Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/uBfoUGjZfBu7pqkvIPJ_Vo2JZnQ.roa
File: uBfoUGjZfBu7pqkvIPJ_Vo2JZnQ.roa (raw, json)
Hash identifier: RBI8UPHo25gShnbpJiInLUtb80ezT2TInwY3lueamXM=
Subject key identifier: B8:17:E8:50:68:D9:7C:1B:BB:A6:A9:2F:20:F2:7F:56:8D:89:66:74
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C2B4612F7C5980672ACEADAD7CEC964AF
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/uBfoUGjZfBu7pqkvIPJ_Vo2JZnQ.roa
Signing time: Sat 02 Dec 2023 16:04:21 +0000
ROA not before: Sat 02 Dec 2023 16:04:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18c:2b45:eaee/128 maxlen: 128
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:2b:46:12:f7:c5:98:06:72:ac:ea:da:d7:ce:c9:64:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 2 16:04:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b817e85068d97c1bbba6a92f20f27f568d896674
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f2:23:dc:62:4f:1a:67:b4:db:55:de:aa:3b:
cf:d6:01:1d:e9:85:dd:1d:68:62:34:32:36:a0:ed:
c9:36:4b:13:e9:f7:30:dd:33:7b:7f:02:05:a9:28:
68:59:24:16:76:98:37:63:e9:eb:1f:e3:20:2e:cd:
c3:f3:ce:1c:be:d3:bc:ce:95:95:4b:b8:2c:97:84:
b8:f8:70:35:21:30:54:d5:c0:0a:87:c9:57:ad:38:
ce:47:ce:bd:20:53:d9:14:70:6d:f2:12:49:58:05:
4c:30:d5:58:a1:c2:85:c9:c7:77:d2:25:ed:90:08:
5a:5d:7e:7d:20:fe:fb:02:fa:c3:59:14:4f:c4:32:
ec:01:07:37:15:76:8f:bb:18:58:2f:45:0c:c5:ca:
5b:99:a6:b2:35:dc:a8:43:01:d6:02:52:3e:14:50:
2d:07:58:35:a9:57:0d:1f:f8:f4:ae:6d:0f:5d:33:
66:33:7a:b6:14:03:00:9b:e1:7b:d2:e6:93:0c:34:
41:6a:da:80:1d:ee:41:c8:57:90:a0:67:e9:08:31:
7f:df:2c:5c:0d:5d:07:2d:57:b4:23:85:b4:bb:cf:
56:28:7c:ac:a1:d9:54:97:60:6c:d8:ec:e0:75:78:
2b:42:40:a7:2c:3b:b4:f4:d5:80:51:da:8f:e2:74:
fa:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:17:E8:50:68:D9:7C:1B:BB:A6:A9:2F:20:F2:7F:56:8D:89:66:74
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/uBfoUGjZfBu7pqkvIPJ_Vo2JZnQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
90:1e:72:e0:03:d0:1d:80:6c:10:e8:8e:17:46:5a:06:ad:ee:
cd:fe:94:38:92:47:e1:d1:8e:d8:1d:65:38:f1:38:f8:48:8e:
30:ad:52:1f:8c:e0:4e:e3:d3:a4:4e:36:3c:e0:cc:ac:e8:95:
31:5d:bb:9d:df:12:95:59:b3:c9:bd:e1:a7:56:64:68:d4:02:
89:12:02:44:d5:9e:53:58:c6:0d:12:b1:ab:61:66:d0:3e:dd:
26:90:65:93:76:c1:7b:e6:b8:1c:54:0b:ce:2b:a3:3d:70:2e:
6e:74:9a:59:08:63:e6:22:6c:58:4e:e7:79:68:aa:8d:4d:6d:
f8:66:51:4e:4a:24:c5:fc:de:52:ab:25:40:dd:8a:5c:5b:7a:
47:0f:2f:a1:d2:74:13:62:9a:91:15:05:c1:0e:24:6d:80:10:
da:5b:ea:18:a2:8b:17:76:df:9d:cd:22:15:3b:fa:64:8a:17:
bb:c3:f2:ef:6c:a9:d8:06:37:05:71:7f:45:b1:1d:50:d6:47:
2f:5b:9d:5f:f8:10:6c:15:9c:ea:aa:66:ca:97:27:76:bb:7d:
13:29:fb:8c:2c:f9:aa:b8:78:f6:2b:b8:1d:2c:87:a9:b0:6d:
6a:44:16:df:f6:4c:d5:29:dc:f0:ec:8b:a5:3a:6b:2b:86:46:
30:61:a1:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 08:17:23 2025 by rpki-client