Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ugQZcWnA0jUaHfSQjedVKc0UaPw.roa
File: ugQZcWnA0jUaHfSQjedVKc0UaPw.roa (raw, json)
Hash identifier: Z4wclIAwBg/H8S71K4h+qrAM6B4IG5iSCPlZy4RQss0=
Subject key identifier: BA:04:19:71:69:C0:D2:35:1A:1D:F4:90:8D:E7:55:29:CD:14:68:FC
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C385D68869F4A457164212E2AC5D4DA05
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ugQZcWnA0jUaHfSQjedVKc0UaPw.roa
Signing time: Tue 05 Dec 2023 05:04:54 +0000
ROA not before: Tue 05 Dec 2023 05:04:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18c:385c:ef6e/128 maxlen: 128
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:38:5d:68:86:9f:4a:45:71:64:21:2e:2a:c5:d4:da:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 5 05:04:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ba04197169c0d2351a1df4908de75529cd1468fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:92:72:c9:fd:0e:0b:ec:fe:45:74:0b:be:2e:
39:08:2c:99:40:5b:66:cf:46:72:c4:b6:02:d0:b0:
be:23:be:ba:fe:64:db:16:35:c1:d9:c5:5a:f7:3f:
9e:d7:bc:ce:4e:fb:93:33:14:c0:59:ab:4e:ca:22:
e3:76:19:7b:b1:58:79:c3:8e:05:d1:10:d0:6d:44:
28:47:1f:de:a6:55:2d:47:d8:66:d8:1b:39:07:12:
e1:8a:89:8d:c4:d3:cf:51:de:80:7a:54:bf:50:0f:
b5:2f:73:c5:47:0c:6f:e2:5a:d8:1b:33:cb:b4:cc:
d6:32:58:90:88:4a:4a:70:92:96:01:d0:46:58:6c:
06:f0:96:b0:76:75:aa:07:a4:81:ec:dd:ff:8a:a9:
ef:20:60:18:e5:97:ea:30:5a:10:68:d5:49:08:bb:
cf:93:57:06:67:29:34:91:05:4f:59:38:b9:62:50:
06:82:e9:93:e5:05:e4:01:dc:7e:ab:63:a7:8c:50:
c3:35:57:a9:c5:06:4e:5a:46:20:20:38:09:11:76:
40:ed:10:65:4f:6a:4a:ef:54:3c:e9:29:8b:c4:fa:
da:75:ac:6e:98:c5:12:3f:dc:0f:97:0a:25:69:bc:
21:e0:b7:4b:8e:02:6c:bc:3c:8a:26:63:35:38:28:
65:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:04:19:71:69:C0:D2:35:1A:1D:F4:90:8D:E7:55:29:CD:14:68:FC
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ugQZcWnA0jUaHfSQjedVKc0UaPw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
c1:48:f1:91:cb:fd:6f:05:76:2f:82:20:be:d1:5c:60:6e:cf:
41:51:5d:17:5b:eb:ab:d0:94:dc:9c:57:55:2c:24:fd:4e:f6:
f5:30:fe:77:b4:1f:3a:b5:8c:e7:30:fa:23:3b:44:f1:05:a6:
68:00:b8:6f:a1:66:d1:e3:09:f6:cc:f3:d4:c8:68:6b:56:d2:
a5:35:ab:6a:3c:40:15:99:b1:0f:e9:33:71:d2:b4:9f:3c:43:
28:07:18:60:d1:13:46:69:f3:20:4f:6a:59:d4:57:ee:ee:98:
32:21:39:46:62:fe:27:11:e1:a7:43:af:d0:fc:19:1d:85:6d:
9c:f4:bd:68:38:89:9b:96:cd:a2:99:9e:8a:c4:48:70:4d:1b:
c8:16:51:64:78:6f:17:af:a3:db:a7:c1:9d:bf:9d:84:8a:b3:
d3:92:dc:5c:c9:8d:93:c4:1b:c7:3b:0a:5c:9c:35:fd:82:24:
f5:1b:05:68:e2:b6:cf:1d:41:e7:c6:47:5e:8f:45:e4:78:0e:
7a:d0:67:51:f6:9e:c2:19:3c:99:a3:84:3d:b9:5e:e5:2a:57:
4e:42:c1:84:cb:d4:5f:5c:48:c6:84:9b:64:17:a5:07:54:8c:
d3:ab:a8:44:70:bd:c5:be:a0:ba:9a:ff:6c:54:ab:a5:91:e3:
1d:8f:1e:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 05:21:24 2025 by rpki-client