Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/UJ3SHeyZy8V2xuDzM1bkLXdpubk.roa
File: UJ3SHeyZy8V2xuDzM1bkLXdpubk.roa (raw, json)
Hash identifier: ig1+UapE6uD+esOrSxo5YMTjnFlsHZS8ohsPf56zim8=
Subject key identifier: 50:9D:D2:1D:EC:99:CB:C5:76:C6:E0:F3:33:56:E4:2D:77:69:B9:B9
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B5F6DD7839DBE538AAF94BA6093AD5C60
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/UJ3SHeyZy8V2xuDzM1bkLXdpubk.roa
Signing time: Tue 24 Oct 2023 02:05:15 +0000
ROA not before: Tue 24 Oct 2023 02:05:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64:ffff:0:18b:5f6d:5358/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:5f:6d:d7:83:9d:be:53:8a:af:94:ba:60:93:ad:5c:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 24 02:05:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=509dd21dec99cbc576c6e0f33356e42d7769b9b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c8:34:4d:32:79:15:02:26:92:b8:3c:74:9b:
d8:16:9d:39:36:64:0a:00:80:70:87:f6:dd:64:2c:
03:90:24:4d:dc:81:af:60:0d:c3:cd:58:19:5f:4a:
fd:71:19:98:fd:e9:6b:5b:f4:cf:bd:a1:97:f8:b8:
5f:e0:1d:62:8a:2f:b7:36:ff:ac:bc:be:55:af:36:
4f:57:94:56:1f:46:e1:5e:a8:8f:4c:d1:7c:4c:c4:
97:52:72:3d:21:fc:2c:e6:dd:7d:9c:de:fb:99:c3:
05:7a:e7:f4:5c:31:a3:34:8b:07:ff:45:b9:28:6a:
da:68:70:5c:a6:4f:1c:48:95:1d:7e:c0:68:c1:dd:
c3:b0:51:83:99:83:12:20:97:e0:b6:de:86:8b:bd:
0c:e9:ba:ed:2e:fa:e9:f8:e9:34:25:88:15:9d:f8:
e4:37:c8:f9:22:b6:76:70:58:4f:a7:d0:c3:2d:68:
37:c5:f4:60:2d:f5:d7:cb:11:58:48:16:d3:db:be:
d2:48:23:5b:ed:0c:73:9f:37:c0:c9:04:d7:cf:43:
2a:7b:ac:a0:96:c2:0d:7a:0c:59:2a:29:f1:d9:a5:
4f:0c:9b:70:bf:f2:37:1d:8b:74:e4:c7:a1:81:ed:
5d:c8:5d:af:a0:92:40:ed:b2:bb:d5:e9:73:03:01:
e0:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:9D:D2:1D:EC:99:CB:C5:76:C6:E0:F3:33:56:E4:2D:77:69:B9:B9
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/UJ3SHeyZy8V2xuDzM1bkLXdpubk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
48:b5:85:9e:c1:ba:6d:02:25:b4:3b:6b:e2:ea:10:3e:4a:da:
3a:d8:c3:85:7f:6e:66:df:26:44:57:aa:6d:8e:09:04:6e:d7:
ec:28:30:4f:df:c2:8f:6c:72:ac:c3:4d:67:b9:39:f8:19:f1:
8e:16:9b:a0:8c:57:d9:cd:ad:45:12:21:b4:be:9f:20:fe:a9:
3f:ee:b7:c6:27:2a:1a:49:27:2d:7a:53:93:8b:24:cd:17:d3:
91:ab:91:a9:25:11:f8:b5:c6:e3:cc:7b:13:2b:65:ae:4d:67:
a9:bd:a0:48:08:7b:cc:d5:07:60:84:09:d8:27:8b:51:db:c7:
28:ab:3b:fa:ba:9e:b9:eb:e8:fd:de:06:dc:bf:37:3a:cb:19:
fa:b7:52:ce:fe:0b:a0:4f:d6:bd:d0:6b:74:56:34:d1:ac:d4:
b3:7a:69:00:96:8b:66:11:03:61:92:4b:9d:d9:9c:09:94:cd:
28:ef:54:ac:a2:52:f2:3f:58:c1:1d:e9:0e:48:9c:05:3a:c3:
e9:67:23:07:f3:e7:df:9b:08:06:12:fa:78:a9:44:51:b5:14:
37:f5:c0:31:5d:44:04:e2:51:99:d7:0d:a8:6e:77:58:a9:ce:
c8:24:4f:1d:b4:c8:58:1c:f0:b8:b6:7e:4d:f1:4f:f0:cf:ac:
ca:66:e8:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 19:23:40 2025 by rpki-client