Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/urCqYVbL3t9As7IKq8L5ykpmUDk.roa
File: urCqYVbL3t9As7IKq8L5ykpmUDk.roa (raw, json)
Hash identifier: 5aOZixOdylqiVevdvsU+a/+Us+zG2cFozxqoq890iTQ=
Subject key identifier: BA:B0:AA:61:56:CB:DE:DF:40:B3:B2:0A:AB:C2:F9:CA:4A:66:50:39
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B0CA1107728486F1BA55AB7897A680B64
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/urCqYVbL3t9As7IKq8L5ykpmUDk.roa
Signing time: Sun 08 Oct 2023 00:12:43 +0000
ROA not before: Sun 08 Oct 2023 00:12:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:0c:a1:10:77:28:48:6f:1b:a5:5a:b7:89:7a:68:0b:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 8 00:12:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bab0aa6156cbdedf40b3b20aabc2f9ca4a665039
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:72:1c:95:b1:69:29:46:d0:33:99:2b:4b:fa:
ec:de:21:68:17:6a:4a:21:43:1c:e5:09:54:a1:14:
65:d5:c7:1a:62:6d:ba:bd:6d:cb:d2:38:2d:46:ff:
1b:bb:35:7b:78:df:e6:21:18:1c:26:fb:55:bd:ef:
b5:ca:73:3d:e3:9e:c5:bf:b3:0d:9e:4a:5f:c1:38:
eb:74:63:6d:c3:94:1e:96:db:f5:12:62:ac:6a:d6:
d6:35:e7:83:d0:c3:60:74:b6:f5:83:f1:dc:f6:ac:
51:16:87:2a:ff:9e:f0:e1:46:22:ce:73:d5:22:62:
d2:1b:08:d6:fd:3a:07:a4:ca:77:52:9f:44:17:e6:
34:43:3a:93:4d:e1:ae:d0:4c:60:18:b0:97:5e:77:
0e:0a:a4:0a:c2:d7:89:19:86:cc:38:d3:98:24:f1:
5f:92:3f:f1:e2:4e:0b:bd:48:f4:92:07:7b:13:86:
a6:4b:09:c5:f6:29:77:7f:6f:07:cb:b8:52:13:ba:
12:6b:4a:6e:71:ab:0b:88:03:f8:8a:8d:a2:01:6d:
79:85:89:e3:92:2a:db:3d:c9:1a:ae:1b:b7:68:af:
4a:f0:70:86:a6:0f:c9:4d:20:cc:ff:9a:9a:97:a5:
8f:35:93:44:b7:d4:ac:da:e2:c0:c0:1f:dd:da:6e:
a4:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:B0:AA:61:56:CB:DE:DF:40:B3:B2:0A:AB:C2:F9:CA:4A:66:50:39
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/urCqYVbL3t9As7IKq8L5ykpmUDk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
82:c8:48:3d:c2:ee:f5:e8:0a:ae:2a:fa:53:17:51:56:db:80:
09:71:49:28:8f:86:cb:c2:f8:11:92:8c:32:95:71:dd:5e:70:
2b:a5:94:e0:8d:1d:f0:b6:10:31:b2:dd:9a:eb:54:f6:4d:6d:
5b:8b:8e:4a:54:7a:36:45:8d:de:64:81:d3:96:65:34:d3:a6:
bd:54:7a:70:86:4c:61:ee:8c:28:69:0a:e8:bc:98:22:4e:28:
21:61:f2:00:d8:9d:8f:c8:14:16:54:0b:71:af:cc:58:1d:dc:
1c:c1:dc:0d:37:59:b5:02:01:d8:4e:49:4b:00:9e:7d:9b:20:
77:cc:70:f0:7f:5a:8f:fe:72:f8:3e:13:1b:0b:cd:4a:3c:ad:
b5:9f:d1:28:43:98:08:4a:6a:3b:87:b5:ec:05:f3:9c:61:21:
01:7c:26:b1:8b:b9:7f:42:40:da:8d:55:9d:7c:27:e5:45:e0:
b5:0c:fd:85:6d:69:36:25:d3:34:a6:7d:6b:a5:d9:eb:a0:bf:
5e:e0:a7:77:5c:bb:fb:9c:06:e1:50:4b:e4:4b:96:bd:86:a0:
2f:c6:63:af:82:ac:50:1e:e8:33:03:28:a5:dc:c4:f7:e7:70:
a9:b7:a0:4d:98:b8:85:c9:82:ed:71:ce:82:ff:ba:38:60:0d:
77:87:5c:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 16:45:20 2025 by rpki-client