Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/UbIpb4kYgKIuCDFKBnZYfkLAJXM.roa
File: UbIpb4kYgKIuCDFKBnZYfkLAJXM.roa (raw, json)
Hash identifier: N3mLkvmF3GBxAO7Ias69rwLPdzGEtwTqMCsMjVQId/Q=
Subject key identifier: 51:B2:29:6F:89:18:80:A2:2E:08:31:4A:06:76:58:7E:42:C0:25:73
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C0024CF211E476C674787E2D81F1689AF
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/UbIpb4kYgKIuCDFKBnZYfkLAJXM.roa
Signing time: Fri 24 Nov 2023 07:04:21 +0000
ROA not before: Fri 24 Nov 2023 07:04:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18c:24:a86c/128 maxlen: 128
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:00:24:cf:21:1e:47:6c:67:47:87:e2:d8:1f:16:89:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 24 07:04:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=51b2296f891880a22e08314a0676587e42c02573
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:93:9e:9c:d7:75:80:c7:85:b8:1b:0a:bc:b8:
96:60:cf:da:01:26:79:3d:97:81:ee:31:ed:99:83:
73:ab:8a:8f:e8:7d:98:f1:12:f3:a8:49:5e:a9:f5:
a8:34:2d:51:23:fb:ac:e9:a5:34:68:7f:c0:8d:10:
78:c0:c4:d4:8e:3b:58:a1:d4:b6:bb:db:33:36:89:
62:44:4f:16:ab:f9:38:23:32:f4:d1:e1:b2:36:5e:
d0:08:27:16:e2:95:28:c7:92:43:56:bb:9f:08:35:
a7:2a:e1:15:a4:07:6d:1d:de:0b:6a:e9:d4:e2:df:
bf:06:53:25:ab:48:64:7a:84:39:41:7b:4c:d9:6c:
de:83:27:41:bb:ff:fa:e9:bd:74:a8:ed:15:6b:ff:
b6:3b:1d:94:29:37:97:45:f1:b2:2e:54:51:34:a4:
db:75:2e:30:ef:d0:24:e6:22:e1:64:4b:14:12:d1:
03:8e:21:5f:cb:33:0a:ba:58:74:bc:51:af:bc:30:
62:87:f2:ee:d7:a7:4e:f8:39:be:79:c2:fd:d1:64:
5a:0e:58:81:8e:84:dd:b7:41:bd:3e:93:67:ae:69:
0b:4b:10:fc:e9:4c:39:ee:06:25:96:28:27:5e:02:
60:c0:14:d3:17:40:4d:6d:99:8e:54:88:26:bf:3c:
13:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:B2:29:6F:89:18:80:A2:2E:08:31:4A:06:76:58:7E:42:C0:25:73
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/UbIpb4kYgKIuCDFKBnZYfkLAJXM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6e:2d:33:7d:42:81:75:36:c9:f9:17:48:7b:bc:53:ae:9b:c9:
73:dd:60:72:55:5b:c1:7d:ec:87:d5:8f:7f:41:a1:4a:be:3a:
da:43:8b:72:a7:a3:e0:16:b4:67:2b:d2:92:13:ea:ea:dc:ff:
37:ab:eb:68:09:9b:f8:34:52:07:6f:93:ed:63:e4:3a:be:70:
2f:75:c9:e6:e4:05:ff:db:f0:30:69:ee:67:75:66:ec:eb:da:
be:48:a6:1f:c5:79:af:e8:13:66:9f:86:61:2a:55:9e:36:b0:
a8:eb:e5:7a:05:4c:3b:24:0b:b5:1e:b7:80:a6:0a:4a:eb:2d:
7e:c1:ca:83:79:01:a1:6c:f1:3e:6e:c8:46:a4:db:fc:b3:c0:
62:31:8c:b5:3a:fc:e5:88:dd:a4:63:0b:39:9e:31:6f:44:c5:
b2:e8:60:e7:ce:65:01:9f:28:32:4c:72:44:a7:31:fb:60:2c:
95:f0:f2:41:e5:3b:3c:f8:8d:ba:d8:ce:fc:fb:ee:7f:5f:6b:
54:c4:53:a7:59:52:21:2f:fb:89:49:32:3f:6a:6b:ae:3e:28:
a9:57:2b:ce:a1:6a:c5:1f:15:6d:6e:14:5c:db:b8:f8:85:7e:
5b:9c:99:ea:b7:4c:cc:cc:36:1d:6d:de:79:58:5d:40:ef:b7:
ea:5d:82:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 02:36:24 2025 by rpki-client