Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/uL8LIO4ywLCGHH41kb5q5-tpRyY.roa
File: uL8LIO4ywLCGHH41kb5q5-tpRyY.roa (raw, json)
Hash identifier: frcH0t54tQEChR7QQCQNEHUUY7L1Zy8Vw2HsLC+3tLs=
Subject key identifier: B8:BF:0B:20:EE:32:C0:B0:86:1C:7E:35:91:BE:6A:E7:EB:69:47:26
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C2AAB587D6C5E33573315E14ABDB3E503
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/uL8LIO4ywLCGHH41kb5q5-tpRyY.roa
Signing time: Sat 02 Dec 2023 13:15:21 +0000
ROA not before: Sat 02 Dec 2023 13:15:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:2a:ab:58:7d:6c:5e:33:57:33:15:e1:4a:bd:b3:e5:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 2 13:15:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b8bf0b20ee32c0b0861c7e3591be6ae7eb694726
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d3:aa:ff:0a:7c:3e:d7:7b:4a:5c:64:0f:4b:
f2:e7:39:2d:63:cc:d5:49:78:d0:ef:64:13:d3:9b:
d2:44:d9:bb:f2:f0:ea:c3:4d:19:f6:38:cb:cd:06:
5b:aa:6f:f2:02:f6:71:02:23:d9:c9:7b:d4:d5:d5:
18:dd:f5:61:a5:1f:4b:d2:4e:b1:5f:f1:8f:56:04:
40:4e:98:40:8c:5c:ea:6f:fc:1e:da:db:9f:ad:a0:
76:02:17:d1:d7:3c:b3:99:51:d3:30:36:49:a5:af:
77:d8:26:c6:3c:fb:67:01:04:d4:b7:ba:c9:6f:07:
86:85:95:e1:2d:64:70:ca:e7:f4:9f:d8:7f:3c:80:
18:67:21:6e:a0:e5:27:a8:88:4f:8f:8b:37:6f:1a:
d5:35:04:a0:2d:ba:5f:d1:80:2b:cf:6e:d2:6f:c8:
e1:f0:4c:13:02:22:a4:f6:ca:32:32:ca:35:2a:f1:
26:e9:34:e7:33:de:8d:4f:99:61:e3:24:4f:63:f0:
7d:a0:0e:c4:b5:88:be:f8:bc:2a:f6:7c:eb:35:34:
31:fa:34:7a:7e:f5:c8:af:7c:a7:f7:f9:a8:89:8a:
d5:f8:dc:1c:9b:32:b7:97:93:38:5c:72:a8:2c:75:
be:05:d0:62:7e:ff:3d:a0:51:09:e5:a4:9c:ae:b6:
9a:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:BF:0B:20:EE:32:C0:B0:86:1C:7E:35:91:BE:6A:E7:EB:69:47:26
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/uL8LIO4ywLCGHH41kb5q5-tpRyY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1f:7b:f6:f2:a4:6b:16:33:34:dd:ff:61:ab:60:70:f8:35:2d:
dc:64:19:63:d5:60:87:4b:b3:fe:20:15:76:ba:28:6b:66:e6:
81:a6:6d:73:34:12:d2:93:82:95:4e:14:01:63:dc:b5:d0:99:
98:d2:8e:a5:d3:80:fd:ce:83:43:79:e6:d8:9b:22:d6:f7:b7:
bc:e1:6c:18:10:bf:41:86:fa:11:de:40:ca:0b:be:47:30:f6:
e6:b0:ff:89:eb:77:97:24:de:1c:45:93:f4:60:29:05:c4:70:
14:1b:a4:24:e2:1a:fe:e7:6c:04:b3:b8:51:d3:76:ad:35:d8:
29:f9:21:6e:d8:01:26:0f:09:9f:62:2e:a0:e8:ad:dd:6e:fc:
e5:d5:86:b6:3f:b3:88:8c:8f:46:ec:f2:78:b6:22:75:b5:18:
bd:ad:47:c6:72:d6:5e:78:f8:c7:f7:31:ba:39:bb:9f:a0:92:
91:96:f4:42:9c:f8:c9:0a:5b:6f:23:83:75:62:1d:2e:f1:4c:
5c:be:50:3c:a7:62:3f:5e:6f:ec:c8:7f:8b:64:cc:a9:78:ba:
de:01:63:09:0b:f8:34:ff:c0:92:19:5b:f7:ab:9c:77:0f:dd:
8d:d3:d6:81:01:fa:86:5b:e2:ce:72:41:6b:99:3a:fe:f0:77:
38:d0:eb:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 04:31:00 2025 by rpki-client