Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/uqxmSyidLWdcOArk5ojQ9usOUCY.roa
File: uqxmSyidLWdcOArk5ojQ9usOUCY.roa (raw, json)
Hash identifier: MUMMWc3RCHpujtVnrAvCJc2YZkjZlZyM5e6126pyO7E=
Subject key identifier: BA:AC:66:4B:28:9D:2D:67:5C:38:0A:E4:E6:88:D0:F6:EB:0E:50:26
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AB5EA2BA2B1A861F7659D6F6E8AF449EB
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/uqxmSyidLWdcOArk5ojQ9usOUCY.roa
Signing time: Thu 21 Sep 2023 04:05:37 +0000
ROA not before: Thu 21 Sep 2023 04:05:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18a:b5e9:9bda/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:b5:ea:2b:a2:b1:a8:61:f7:65:9d:6f:6e:8a:f4:49:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 21 04:05:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=baac664b289d2d675c380ae4e688d0f6eb0e5026
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:f0:3b:1c:0e:7a:0e:a5:1a:c3:da:3d:3e:0d:
e9:48:e3:ce:43:7c:94:41:6c:23:8d:5d:e3:2e:91:
36:d4:0f:92:19:36:83:a0:66:83:67:6f:70:0a:ee:
8a:56:96:a1:62:99:7e:29:d7:1c:ea:09:df:d3:91:
5c:fe:5e:7e:7b:c5:72:03:97:eb:40:2b:ce:ce:dd:
0a:19:4d:36:ae:e7:a6:92:90:d0:1d:79:56:cf:39:
00:02:d8:67:63:f3:07:df:54:1c:9a:9b:d2:bb:fd:
6a:24:75:74:9d:8c:56:09:7e:df:3b:4c:90:5c:aa:
4b:b1:cb:84:ae:38:97:a1:d3:f2:a2:13:3d:56:f5:
15:c1:b1:7c:3e:6c:46:49:7a:c7:62:1b:bd:6d:a4:
9c:67:fb:e2:fb:ab:28:63:91:a3:c9:fa:03:3b:d0:
89:20:e9:a5:ae:b7:32:8a:43:6d:d5:f8:bc:e3:86:
03:ac:f9:94:f5:a5:d1:de:1d:76:55:58:1e:dd:2f:
34:59:6f:d4:a9:b4:1c:03:15:bf:32:08:5e:95:1b:
b0:be:df:ab:2b:52:17:3c:24:68:76:2a:e1:8e:ab:
ea:f9:f0:9d:04:d1:2f:47:b8:af:9d:44:d6:f6:81:
c5:c9:3f:45:12:66:01:1d:a9:62:5c:01:c9:7e:55:
fb:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:AC:66:4B:28:9D:2D:67:5C:38:0A:E4:E6:88:D0:F6:EB:0E:50:26
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/uqxmSyidLWdcOArk5ojQ9usOUCY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
cf:87:9c:58:86:f9:e7:4a:6c:1e:cd:24:20:c0:c0:35:38:cc:
5a:31:d1:79:ce:9b:ed:54:f4:66:bd:27:c8:c4:90:e8:76:d8:
0a:4e:c3:79:7c:ea:3a:3f:7f:7e:46:96:12:eb:1b:06:95:89:
da:d0:ad:55:c6:e5:ff:ef:c7:65:5d:0e:86:eb:c5:d9:d8:8b:
4d:b6:a8:4e:62:a2:4d:39:22:4e:54:db:a0:12:3f:68:38:e7:
1c:a0:b8:b4:9a:31:fe:a4:ef:f9:3c:36:68:0d:7f:84:8b:b7:
8d:15:eb:03:8b:58:96:a8:16:0a:3a:3b:c7:9c:df:50:9a:65:
91:cb:b6:ef:a8:af:76:ba:64:05:ed:f9:a8:58:4e:ac:2b:dd:
68:89:73:59:23:9a:91:33:22:f6:5e:da:7d:b9:a9:f0:01:b9:
44:73:a3:fa:fb:5f:69:ec:38:6b:af:21:d2:b9:47:b5:f7:73:
18:a4:e6:12:28:76:53:da:ec:60:19:2c:92:58:95:83:ac:9d:
c2:93:49:5b:e2:62:11:44:f5:7b:35:e2:69:27:d5:4e:ae:33:
dc:4e:68:87:6a:8f:5c:8f:cd:85:96:59:37:b8:8e:4d:77:66:
f0:f3:e0:35:0d:65:45:cb:43:9b:35:04:50:2c:23:ec:26:fe:
ab:31:be:1d
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYq16iuisahh92Wdb26K9EnrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMwOTIxMDQwNTM3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYWFjNjY0YjI4OWQyZDY3NWMzODBhZTRlNjg4ZDBmNmViMGU1MDI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhfA7HA56DqUaw9o9Pg3pSOPOQ3yU
QWwjjV3jLpE21A+SGTaDoGaDZ29wCu6KVpahYpl+Kdcc6gnf05Fc/l5+e8VyA5fr
QCvOzt0KGU02ruemkpDQHXlWzzkAAthnY/MH31QcmpvSu/1qJHV0nYxWCX7fO0yQ
XKpLscuErjiXodPyohM9VvUVwbF8PmxGSXrHYhu9baScZ/vi+6soY5GjyfoDO9CJ
IOmlrrcyikNt1fi844YDrPmU9aXR3h12VVge3S80WW/UqbQcAxW/MghelRuwvt+r
K1IXPCRodirhjqvq+fCdBNEvR7ivnUTW9oHFyT9FEmYBHaliXAHJflX7GQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFLqsZksonS1nXDgK5OaI0PbrDlAmMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvdXF4bVN5aWRMV2RjT0FyazVvalE5dXNPVUNZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAM+HnFiG+edKbB7NJCDA
wDU4zFox0XnOm+1U9Ga9J8jEkOh22ApOw3l86jo/f35GlhLrGwaVidrQrVXG5f/v
x2VdDobrxdnYi022qE5iok05Ik5U26ASP2g45xyguLSaMf6k7/k8NmgNf4SLt40V
6wOLWJaoFgo6O8ec31CaZZHLtu+or3a6ZAXt+ahYTqwr3WiJc1kjmpEzIvZe2n25
qfABuURzo/r7X2nsOGuvIdK5R7X3cxik5hIodlPa7GAZLJJYlYOsncKTSVviYhFE
9Xs14mkn1U6uM9xOaIdqj1yPzYWWWTe4jk13ZvDz4DUNZUXLQ5s1BFAsI+wm/qsx
vh0=
-----END CERTIFICATE-----
Generated at Mon May 12 19:23:43 2025 by rpki-client