 13:16:15 +0000
ROA not before: Thu 02 Nov 2023 13:16:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:90:2d:65:5d:de:a2:bd:78:77:55:74:44:68:8a:d0:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 2 13:16:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5064619818e9dd33cbb870bc77ed84ce135df416
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:a3:4b:f4:37:88:59:37:18:49:4c:dd:1b:64:
2a:62:2e:fa:86:fa:3d:4e:4e:c6:78:f7:2b:ff:fe:
e8:4e:08:90:b5:b9:25:06:6b:6f:bf:ee:f8:64:0d:
ab:a5:6d:2b:ad:ba:2a:7a:49:1a:0d:b2:d9:f7:65:
35:25:69:18:5c:c7:c4:4d:10:f6:b8:3f:3e:d2:75:
85:74:bd:23:00:3b:b9:42:17:4d:4d:7c:ce:db:00:
59:e8:8b:b6:c4:f3:7c:73:05:32:18:15:f4:2e:4b:
1c:ab:33:5f:ca:f0:5a:7b:e3:59:6a:88:2d:a2:88:
11:d8:20:c3:15:87:e8:cd:c6:45:5f:18:f4:7a:8a:
c1:42:3e:31:cf:ee:23:c7:91:4b:af:09:51:7c:91:
18:e4:22:bf:32:1d:e3:27:f7:7b:52:4e:10:75:11:
c7:64:65:7b:e7:50:bb:5f:1d:66:28:9b:5a:c0:7c:
09:8f:f7:46:e9:1d:4e:dd:6d:b3:77:13:b9:36:48:
c5:34:a7:49:b2:b7:91:5c:a2:c4:cf:41:85:47:00:
20:c0:5e:32:62:47:bc:54:e1:9e:e6:b7:46:a2:cf:
22:22:32:a0:da:e4:57:fb:91:c5:d1:67:21:8a:79:
d1:e7:68:0a:38:fa:b0:c0:5b:50:06:d5:91:d5:21:
6a:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:64:61:98:18:E9:DD:33:CB:B8:70:BC:77:ED:84:CE:13:5D:F4:16
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/UGRhmBjp3TPLuHC8d-2EzhNd9BY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
57:8e:8b:32:a3:34:26:2e:34:d0:cf:fb:24:9a:f3:e6:03:36:
09:04:8f:2e:76:31:72:a1:f8:50:6c:43:ee:5b:45:fe:03:5f:
16:b8:21:f8:c5:b2:cb:e6:b4:18:5f:87:37:f0:fc:ae:6f:36:
63:9e:98:a2:1d:7b:2f:23:5b:b2:7c:47:93:f0:b6:db:a9:65:
a4:51:11:52:a0:13:b8:46:fa:a0:61:c4:05:fb:28:30:2e:67:
21:ff:72:ba:9d:e1:be:7e:de:c5:e9:1c:df:f2:05:db:72:af:
7f:d2:83:16:d3:39:83:90:96:35:3d:04:a7:76:f5:ea:80:8a:
65:03:84:17:a0:cc:fc:1d:cc:e7:87:41:d9:58:55:97:df:14:
10:9d:ee:d2:18:5c:a1:54:84:64:d8:a2:0f:c2:08:28:2d:de:
80:91:ba:1f:ae:d4:77:43:de:5f:b5:5e:00:a5:a9:78:e9:bf:
c7:65:09:aa:26:4f:61:21:7c:98:b2:03:33:21:b4:b7:c1:42:
14:7b:dc:fa:b2:1e:bf:c4:ac:56:40:66:90:8a:eb:50:73:7b:
4b:93:78:58:33:d1:a8:80:f7:ac:6d:ea:c1:b3:7f:56:23:ef:
d6:bf:fa:60:07:4e:07:36:5f:2a:78:a1:eb:7f:77:64:ec:36:
bb:3d:c2:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 19:14:59 2025 by rpki-client