Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/u1BIx8vW7Dd5PQDb0Sq1rxYASEw.roa
File: u1BIx8vW7Dd5PQDb0Sq1rxYASEw.roa (raw, json)
Hash identifier: 4aF7c85Ck97bc+IxLGbfjGdojhgVDy4c3UOoZTyXG2k=
Subject key identifier: BB:50:48:C7:CB:D6:EC:37:79:3D:00:DB:D1:2A:B5:AF:16:00:48:4C
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BE5C5B70E19C387A0095F985383428C13
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/u1BIx8vW7Dd5PQDb0Sq1rxYASEw.roa
Signing time: Sun 19 Nov 2023 04:10:21 +0000
ROA not before: Sun 19 Nov 2023 04:10:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:e5:c5:b7:0e:19:c3:87:a0:09:5f:98:53:83:42:8c:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 19 04:10:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bb5048c7cbd6ec37793d00dbd12ab5af1600484c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:6d:0a:14:9b:80:b3:10:77:5c:a3:97:c7:32:
d7:db:76:e0:8a:ce:7d:dd:65:6b:80:25:5f:50:eb:
92:37:8a:31:20:00:9d:a3:0e:57:cc:81:40:f3:b8:
1e:87:fb:11:27:d2:a7:29:f5:4f:df:e3:c9:85:aa:
ca:25:59:37:44:a9:04:22:f9:ed:26:b9:7c:78:57:
2c:b1:e8:7b:43:33:61:e2:df:76:d1:83:ab:28:98:
cd:73:3f:18:3b:c6:b7:27:2e:e8:1d:29:03:6a:a9:
28:93:e4:73:4f:87:a6:44:b8:13:cf:9b:4c:89:b4:
2d:85:d1:26:94:a8:cd:43:bf:e5:44:4b:2a:0c:4b:
48:4b:53:3a:f7:66:cb:d2:2d:3d:65:4c:6c:55:6d:
ec:5e:be:1d:bb:75:2c:e9:49:a6:61:d2:b8:84:a7:
0c:ed:d4:54:b4:cb:aa:c5:8d:5b:6d:05:c5:c3:de:
ad:0b:21:c3:68:a7:cb:b9:fc:63:93:95:52:9f:d2:
21:7f:c6:15:6b:d8:3b:e4:d9:ce:ca:ac:53:93:60:
c3:f2:b6:0d:c3:16:61:2c:5d:2c:42:69:de:8b:ce:
16:e3:4b:3e:50:b4:92:a8:f8:42:ab:07:44:1b:c1:
da:1a:5e:96:4f:58:cf:0f:c7:43:04:70:14:b4:d2:
d1:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:50:48:C7:CB:D6:EC:37:79:3D:00:DB:D1:2A:B5:AF:16:00:48:4C
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/u1BIx8vW7Dd5PQDb0Sq1rxYASEw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
27:50:e6:a9:16:6b:71:de:56:f4:7e:e8:fe:f6:22:9e:cc:09:
41:f8:8a:71:b6:7c:13:7b:68:b2:19:b7:21:9b:8a:35:da:3b:
14:4f:6d:f8:bf:91:e9:82:10:de:b9:df:4d:90:33:6b:1d:c8:
98:48:59:7a:51:a2:f4:f4:db:5d:1c:f4:0b:7e:69:a7:94:11:
a8:17:78:ff:39:19:f6:b7:fa:e3:ea:37:4b:ea:1b:2e:71:d2:
9f:b1:e3:79:b0:e3:68:c4:31:09:f3:25:e9:ff:1f:fd:6d:58:
77:63:fc:fb:f0:71:08:a3:be:94:13:06:6f:a7:ca:a8:97:f4:
3c:fd:f9:af:c8:da:d2:3c:ba:e5:5d:16:00:96:8d:2b:28:7e:
35:00:60:e3:05:4f:0f:30:b8:f5:4a:ef:c5:56:cd:ad:76:81:
6f:c0:ee:73:58:2b:6d:38:f4:83:f0:a2:67:db:70:df:8e:e7:
86:3d:f0:36:bf:c7:f4:91:fa:29:25:e9:74:75:7c:59:9b:43:
3a:60:49:b6:4c:ff:c3:d3:69:31:b9:3d:ff:13:53:2e:84:66:
09:44:24:97:95:1a:b6:9a:a3:bc:f9:03:6f:5f:14:ce:f2:52:
62:ee:e8:5e:b3:30:77:a6:45:4e:53:0a:e5:44:00:dc:94:2e:
af:b7:19:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:07:26 2025 by rpki-client