Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/UK-ye37d6S7PzrhP-BKpxOBUfGw.roa
File: UK-ye37d6S7PzrhP-BKpxOBUfGw.roa (raw, json)
Hash identifier: sNq98tCEG8julWHnqoCSCVHuRvE1RWoPq29P2tNIwus=
Subject key identifier: 50:AF:B2:7B:7E:DD:E9:2E:CF:CE:B8:4F:F8:12:A9:C4:E0:54:7C:6C
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B92BFA9C48AEE5578916A1CB636379182
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/UK-ye37d6S7PzrhP-BKpxOBUfGw.roa
Signing time: Fri 03 Nov 2023 01:15:16 +0000
ROA not before: Fri 03 Nov 2023 01:15:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:92:bf:a9:c4:8a:ee:55:78:91:6a:1c:b6:36:37:91:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 3 01:15:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=50afb27b7edde92ecfceb84ff812a9c4e0547c6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:7e:ea:b7:7a:bb:c6:6e:a2:12:0c:e1:02:b1:
ec:9e:ac:a9:77:e3:89:21:b8:ca:01:b6:6a:9f:b3:
90:fb:dc:d7:f5:a2:fc:f6:b3:f7:9a:d7:87:3c:db:
bc:60:a4:eb:0f:b0:5b:a4:2f:97:ca:a3:e3:4c:3a:
cc:56:05:1c:30:af:8a:b6:61:b4:a0:83:67:2b:67:
7a:29:0b:5d:99:83:db:e2:9d:6c:28:1f:df:08:e0:
2e:48:d2:f3:e1:99:9b:f6:d7:56:b6:5a:13:7f:1a:
12:50:ed:bd:a0:21:2c:66:7d:93:eb:ca:12:0a:14:
3d:7d:38:22:84:b3:d5:f9:55:fc:cb:c4:d4:48:b8:
66:6e:14:ad:1f:05:80:ff:60:8d:fb:bf:1e:ef:ea:
69:2a:57:7e:9b:29:21:71:40:c1:94:b8:b2:73:bb:
5c:b4:87:0f:fb:66:d6:1e:57:10:41:6e:ef:d1:dd:
13:ee:73:ba:d1:05:94:66:7a:dd:4a:ca:06:20:3f:
e6:88:1f:34:34:0d:82:c7:50:06:00:29:e7:19:85:
d0:d3:47:9c:3f:3b:7f:07:c4:30:a2:1c:07:e2:51:
ea:a4:7a:c0:f1:a2:d4:d7:aa:ad:f9:53:6b:ac:33:
4a:31:86:fc:80:65:e1:b2:8f:81:76:56:ab:08:94:
ba:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:AF:B2:7B:7E:DD:E9:2E:CF:CE:B8:4F:F8:12:A9:C4:E0:54:7C:6C
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/UK-ye37d6S7PzrhP-BKpxOBUfGw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b7:c3:a6:26:44:4a:9b:4c:88:e7:69:b2:63:b2:ab:25:c0:31:
85:50:30:eb:75:f2:2c:a4:32:52:4e:8f:3f:ec:1d:fd:e2:35:
aa:d5:29:e6:2c:b0:02:6c:b5:22:f0:34:8c:f4:f7:01:8c:64:
74:e9:a9:c3:53:c0:e7:cd:0a:5b:99:f2:9e:99:58:0a:21:3f:
95:e2:e1:3f:b4:cf:aa:19:83:2b:4c:b6:26:dc:e0:53:d1:e1:
53:f8:65:03:42:e8:16:82:92:d0:33:67:d8:a0:26:95:a3:1b:
b9:bf:14:e0:85:bf:04:31:5f:23:a7:5c:9f:68:c4:53:9b:8d:
70:65:0d:f9:f6:62:6b:23:77:10:2d:29:68:7b:51:c1:83:4b:
2f:75:d7:10:a3:c7:bc:80:e0:70:a9:33:ae:a4:7b:72:4e:bb:
79:db:8c:fc:0b:7e:e9:55:69:fe:6e:6e:3d:79:71:49:05:d7:
56:d2:2c:a8:3e:d8:b1:b4:f4:0c:c0:c1:5c:59:84:81:c0:c6:
66:ae:82:34:58:57:15:1e:3f:2f:1d:03:8e:b3:fd:8f:fa:65:
64:2e:27:bd:19:23:6d:35:a9:d2:ab:4e:1b:a0:af:58:c9:d6:
4d:8d:b1:8f:ac:08:a0:04:1a:7e:2a:ab:cf:5a:6f:92:4d:e5:
07:1e:7c:61
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYuSv6nEiu5VeJFqHLY2N5GCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMTAzMDExNTE2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MGFmYjI3YjdlZGRlOTJlY2ZjZWI4NGZmODEyYTljNGUwNTQ3YzZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs37qt3q7xm6iEgzhArHsnqypd+OJ
IbjKAbZqn7OQ+9zX9aL89rP3mteHPNu8YKTrD7BbpC+XyqPjTDrMVgUcMK+KtmG0
oINnK2d6KQtdmYPb4p1sKB/fCOAuSNLz4Zmb9tdWtloTfxoSUO29oCEsZn2T68oS
ChQ9fTgihLPV+VX8y8TUSLhmbhStHwWA/2CN+78e7+ppKld+mykhcUDBlLiyc7tc
tIcP+2bWHlcQQW7v0d0T7nO60QWUZnrdSsoGID/miB80NA2Cx1AGACnnGYXQ00ec
Pzt/B8QwohwH4lHqpHrA8aLU16qt+VNrrDNKMYb8gGXhso+BdlarCJS6SQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFFCvsnt+3ekuz864T/gSqcTgVHxsMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvVUsteWUzN2Q2UzdQenJoUC1CS3B4T0JVZkd3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBALfDpiZESptMiOdpsmOy
qyXAMYVQMOt18iykMlJOjz/sHf3iNarVKeYssAJstSLwNIz09wGMZHTpqcNTwOfN
CluZ8p6ZWAohP5Xi4T+0z6oZgytMtibc4FPR4VP4ZQNC6BaCktAzZ9igJpWjG7m/
FOCFvwQxXyOnXJ9oxFObjXBlDfn2YmsjdxAtKWh7UcGDSy911xCjx7yA4HCpM66k
e3JOu3nbjPwLfulVaf5ubj15cUkF11bSLKg+2LG09AzAwVxZhIHAxmaugjRYVxUe
Py8dA46z/Y/6ZWQuJ70ZI201qdKrThugr1jJ1k2NsY+sCKAEGn4qq89ab5JN5Qce
fGE=
-----END CERTIFICATE-----
Generated at Wed May 14 10:20:12 2025 by rpki-client