Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/uPLhuxtpKlPXxF49gEbHCq7QAYQ.roa
File: uPLhuxtpKlPXxF49gEbHCq7QAYQ.roa (raw, json)
Hash identifier: b+UK7+4Wt5jOIieKeDQMk81WLYOyjTiOpO2RWtOpQA4=
Subject key identifier: B8:F2:E1:BB:1B:69:2A:53:D7:C4:5E:3D:80:46:C7:0A:AE:D0:01:84
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BD199C52C9C64F1CA7DA1150429D245A0
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/uPLhuxtpKlPXxF49gEbHCq7QAYQ.roa
Signing time: Wed 15 Nov 2023 06:09:57 +0000
ROA not before: Wed 15 Nov 2023 06:09:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:d1:99:c5:2c:9c:64:f1:ca:7d:a1:15:04:29:d2:45:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 15 06:09:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b8f2e1bb1b692a53d7c45e3d8046c70aaed00184
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:03:9a:af:70:f8:55:99:ab:96:7f:16:6c:9b:
6f:31:a6:5c:dc:27:f2:80:f5:8d:d6:6f:fe:ce:5c:
20:d8:b7:93:24:1c:3e:9e:f5:34:80:bf:0d:77:ce:
bd:14:ef:6e:e6:c5:6a:1e:cc:d4:cf:8f:52:61:3c:
3d:6b:b3:8c:50:50:ff:2a:38:e2:08:ff:4d:13:2e:
00:83:59:af:07:54:8f:d0:42:b6:a1:13:81:83:f3:
2c:90:15:a0:71:0e:3f:eb:1d:6f:1f:f8:96:c5:52:
34:a9:51:e1:ac:28:d4:45:e6:36:50:95:9d:7b:67:
a3:0e:b4:5d:03:af:99:f5:ad:4e:d8:89:50:cd:cd:
ae:5e:3f:fb:ff:66:75:4f:4d:16:97:58:27:c8:11:
7a:1e:b5:a1:77:74:93:25:49:71:4c:22:11:32:73:
67:ef:9a:06:d0:29:ac:76:c2:88:8b:72:e2:b4:74:
50:b8:f2:da:5e:ef:ef:7a:8f:51:d4:cd:f4:85:df:
c6:73:72:b9:9f:cb:17:0b:dd:19:e2:fb:75:e1:6e:
81:8b:fd:d1:a3:80:3c:5b:f7:f9:c2:c9:73:90:b0:
f5:32:a4:ff:eb:16:71:70:d1:65:bf:64:b9:2a:c5:
e0:43:02:e3:48:aa:b9:5c:be:d0:09:2c:06:5b:10:
8c:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:F2:E1:BB:1B:69:2A:53:D7:C4:5E:3D:80:46:C7:0A:AE:D0:01:84
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/uPLhuxtpKlPXxF49gEbHCq7QAYQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a5:cf:32:87:fb:5f:4e:56:7c:98:d3:ab:7c:6f:69:97:9d:ed:
8f:79:16:53:cd:98:5c:79:65:eb:5b:6d:6c:84:88:76:b8:c1:
fa:95:57:c5:40:ae:59:15:c3:74:47:64:89:9b:55:7e:b4:96:
f8:d3:19:ce:2b:3a:c6:f6:49:1f:a1:13:9d:f1:a8:f5:bf:5b:
04:ad:b1:dc:c8:90:44:d6:a1:0f:f3:06:de:ba:4c:bf:f6:f5:
4e:f0:98:80:c9:72:9c:e0:98:37:be:15:4d:10:fa:fc:ee:33:
fd:9c:33:cb:76:a8:f0:67:92:e4:2c:98:92:77:c2:c9:d2:6d:
ca:28:10:6a:e4:d3:29:c1:5e:f1:3e:e5:b7:19:9e:a4:01:e7:
95:8a:61:a9:e6:b7:4e:dd:f8:3f:49:34:bf:08:9e:25:a8:b4:
48:c7:88:dc:49:7b:26:14:b2:59:5b:d5:05:2b:8b:42:75:8e:
6e:25:bb:2a:a8:60:1e:62:89:53:bb:7a:29:b1:90:69:a8:fd:
87:f3:78:10:cc:c0:fd:b9:1d:51:7d:51:38:8e:14:ab:8c:bb:
a6:05:a8:0d:95:92:60:c3:34:ce:11:1f:95:51:8d:49:cf:07:
1d:c0:96:2b:41:b5:05:29:d6:f0:61:a1:f1:78:5b:02:bc:e6:
45:ab:83:3b
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYvRmcUsnGTxyn2hFQQp0kWgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMTE1MDYwOTU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiOGYyZTFiYjFiNjkyYTUzZDdjNDVlM2Q4MDQ2YzcwYWFlZDAwMTg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0gOar3D4VZmrln8WbJtvMaZc3Cfy
gPWN1m/+zlwg2LeTJBw+nvU0gL8Nd869FO9u5sVqHszUz49SYTw9a7OMUFD/Kjji
CP9NEy4Ag1mvB1SP0EK2oROBg/MskBWgcQ4/6x1vH/iWxVI0qVHhrCjUReY2UJWd
e2ejDrRdA6+Z9a1O2IlQzc2uXj/7/2Z1T00Wl1gnyBF6HrWhd3STJUlxTCIRMnNn
75oG0CmsdsKIi3LitHRQuPLaXu/veo9R1M30hd/Gc3K5n8sXC90Z4vt14W6Bi/3R
o4A8W/f5wslzkLD1MqT/6xZxcNFlv2S5KsXgQwLjSKq5XL7QCSwGWxCMwwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFLjy4bsbaSpT18RePYBGxwqu0AGEMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvdVBMaHV4dHBLbFBYeEY0OWdFYkhDcTdRQVlRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAKXPMof7X05WfJjTq3xv
aZed7Y95FlPNmFx5ZetbbWyEiHa4wfqVV8VArlkVw3RHZImbVX60lvjTGc4rOsb2
SR+hE53xqPW/WwStsdzIkETWoQ/zBt66TL/29U7wmIDJcpzgmDe+FU0Q+vzuM/2c
M8t2qPBnkuQsmJJ3wsnSbcooEGrk0ynBXvE+5bcZnqQB55WKYanmt07d+D9JNL8I
niWotEjHiNxJeyYUsllb1QUri0J1jm4luyqoYB5iiVO7eimxkGmo/YfzeBDMwP25
HVF9UTiOFKuMu6YFqA2VkmDDNM4RH5VRjUnPBx3AlitBtQUp1vBhofF4WwK85kWr
gzs=
-----END CERTIFICATE-----
Generated at Mon May 12 04:35:22 2025 by rpki-client