Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/UhcdzR3xqyvFK7S8yizYQEJUn34.roa
File: UhcdzR3xqyvFK7S8yizYQEJUn34.roa (raw, json)
Hash identifier: kVPeOxCj3e2lhYjW5AKocIjJMUdogrPPva9zbvO/rS8=
Subject key identifier: 52:17:1D:CD:1D:F1:AB:2B:C5:2B:B4:BC:CA:2C:D8:40:42:54:9F:7E
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C0EC7257C0F55A7AB750C19AE3E906B2D
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/UhcdzR3xqyvFK7S8yizYQEJUn34.roa
Signing time: Mon 27 Nov 2023 03:16:21 +0000
ROA not before: Mon 27 Nov 2023 03:16:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:0e:c7:25:7c:0f:55:a7:ab:75:0c:19:ae:3e:90:6b:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 27 03:16:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=52171dcd1df1ab2bc52bb4bcca2cd84042549f7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:cb:8f:21:b8:a7:0b:a7:ef:65:66:17:43:01:
a0:06:6c:ad:15:bb:43:2f:5f:63:48:ed:92:86:e4:
40:7b:94:9a:36:7d:37:9e:eb:85:fd:5c:d5:e9:fb:
4d:07:f4:1b:8c:5b:2d:cc:9e:dd:32:78:9f:0a:74:
2b:3f:2a:4a:4b:d5:9d:cb:dc:12:36:b8:91:3a:4a:
fd:62:dc:45:98:e1:51:85:3a:e3:d7:89:2d:74:fb:
c8:84:2b:1c:35:ed:2a:04:7b:e8:0b:6a:33:19:6a:
94:bc:68:4c:ec:61:5d:f0:83:8e:fe:ac:e3:14:e4:
2e:77:13:dd:99:4a:23:4f:01:41:48:40:58:1f:2d:
75:10:d1:92:8c:d5:65:f1:e4:81:67:19:c5:9f:e7:
46:e5:22:ef:0e:35:d5:11:19:fa:59:fc:15:97:c0:
6c:65:70:28:5e:92:df:c6:19:f2:b7:bb:76:79:05:
c0:a0:c9:8b:86:fa:48:1c:17:cc:89:0e:93:98:cb:
06:6d:cd:5e:f9:9f:9f:6f:8b:ba:68:34:b9:ad:88:
d6:cf:35:7e:0b:87:f6:57:29:bb:8d:08:fd:b9:af:
62:55:3c:94:3d:63:96:2f:ce:74:31:7e:dd:5e:58:
48:3e:15:b8:b7:f1:b0:ff:a1:2f:fe:d1:05:25:2e:
2b:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:17:1D:CD:1D:F1:AB:2B:C5:2B:B4:BC:CA:2C:D8:40:42:54:9F:7E
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/UhcdzR3xqyvFK7S8yizYQEJUn34.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1c:52:9c:61:46:f9:35:a3:b9:36:41:e3:c3:e4:9d:5f:06:86:
20:b6:2d:a6:fa:38:70:e0:e1:ac:b1:9d:30:8b:94:2d:a2:05:
25:67:85:a2:6c:56:8c:b9:d1:38:bd:58:ac:90:fb:b3:51:e3:
94:7f:25:f8:8f:b2:e2:65:4a:cb:d0:42:10:04:0d:8e:eb:09:
dd:3e:46:d4:94:0a:a2:3c:24:57:db:da:f4:39:24:48:2b:9f:
77:dd:4a:79:12:03:d0:29:c6:75:9d:6f:d1:00:30:b3:26:05:
87:22:e4:4f:85:fb:69:c1:a8:23:80:2a:1e:18:bc:c0:95:75:
54:cb:b0:40:d5:3b:a7:22:b8:52:72:52:66:26:54:e7:56:32:
81:8a:c9:24:26:cd:0a:6d:a8:d1:85:1e:4c:54:e4:93:83:4c:
dc:1f:58:ac:46:e4:37:bb:25:06:85:35:1a:c7:a3:9b:08:1b:
5f:14:51:4a:4c:22:e3:c7:cb:66:41:67:5f:b8:cf:1a:3a:77:
94:7d:8f:cb:bf:30:46:42:5b:84:9a:2d:36:56:d0:5e:10:23:
a4:6b:ee:eb:0e:80:9f:15:85:d5:8c:ec:0d:71:e5:1b:94:c4:
df:fb:4c:5c:12:f9:cf:2d:9c:a0:42:6e:6b:a8:65:38:e9:88:
91:76:42:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 02:37:41 2025 by rpki-client