Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/un2WIbbF0VSATZcT0MoKYd0F5Wk.roa
File: un2WIbbF0VSATZcT0MoKYd0F5Wk.roa (raw, json)
Hash identifier: +/WdWc0y5xtWUlhHIw5xLseZFZ6ATJ4rMv6C2Cj/5v4=
Subject key identifier: BA:7D:96:21:B6:C5:D1:54:80:4D:97:13:D0:CA:0A:61:DD:05:E5:69
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BF00CEFE3F1332C93BEAB93B76CF7AA29
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/un2WIbbF0VSATZcT0MoKYd0F5Wk.roa
Signing time: Tue 21 Nov 2023 04:04:21 +0000
ROA not before: Tue 21 Nov 2023 04:04:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:f00c:db01/128 maxlen: 128
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:f0:0c:ef:e3:f1:33:2c:93:be:ab:93:b7:6c:f7:aa:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 21 04:04:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ba7d9621b6c5d154804d9713d0ca0a61dd05e569
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:5b:65:84:1a:24:3d:d3:b8:ff:5a:9f:5c:09:
5e:17:eb:32:c7:36:39:79:52:8c:03:e7:cc:3a:4e:
a7:8f:1a:65:27:fe:2a:b7:06:1d:a1:d2:09:c8:20:
2e:db:a7:00:71:03:bd:59:e8:70:73:32:e5:77:75:
e2:85:cb:41:10:60:9e:a8:c5:f2:dd:65:e4:b6:0d:
50:0b:aa:3f:74:95:b6:11:80:5d:f5:61:2b:76:b1:
70:49:23:01:c6:37:08:18:f5:a6:51:27:70:1d:e9:
23:89:86:91:fb:37:cc:29:4f:eb:77:84:13:b6:c1:
0f:a9:02:48:33:14:88:01:54:cf:11:e9:82:0b:b7:
dd:50:f7:0e:f9:bd:c1:85:7a:84:2a:09:b9:71:d5:
32:b8:bc:08:ea:07:c0:fd:db:1b:ae:68:1f:2e:67:
6f:45:ed:69:d9:2b:a0:d6:7a:ea:12:c6:ca:66:9c:
b4:0f:93:0e:b8:f3:99:63:94:f3:99:38:bd:32:8c:
45:ff:b8:bc:b8:f2:79:45:f3:db:b3:d1:cc:c9:99:
7e:79:46:d7:ab:02:15:3a:97:23:02:e7:1d:8d:6e:
cd:5d:9b:fe:56:ca:2c:5a:b3:92:17:76:c2:61:2b:
69:42:ad:9f:f5:36:e0:00:ae:28:0f:a9:09:55:9a:
c2:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:7D:96:21:B6:C5:D1:54:80:4D:97:13:D0:CA:0A:61:DD:05:E5:69
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/un2WIbbF0VSATZcT0MoKYd0F5Wk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
17:63:eb:5d:05:03:f9:b6:d5:ee:8b:e9:29:2d:82:6c:9a:79:
21:f8:09:97:1e:b3:03:2a:43:57:8d:d1:67:7b:16:99:02:84:
6e:5b:1a:bc:e2:b2:be:3d:6c:11:8d:65:52:5e:5a:57:8e:6e:
0c:0c:cd:6d:cd:38:27:f3:7e:e4:39:50:d4:1c:90:45:30:f9:
75:57:6c:cf:99:23:67:53:10:03:19:3f:0f:e2:cd:b4:26:c7:
9d:01:53:98:98:4c:bb:7d:b8:c6:be:a9:b6:5b:02:9c:94:e7:
86:5b:11:96:c4:6a:ad:76:57:0b:4a:af:e0:72:42:ce:dd:ca:
64:8d:ca:eb:1d:7d:7e:41:2a:b8:35:ee:01:3f:96:65:ff:1e:
b8:2c:19:00:7f:e9:1c:fc:f4:ab:91:1a:08:b4:7f:14:a4:a4:
f8:e6:59:6e:46:c9:78:18:c8:da:50:72:02:d9:eb:22:4c:dc:
96:9a:2b:e0:fd:ae:15:49:49:5e:e3:72:78:cc:1d:53:49:9e:
68:00:85:af:62:de:f4:81:8c:6e:c9:63:6d:f8:c1:19:09:67:
98:52:f8:2a:1a:36:28:79:7b:86:ae:3b:6d:40:99:08:cb:ef:
42:96:93:12:20:e0:73:11:28:91:d5:ad:e1:57:a6:b6:8b:fe:
c6:5a:b3:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 12:49:58 2025 by rpki-client