Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/uubfti1dzP9IumHzj0VhQmxFLjc.roa
File: uubfti1dzP9IumHzj0VhQmxFLjc.roa (raw, json)
Hash identifier: 6fVcHcJUQP382TLBidWermSWWLp00dlE7yqZJy7ooKQ=
Subject key identifier: BA:E6:DF:B6:2D:5D:CC:FF:48:BA:61:F3:8F:45:61:42:6C:45:2E:37
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AFB39681EC58B12F3ED380B7821F62CC0
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/uubfti1dzP9IumHzj0VhQmxFLjc.roa
Signing time: Wed 04 Oct 2023 15:05:57 +0000
ROA not before: Wed 04 Oct 2023 15:05:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18a:fb38:9af6/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:fb:39:68:1e:c5:8b:12:f3:ed:38:0b:78:21:f6:2c:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 4 15:05:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bae6dfb62d5dccff48ba61f38f4561426c452e37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:52:85:e9:5f:bb:08:53:7e:32:f5:f7:7f:00:
42:fe:10:e7:3a:7c:50:37:e2:54:50:c7:97:b6:40:
2f:bf:3f:87:b0:3d:2d:83:d4:a0:c8:80:78:38:8e:
1f:a7:b5:a1:36:cb:f0:c0:42:12:97:38:04:48:ad:
99:c6:a2:6d:f9:67:6a:73:81:e6:d1:f0:c7:63:c4:
a0:e9:3f:17:5e:c0:8f:b7:df:9a:8c:37:a7:e0:f9:
c8:7f:65:f0:58:ee:18:48:f9:5f:44:8f:6a:23:1f:
e6:80:83:88:cd:04:d5:9c:d3:28:de:1c:8d:33:04:
69:23:d8:fb:ce:2e:37:4f:fc:64:84:45:a1:6c:fc:
81:9a:3e:54:ce:36:43:52:95:bb:f2:ab:c6:b2:a2:
89:d8:a9:d2:5b:6b:8d:3b:b6:3a:97:63:57:fb:6b:
ef:c6:62:a7:97:84:66:da:c2:be:2e:f4:ac:ff:09:
56:6f:42:d1:28:a9:07:17:56:85:3b:4b:b0:d5:d4:
05:38:0b:83:1f:24:97:05:0d:6f:68:b5:03:56:06:
04:82:aa:8c:52:3d:c7:fc:51:79:3c:7d:54:6d:79:
33:84:0c:a7:2e:40:b9:ed:39:24:bf:9f:ea:44:5f:
27:86:76:43:47:8e:ef:6e:09:71:31:e7:33:05:e6:
a8:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:E6:DF:B6:2D:5D:CC:FF:48:BA:61:F3:8F:45:61:42:6C:45:2E:37
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/uubfti1dzP9IumHzj0VhQmxFLjc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
ac:ca:1d:c2:4d:11:5b:67:98:84:8a:0d:86:5f:2e:7d:71:db:
13:97:f4:16:1a:b9:e5:23:d6:1a:01:ea:f0:8e:e5:0a:9d:38:
89:9d:16:a4:28:d1:23:f5:ef:5e:86:76:1c:73:6a:3f:37:2c:
e6:9e:c6:37:5a:e2:2d:e5:5a:e9:a3:e2:d8:de:ad:17:f1:16:
d1:aa:2c:a0:9e:00:31:2c:55:7e:3f:98:7d:58:33:92:52:0a:
57:01:e5:8f:e2:67:46:7f:7e:a9:b0:11:2d:71:9d:1c:28:ee:
df:a7:7c:a7:a9:75:7b:11:46:c8:1a:35:ca:8e:96:6e:3b:33:
66:49:cf:64:99:13:e4:73:f4:91:6c:05:98:2a:57:79:57:66:
8e:35:80:46:59:b4:8b:20:cc:ae:7c:ca:7d:5e:4b:09:76:01:
47:92:b1:8a:ef:9f:8d:8a:16:67:b9:be:31:a2:cd:18:09:c9:
61:95:b8:e0:5a:13:04:eb:56:90:16:0d:25:87:80:ce:d5:7b:
f9:21:cc:02:07:40:5e:e4:a4:a4:ea:a3:0b:77:50:1a:df:a8:
d1:1d:51:e8:dd:90:f9:57:30:0e:f7:2b:de:47:c5:2a:5c:3e:
a7:50:23:85:f8:ba:59:de:89:e1:c2:a8:dc:15:a8:8a:ec:70:
49:2d:15:ef
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYr7OWgexYsS8+04C3gh9izAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMDA0MTUwNTU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYWU2ZGZiNjJkNWRjY2ZmNDhiYTYxZjM4ZjQ1NjE0MjZjNDUyZTM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoFKF6V+7CFN+MvX3fwBC/hDnOnxQ
N+JUUMeXtkAvvz+HsD0tg9SgyIB4OI4fp7WhNsvwwEISlzgESK2ZxqJt+Wdqc4Hm
0fDHY8Sg6T8XXsCPt9+ajDen4PnIf2XwWO4YSPlfRI9qIx/mgIOIzQTVnNMo3hyN
MwRpI9j7zi43T/xkhEWhbPyBmj5UzjZDUpW78qvGsqKJ2KnSW2uNO7Y6l2NX+2vv
xmKnl4Rm2sK+LvSs/wlWb0LRKKkHF1aFO0uw1dQFOAuDHySXBQ1vaLUDVgYEgqqM
Uj3H/FF5PH1UbXkzhAynLkC57Tkkv5/qRF8nhnZDR47vbglxMeczBeaogQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFLrm37YtXcz/SLph849FYUJsRS43MB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvdXViZnRpMWR6UDlJdW1IemowVmhRbXhGTGpjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAKzKHcJNEVtnmISKDYZf
Ln1x2xOX9BYaueUj1hoB6vCO5QqdOImdFqQo0SP1716Gdhxzaj83LOaexjda4i3l
Wumj4tjerRfxFtGqLKCeADEsVX4/mH1YM5JSClcB5Y/iZ0Z/fqmwES1xnRwo7t+n
fKepdXsRRsgaNcqOlm47M2ZJz2SZE+Rz9JFsBZgqV3lXZo41gEZZtIsgzK58yn1e
Swl2AUeSsYrvn42KFme5vjGizRgJyWGVuOBaEwTrVpAWDSWHgM7Ve/khzAIHQF7k
pKTqowt3UBrfqNEdUejdkPlXMA73K95HxSpcPqdQI4X4ulneieHCqNwVqIrscEkt
Fe8=
-----END CERTIFICATE-----
Generated at Thu Jun 19 12:11:57 2025 by rpki-client