Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/UgD07D6bxR6o4k4268s3c_cNZLs.roa
File: UgD07D6bxR6o4k4268s3c_cNZLs.roa (raw, json)
Hash identifier: gvUelAr8XURtmbZkK2Bx6KP2rlTCFSto71EB/5tkUew=
Subject key identifier: 52:00:F4:EC:3E:9B:C5:1E:A8:E2:4E:36:EB:CB:37:73:F7:0D:64:BB
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B6048A774650CD72EE958C3ABA832DB9D
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/UgD07D6bxR6o4k4268s3c_cNZLs.roa
Signing time: Tue 24 Oct 2023 06:04:16 +0000
ROA not before: Tue 24 Oct 2023 06:04:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18b:6048:9c35/128 maxlen: 128
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:60:48:a7:74:65:0c:d7:2e:e9:58:c3:ab:a8:32:db:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 24 06:04:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5200f4ec3e9bc51ea8e24e36ebcb3773f70d64bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:df:c2:f7:30:26:c4:e3:cc:68:cd:f6:11:a3:
d4:1e:22:a5:b9:d1:69:98:46:da:ec:3c:21:ca:19:
f2:40:9f:df:f6:05:3d:e8:20:96:08:67:ad:d9:a1:
93:f6:2d:8e:38:cd:5a:f0:c6:3f:db:33:7f:23:37:
27:30:8f:5c:b4:5a:8e:40:ec:d9:f8:61:2a:8a:c5:
f1:74:fc:ca:8c:0d:b7:69:2e:59:cd:5c:6b:3c:a2:
ae:8b:db:68:f0:40:4f:7f:8d:f1:5e:2a:83:66:36:
6f:24:2a:61:e0:f2:ae:36:68:1b:0f:ff:fd:8d:7a:
37:9d:78:76:99:8a:ee:9e:93:04:23:95:a7:15:c2:
30:b0:3b:59:a7:75:4e:c1:fe:19:c7:f0:cc:37:fa:
84:57:25:f7:02:e8:94:2a:c5:8d:c4:f5:b1:92:9b:
6c:42:fd:41:ee:61:fe:65:30:da:d6:9f:8e:8c:3f:
d9:65:84:5e:a6:a3:2e:f1:68:f4:01:46:a5:a3:31:
d8:be:ac:1c:69:51:c0:cb:3d:e3:0d:f2:a3:75:1c:
1f:95:e7:b6:25:f6:92:37:94:1f:a5:d3:d8:72:ab:
f7:af:08:fa:94:3d:58:12:95:74:d0:78:24:63:d3:
13:a8:ac:9e:11:00:84:d2:7f:aa:6f:40:0b:0b:dd:
b4:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:00:F4:EC:3E:9B:C5:1E:A8:E2:4E:36:EB:CB:37:73:F7:0D:64:BB
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/UgD07D6bxR6o4k4268s3c_cNZLs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2b:c9:81:a6:10:a3:3c:ab:ea:a2:5b:9c:ad:bf:6b:8b:17:9b:
0c:7d:4a:7c:b0:b7:94:ef:2a:90:30:b7:84:e4:34:5c:c7:ee:
64:66:be:2b:28:83:68:9d:de:19:49:57:36:95:ea:fe:ba:ef:
e1:b3:f4:4a:d9:79:ec:e7:78:26:22:84:75:fc:69:c7:83:5c:
d5:7e:82:7d:69:3c:09:6a:42:93:82:4c:c0:e5:6e:e1:38:91:
f3:1b:6f:cb:87:13:cb:81:5b:64:5e:23:c3:01:43:03:dc:72:
d0:b1:cb:9b:d1:e0:61:4a:21:c9:22:05:ed:74:99:24:64:d7:
9c:7c:3b:63:d6:b4:59:43:68:16:7f:1b:38:7f:69:8f:68:55:
f7:57:2f:c8:d3:28:ac:45:66:25:b8:85:67:33:da:a9:31:4e:
d6:4f:5c:d7:80:62:a4:d5:35:76:07:6e:36:d8:aa:0b:67:b8:
d0:d2:36:1e:98:90:bf:32:58:71:34:c6:b9:d2:3f:c1:18:60:
24:b7:a3:fc:15:5f:d1:3c:82:e8:e6:00:ed:6e:2d:26:bf:fc:
ef:00:6c:b3:eb:d4:83:5f:0f:2e:40:81:18:49:5f:57:8c:05:
94:29:f7:5e:f3:dd:2c:0b:a4:e9:6e:60:36:4e:e7:ca:07:8e:
17:66:76:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 18:39:32 2025 by rpki-client