Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/UqA1N6V1T0hoRO7LbyzBWyvA42I.roa
File: UqA1N6V1T0hoRO7LbyzBWyvA42I.roa (raw, json)
Hash identifier: UKngqRToN3ilG+mL5bHOh2TQGACBWdrMrA0rtMIQ9BI=
Subject key identifier: 52:A0:35:37:A5:75:4F:48:68:44:EE:CB:6F:2C:C1:5B:2B:C0:E3:62
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BFBE26B423D5197E91404D122C16A83F1
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/UqA1N6V1T0hoRO7LbyzBWyvA42I.roa
Signing time: Thu 23 Nov 2023 11:13:21 +0000
ROA not before: Thu 23 Nov 2023 11:13:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:fb:e2:6b:42:3d:51:97:e9:14:04:d1:22:c1:6a:83:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 23 11:13:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=52a03537a5754f486844eecb6f2cc15b2bc0e362
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:2e:a2:8d:15:21:43:a1:14:6a:30:8c:73:90:
c7:44:f7:f6:bd:7e:69:98:60:8f:07:3c:18:3d:42:
bd:c8:5e:0f:21:e9:2c:bc:39:bd:57:c0:a5:29:a0:
b3:08:2b:0a:a8:2f:be:62:fe:d3:56:c5:22:6d:6a:
a7:9a:fd:6b:29:16:92:ec:64:ba:91:76:0a:6a:02:
42:bd:eb:0e:ee:2b:3c:c4:c1:c8:fd:9e:2d:ac:95:
0e:29:7e:66:9c:f6:14:42:eb:c1:62:b2:40:41:18:
a0:b5:64:a3:89:65:dc:bb:43:d1:54:c1:3c:f5:2e:
77:b5:8e:30:90:cc:b6:15:7d:bc:de:75:db:6a:5f:
d6:8b:b0:03:aa:b9:80:b6:0b:62:0b:6d:b1:fb:32:
03:0f:59:a1:0f:0d:3c:14:94:3f:3b:a7:35:a5:21:
8f:d6:83:f6:5f:6c:a4:f6:15:71:ca:70:f2:95:98:
2c:35:c4:da:29:2d:c0:cb:5d:50:96:cd:29:4b:ca:
4f:7a:ff:cf:5b:dc:0e:d3:8c:e2:74:61:9a:20:7f:
71:10:8b:f2:cc:f3:1f:ad:37:45:d3:e1:3b:56:fc:
03:b4:17:54:7b:ed:ed:1b:45:b0:74:85:17:fe:5d:
43:c6:28:91:92:52:1a:20:32:98:bb:26:14:fa:cf:
33:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:A0:35:37:A5:75:4F:48:68:44:EE:CB:6F:2C:C1:5B:2B:C0:E3:62
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/UqA1N6V1T0hoRO7LbyzBWyvA42I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b7:9e:14:f3:48:ca:e2:24:62:d2:3e:af:df:15:60:9c:e2:5c:
70:74:9f:28:41:8c:64:bb:5d:cf:50:2e:d4:b2:59:cf:16:2e:
83:ea:5b:e1:70:05:6c:c4:36:35:5a:27:c1:94:65:fc:5e:6d:
18:61:03:4b:49:7a:8b:0b:ac:9e:d9:43:2a:92:4e:42:4c:3b:
a9:36:32:34:93:2e:d3:ac:0d:ea:d1:4f:92:e0:3e:13:e1:32:
00:4e:d5:4e:08:aa:f6:06:00:b8:3e:4e:ca:84:5b:e0:9f:a8:
c2:20:fa:96:b7:d9:f4:14:f1:34:1d:01:3a:63:70:95:84:91:
4b:31:a8:ba:50:9c:c1:59:b9:d6:33:b5:5a:e0:e4:ab:cb:12:
04:a5:69:15:f7:c6:a5:a3:03:48:8b:34:c9:e1:ed:4b:c4:56:
51:32:21:ae:bb:be:7c:52:8a:f6:62:2b:74:cb:c6:ba:07:00:
7b:25:0a:ba:47:23:1f:e2:c0:8b:eb:bb:ff:9b:f0:d2:9e:d3:
c9:62:80:64:f8:93:fc:6a:39:5e:8a:f5:fa:73:44:84:01:b2:
d2:e2:e9:a1:a5:ed:ff:9d:3e:15:21:ee:82:13:f2:40:cd:09:
2d:66:4c:a0:c7:65:c2:9c:09:3c:de:78:1b:84:c9:a0:ca:1c:
7e:2c:b5:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 18:43:27 2025 by rpki-client