Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/u1CI-EbnTj2bL4krQRQHhAQS23E.roa
File: u1CI-EbnTj2bL4krQRQHhAQS23E.roa (raw, json)
Hash identifier: nDsFCPeSDdXSyI7k55ZFm49qfyUXgLjr56c/kB0u4Xc=
Subject key identifier: BB:50:88:F8:46:E7:4E:3D:9B:2F:89:2B:41:14:07:84:04:12:DB:71
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BF462D79B7505CFD5294F2C7EC59789CF
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/u1CI-EbnTj2bL4krQRQHhAQS23E.roa
Signing time: Wed 22 Nov 2023 00:16:40 +0000
ROA not before: Wed 22 Nov 2023 00:16:40 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:f4:62:d7:9b:75:05:cf:d5:29:4f:2c:7e:c5:97:89:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 22 00:16:40 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bb5088f846e74e3d9b2f892b411407840412db71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e2:49:b2:bd:04:17:ac:21:67:05:2a:98:0d:
23:18:8d:91:7b:87:05:ec:b1:ac:23:a1:14:d6:1e:
f2:0f:4e:97:6f:eb:94:7f:3d:6b:d2:77:44:00:1f:
4f:39:20:25:24:dd:59:fd:da:d3:01:8c:5b:74:c6:
93:53:b0:8c:b7:5b:e0:e9:28:fe:a0:26:10:17:9f:
70:40:06:3c:de:c1:9e:45:30:80:42:79:54:c8:ad:
11:c7:98:51:4e:4d:8c:d6:88:09:50:a0:12:24:61:
85:39:f1:63:da:3c:17:b9:a1:44:b9:18:1d:77:68:
39:12:16:73:28:04:c3:d4:b3:4f:60:e1:1f:95:d9:
c9:49:f1:86:20:b6:18:91:c4:9c:70:07:b1:1e:d1:
4f:78:d8:a2:6f:62:43:7f:79:8c:db:8b:d2:78:f9:
90:12:97:52:fe:9b:e0:c3:c7:70:a0:94:62:56:c1:
ff:91:8f:e5:82:6f:35:11:70:a9:27:ea:47:a9:a5:
7a:ac:53:bd:cb:78:db:5e:51:6e:18:35:ad:d2:71:
5c:20:fb:7b:8b:01:fc:f4:d1:5d:17:a8:69:66:49:
22:b4:f8:a4:71:c2:82:26:39:d6:3b:6a:93:d7:e5:
47:6e:64:2b:21:5e:66:2e:77:0e:b3:88:b7:95:b9:
89:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:50:88:F8:46:E7:4E:3D:9B:2F:89:2B:41:14:07:84:04:12:DB:71
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/u1CI-EbnTj2bL4krQRQHhAQS23E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7a:56:ab:57:98:0e:a3:c3:53:74:04:ec:f1:66:79:57:c4:1c:
d0:98:a3:c4:c5:8e:60:f9:de:4f:af:41:22:9a:d9:06:0e:d7:
02:f3:89:b1:b6:60:23:f4:b6:9b:73:63:d7:66:4b:ed:05:8d:
28:a0:a0:a6:22:93:9f:ca:84:25:bd:52:3a:9d:9f:63:0e:61:
82:cb:74:73:96:22:6c:96:fe:09:62:1d:96:85:47:7f:d4:3c:
30:f7:f6:01:87:c6:ea:57:6d:0c:43:06:77:fb:a4:74:0e:79:
32:b8:54:b9:11:00:57:f6:41:8f:da:57:31:30:13:c5:a5:be:
80:e1:99:38:9e:91:64:82:15:7e:46:b5:9f:e8:ab:eb:83:dd:
68:c8:10:b4:b8:d6:2a:8c:7b:6d:b0:f5:8c:d4:e8:d4:d8:ab:
25:32:83:cd:d7:4e:b3:3a:4b:6f:e7:2f:d7:ba:0b:dd:9d:ce:
5d:b8:77:e0:95:7a:31:b2:d3:f7:32:0a:c4:0b:3a:a6:ed:21:
50:cc:52:55:ba:04:e5:ed:f3:cc:7b:93:33:59:a6:25:32:8f:
b1:e5:4e:a8:ce:74:14:05:c5:13:22:37:47:f6:a4:88:6a:97:
44:81:fa:83:bc:eb:78:8a:e8:a5:a2:3a:df:d9:1f:70:03:d3:
f0:54:13:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 21:58:11 2025 by rpki-client