Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/UWU6LmGChLKQrJ6pwL0mlrCMQCs.roa
File: UWU6LmGChLKQrJ6pwL0mlrCMQCs.roa (raw, json)
Hash identifier: FEaQvscmo23u5wUpIeuqEdXamZGQsJkSpjFSyMBYu4M=
Subject key identifier: 51:65:3A:2E:61:82:84:B2:90:AC:9E:A9:C0:BD:26:96:B0:8C:40:2B
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BA116EBE624DD78C1D8C15005FB5AF9E0
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/UWU6LmGChLKQrJ6pwL0mlrCMQCs.roa
Signing time: Sun 05 Nov 2023 20:05:15 +0000
ROA not before: Sun 05 Nov 2023 20:05:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18b:a116:585/128 maxlen: 128
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:a1:16:eb:e6:24:dd:78:c1:d8:c1:50:05:fb:5a:f9:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 5 20:05:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=51653a2e618284b290ac9ea9c0bd2696b08c402b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:5f:b2:45:09:50:3e:b4:a2:57:3d:5d:c0:37:
d0:4e:24:46:10:a3:2d:bc:a7:1b:37:72:ac:56:ec:
43:de:8e:94:33:1d:cf:f9:c3:dc:15:af:16:66:11:
9f:1f:85:aa:9b:b5:7b:54:2b:6a:70:cb:c4:04:2e:
84:1d:1b:13:7d:84:84:d4:77:08:5b:d1:b5:d7:98:
78:ba:77:ab:b8:24:c2:c8:93:4a:60:53:45:8c:50:
b4:ea:2e:ba:56:cf:6a:57:ca:33:ba:7d:31:89:fd:
93:c4:52:63:a4:51:53:01:a4:75:06:61:d6:6b:a0:
0b:95:6a:03:09:d5:15:b9:e6:1c:78:a1:04:fd:64:
b1:0d:b9:f6:31:68:69:9a:c2:bf:3f:57:74:9a:e2:
9c:a9:29:6c:0f:ce:f5:31:39:55:1f:4d:b2:4f:9a:
46:e8:a0:a9:37:b1:36:e9:17:74:31:b5:c5:58:66:
9b:43:ee:ce:b8:1e:73:d9:0d:8b:b3:d0:3b:64:a9:
1e:b7:9a:a8:49:ec:04:e2:1c:b0:06:28:a7:5f:e8:
e7:13:cc:98:6c:b8:ae:6c:70:9f:58:31:e3:9a:ff:
a9:37:bc:17:4f:e6:10:b2:ce:2d:c4:0a:dd:07:83:
09:ab:70:94:57:85:37:29:c7:47:27:7c:d2:e5:d8:
4c:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:65:3A:2E:61:82:84:B2:90:AC:9E:A9:C0:BD:26:96:B0:8C:40:2B
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/UWU6LmGChLKQrJ6pwL0mlrCMQCs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
24:7c:bf:01:a8:e6:0a:74:2d:92:7e:4a:c7:80:d9:1f:90:72:
eb:d1:ea:8b:d7:d9:00:75:6b:b4:55:44:ca:0b:03:7a:62:55:
e4:61:01:5e:44:1b:41:3e:ce:3a:25:9e:21:47:3a:bf:a9:43:
fb:87:92:cc:f5:fc:3d:db:99:bb:bc:f3:2c:a9:60:4d:49:cc:
4c:67:b2:65:b0:a1:df:a4:f8:de:58:4e:d7:8f:b9:4b:46:ad:
99:6f:f9:c1:8e:15:d8:b8:6e:05:ee:4d:05:5a:80:f0:56:0c:
3e:5f:20:78:90:90:dd:8b:d0:dd:a7:94:d1:fd:9a:36:28:9e:
a6:98:6c:eb:ee:df:45:4c:b1:0b:47:18:3e:b4:4c:bd:06:0d:
d1:a6:35:b2:45:e6:46:30:84:35:5f:9c:5d:c6:1f:90:aa:06:
a3:8a:31:21:2c:55:92:ba:df:b0:8f:4b:f0:e9:1f:8b:04:3d:
0e:7b:fa:65:75:e9:93:f5:9f:03:9a:a9:16:38:6d:ae:1a:24:
15:dd:44:dd:26:1d:04:83:64:18:5f:a0:82:a1:61:72:54:07:
e7:4c:65:0f:f4:07:6d:53:60:9f:24:8a:a4:2f:4c:32:60:7d:
63:75:1e:61:04:55:be:84:03:6c:00:9c:25:b8:a0:68:bb:d9:
4c:50:b9:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:02:34 2025 by rpki-client