Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/uBMfuTu_FV78aZJ1i053xfSTWe0.roa
File: uBMfuTu_FV78aZJ1i053xfSTWe0.roa (raw, json)
Hash identifier: oKeeZ9+07KvuVUiQfekvbWszTwHSEQcO08dpv7K8s/A=
Subject key identifier: B8:13:1F:B9:3B:BF:15:5E:FC:69:92:75:8B:4E:77:C5:F4:93:59:ED
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B1049A5339C71B76454DC7691E1753F4C
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/uBMfuTu_FV78aZJ1i053xfSTWe0.roa
Signing time: Sun 08 Oct 2023 17:15:43 +0000
ROA not before: Sun 08 Oct 2023 17:15:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:10:49:a5:33:9c:71:b7:64:54:dc:76:91:e1:75:3f:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 8 17:15:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b8131fb93bbf155efc6992758b4e77c5f49359ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:8c:48:be:23:42:d5:77:e3:b5:17:8e:f6:8b:
bd:2e:02:b0:5f:1a:b0:13:1d:32:60:6d:a6:28:66:
3c:2c:8a:b9:6a:ee:40:12:f2:31:31:d6:81:12:9b:
2f:b6:b4:0c:b0:a3:bf:8a:b9:98:74:87:84:82:ef:
a0:5e:32:d4:b9:5a:ac:69:db:36:31:ca:76:7d:b0:
5c:af:b0:cf:82:7f:21:c5:10:ac:ac:be:f4:5b:e7:
c9:85:cf:39:c8:7a:4e:b0:49:5b:44:52:c8:92:77:
86:4e:79:eb:3c:07:b4:25:ac:a4:3c:e2:75:eb:ee:
35:34:28:6d:ca:76:68:e5:ba:6b:d0:98:ee:a4:fc:
61:13:79:f0:6b:d7:d1:fa:eb:67:fc:68:3b:d4:0a:
dc:b0:33:a8:e7:06:25:69:93:ee:f8:6e:a8:56:3d:
4c:09:98:fa:66:ce:12:67:71:1c:c5:10:8a:0d:8b:
b7:f9:c2:d2:84:8f:91:e6:6b:9e:55:1f:70:f8:45:
b1:bc:3d:4e:c7:ec:e8:75:cd:3b:37:4d:d7:7a:5a:
8d:12:ef:22:89:39:b2:1b:8b:46:c0:4e:c9:22:59:
cb:28:bf:39:e5:67:41:67:af:ea:c6:c9:2f:65:60:
f7:9a:56:b5:82:50:21:74:a3:36:ec:d8:73:e7:9a:
61:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:13:1F:B9:3B:BF:15:5E:FC:69:92:75:8B:4E:77:C5:F4:93:59:ED
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/uBMfuTu_FV78aZJ1i053xfSTWe0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
c2:d7:c7:ba:b1:76:8b:3b:fc:42:05:1b:e1:78:aa:1c:87:ed:
6f:63:10:25:6b:22:45:77:d1:87:02:ed:1f:8f:ed:f6:fc:cd:
54:79:97:44:df:44:2d:52:b1:ed:d3:fc:8d:df:4a:52:67:86:
3b:1f:c8:62:aa:5a:13:3b:a7:3a:71:e2:31:1a:f3:53:a6:71:
f8:16:ac:8b:ab:ba:39:2f:11:04:80:a9:17:02:bf:a7:12:6a:
7b:d9:5b:07:10:62:5e:a0:9f:68:9f:30:7c:b1:28:1b:86:06:
72:56:04:4a:73:75:ab:1f:2c:9a:17:49:cd:83:f8:ab:87:35:
d3:47:e7:99:40:86:6a:52:b2:6e:94:4d:d5:99:a6:07:b3:d3:
04:86:55:ae:2d:5c:cb:cb:eb:2b:d3:87:1c:59:40:37:e3:21:
d4:d0:0f:fe:18:47:cd:35:7e:ec:7e:87:e2:36:23:5c:fe:fb:
bd:b2:39:a3:9f:7d:96:51:d5:18:5f:57:db:71:d3:9c:fd:56:
02:d0:2b:44:98:d1:15:65:ee:57:67:f6:5d:96:77:6a:b9:6d:
d2:28:ef:fa:7c:12:67:e0:f8:53:31:b0:07:19:51:05:e7:33:
6d:7c:b4:1d:48:ad:c5:9a:c0:02:62:6f:3f:db:ea:a6:84:0a:
cb:b3:d6:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 07:18:06 2025 by rpki-client