Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/uoMx7RbqdSvyj0jfJVmmvKlB5kE.roa
File: uoMx7RbqdSvyj0jfJVmmvKlB5kE.roa (raw, json)
Hash identifier: oZNo0p3ah3iwqOA9icloUa/313dajn0mOH/7ratDA/g=
Subject key identifier: BA:83:31:ED:16:EA:75:2B:F2:8F:48:DF:25:59:A6:BC:A9:41:E6:41
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C48EC15344BB28F858CDF95DD125DEC80
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/uoMx7RbqdSvyj0jfJVmmvKlB5kE.roa
Signing time: Fri 08 Dec 2023 10:14:40 +0000
ROA not before: Fri 08 Dec 2023 10:14:40 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:48:ec:15:34:4b:b2:8f:85:8c:df:95:dd:12:5d:ec:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 8 10:14:40 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ba8331ed16ea752bf28f48df2559a6bca941e641
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:82:b9:46:5c:03:f8:d3:e6:27:c8:24:77:e5:
7e:d0:ba:3e:34:3e:2e:6e:09:8f:a0:24:a5:1c:6a:
12:df:89:0a:7d:c4:1e:fd:17:03:e3:81:59:1d:37:
ed:98:cb:66:d2:a6:2e:fd:9b:73:16:64:13:5d:1d:
a9:5e:44:a7:d3:4d:66:9f:2b:55:37:0b:d2:71:47:
a8:1a:20:c0:44:ee:be:1d:24:b3:fb:33:f3:01:11:
8b:ae:f4:52:f3:8c:f7:d3:c6:8f:c0:d3:23:9a:ca:
83:51:61:6d:2a:e0:d5:6e:49:69:13:85:3a:17:74:
08:c2:a1:90:f4:26:a7:6b:03:8e:4d:cc:99:fb:df:
08:23:9d:ef:bb:04:0b:05:56:5c:73:c8:e9:73:2a:
7d:54:e1:64:48:68:d7:32:80:e8:99:0b:31:cc:c9:
17:f4:19:a7:7a:79:74:77:44:9c:1f:a1:f2:f0:93:
bc:7f:b9:60:f8:9d:5f:c0:fa:79:13:a7:ae:6d:46:
60:28:57:77:a9:4c:0b:b5:59:78:75:d2:bb:fb:7d:
59:ee:31:ab:f8:3d:df:d8:00:d5:a5:4c:ba:98:63:
bc:ed:c4:76:f9:20:4b:cd:67:fe:52:ac:77:50:4f:
0f:42:ad:4c:fd:d4:f7:af:e8:1f:9a:0d:15:a1:6f:
7d:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:83:31:ED:16:EA:75:2B:F2:8F:48:DF:25:59:A6:BC:A9:41:E6:41
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/uoMx7RbqdSvyj0jfJVmmvKlB5kE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
26:70:87:52:4f:9c:43:23:4d:9f:62:e5:d3:ec:10:d3:f3:bb:
5c:b1:82:f3:60:45:29:0d:b6:7d:bf:a6:1c:f7:b6:50:89:3c:
1f:e5:f7:3e:82:17:87:cb:8c:0c:8f:dc:f6:f6:5d:1a:14:2b:
4d:0a:2b:de:9f:20:50:f3:60:e2:5e:a5:74:6a:b5:50:70:e3:
b8:8f:16:76:cf:66:96:f0:71:8b:2e:3d:ae:55:be:b4:8a:a8:
e2:e3:4a:f6:e4:ee:0f:de:6c:00:0c:b5:94:91:58:24:fc:f8:
4d:fe:ee:10:47:ef:ba:a6:05:9c:05:77:81:c2:c5:2a:38:e5:
77:bf:98:e9:e7:9c:12:25:9d:f5:93:fd:84:c1:53:b8:de:16:
c6:9d:c3:68:14:6e:99:2b:d2:cf:80:e9:5b:4b:ca:74:eb:df:
b5:32:08:ac:3b:db:6e:06:51:6c:29:c6:04:4c:2f:ee:90:a7:
f3:e3:b4:7f:e1:14:2b:60:1e:72:a3:1f:66:6f:88:fa:9a:fa:
41:8b:40:73:9e:1b:86:e7:e0:0f:5e:cf:af:4d:58:69:c8:54:
2c:47:e9:70:13:8e:6f:f0:dc:15:27:d0:9c:5c:02:82:f2:b3:
19:a5:b1:84:c5:d9:20:b6:60:5b:d3:6e:60:95:1c:5a:a5:31:
5c:bf:d4:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 22:40:03 2025 by rpki-client