Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/UbkUNtcv90wgtnBqfezKOsD2KVk.roa
File: UbkUNtcv90wgtnBqfezKOsD2KVk.roa (raw, json)
Hash identifier: 2qP9BT9qZ/rrkTyrfuH9FKHl52Tsmrr6Z1VZGhKsPc0=
Subject key identifier: 51:B9:14:36:D7:2F:F7:4C:20:B6:70:6A:7D:EC:CA:3A:C0:F6:29:59
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AE6DD56CC97E58FBB94808B431894C7B5
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/UbkUNtcv90wgtnBqfezKOsD2KVk.roa
Signing time: Sat 30 Sep 2023 16:12:59 +0000
ROA not before: Sat 30 Sep 2023 16:12:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:e6:dd:56:cc:97:e5:8f:bb:94:80:8b:43:18:94:c7:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 30 16:12:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=51b91436d72ff74c20b6706a7decca3ac0f62959
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:01:02:25:ba:9b:2a:db:0d:3b:5e:77:b0:92:
31:c3:cc:c6:0a:99:0b:0f:33:c0:e7:9e:6d:00:64:
bd:08:89:db:87:b5:07:1d:49:5d:f4:34:a1:4b:76:
c2:7c:e5:13:b1:16:7b:cc:37:81:ee:5d:ca:f1:5f:
e0:5e:64:4a:ca:1b:e0:b3:ec:4e:7a:ec:2b:7b:69:
c4:28:ff:93:ed:49:76:bf:09:af:46:0d:75:bd:aa:
29:15:61:84:46:9b:19:ba:be:d9:c2:2b:8a:ed:4c:
94:0c:f1:8c:69:91:e7:a9:ad:5b:4b:0c:31:a2:d3:
95:da:3a:49:c3:65:29:66:d7:b6:aa:e0:01:c5:d0:
f7:a8:2d:6d:e0:c8:2d:b6:fc:a5:1a:c7:66:12:dc:
57:8e:b6:39:6a:06:54:19:25:fb:3a:81:e6:69:23:
75:b2:8b:38:89:e7:8a:4f:2c:cf:09:10:ab:86:21:
ec:86:03:e0:b3:58:a1:d2:78:cd:b0:60:e0:16:0b:
bf:ef:b5:64:09:a5:58:2d:ba:7c:1e:e2:ec:57:57:
84:58:d8:8b:11:c3:29:00:5b:b0:a5:78:98:52:c8:
60:e5:b8:14:93:97:f5:4c:d0:2f:3b:cc:f0:cf:c1:
3e:ea:bd:2f:96:7b:33:6d:c0:1c:40:65:d5:7e:9b:
34:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:B9:14:36:D7:2F:F7:4C:20:B6:70:6A:7D:EC:CA:3A:C0:F6:29:59
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/UbkUNtcv90wgtnBqfezKOsD2KVk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
c8:fd:23:a5:6c:ee:f3:65:d8:6b:0d:38:57:71:cd:27:66:0c:
c8:96:b0:cf:62:f2:08:f0:43:28:95:cb:8e:1d:5e:59:61:6f:
e2:55:a7:4e:7c:e2:2d:9e:e8:d8:12:29:fe:53:e0:79:d1:a2:
91:a7:b4:0e:7c:02:61:f9:7a:52:f5:f3:9a:da:ac:2f:87:bd:
a1:70:e3:16:87:cd:89:b6:22:28:3c:c2:99:be:ff:90:e8:1e:
76:b4:34:8e:53:f3:bf:8d:4c:ae:09:a3:0e:b3:bf:51:23:01:
c4:b0:68:e1:19:6c:b9:7a:db:0f:9c:2a:25:cc:4d:57:12:9b:
8e:a0:66:e8:d3:2e:1c:d1:dd:b1:8d:04:e8:78:73:ed:d1:b8:
b9:cb:b0:01:95:38:e1:d5:4a:d7:27:57:39:27:ac:ff:25:4f:
32:12:94:52:13:08:68:7c:fc:1b:7f:80:80:fa:3d:77:e3:ae:
e3:d2:8e:8b:aa:6e:79:7a:04:09:3a:93:54:d5:22:e1:54:78:
d0:e5:69:03:4e:40:0a:bd:f9:cd:10:db:d5:4c:22:bf:ec:fe:
6f:f9:61:6f:2d:b8:6d:0b:1c:34:44:a9:e8:2d:27:42:ae:c1:
db:cf:9c:d2:b3:4d:6b:0d:88:73:7a:7c:9c:9b:c4:37:13:22:
8a:70:df:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 21:53:12 2025 by rpki-client