Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/1wcJtBg3xf22oLM364_UM8qJu3s.roa
File: 1wcJtBg3xf22oLM364_UM8qJu3s.roa (raw, json)
Hash identifier: NvXbWZ1Xc/AhAw888dc8lGVLSWQ80+4yURBFseEo1Sg=
Subject key identifier: D7:07:09:B4:18:37:C5:FD:B6:A0:B3:37:EB:8F:D4:33:CA:89:BB:7B
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B6F4EC83D55F9CC4960886BFEEC8E61F3
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/1wcJtBg3xf22oLM364_UM8qJu3s.roa
Signing time: Fri 27 Oct 2023 04:05:15 +0000
ROA not before: Fri 27 Oct 2023 04:05:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:6f4e:3d8a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:6f:4e:c8:3d:55:f9:cc:49:60:88:6b:fe:ec:8e:61:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 27 04:05:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d70709b41837c5fdb6a0b337eb8fd433ca89bb7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b2:5d:77:f9:0d:cf:6d:f2:98:3e:fa:20:ff:
d9:e8:ba:a2:fb:14:59:9b:bc:50:d0:8f:0d:b5:73:
e1:9d:6d:cb:fd:8e:9f:15:24:55:11:75:fb:fd:d7:
29:e0:7e:34:7f:28:9b:85:ed:de:ab:20:a5:1b:d0:
fb:e7:18:f4:db:16:a5:91:43:90:ed:9f:5d:5c:d2:
94:76:c9:e2:10:c5:2b:e8:45:e8:9f:02:37:2d:3c:
9f:ed:bc:ae:ef:14:70:0e:29:33:40:87:f7:e0:4d:
d5:07:1d:65:a5:cb:d2:5e:bb:29:f0:03:4d:d4:88:
3c:75:2c:e2:a5:d6:df:e9:50:39:59:d1:88:a4:dc:
0a:ef:86:7a:34:16:e7:24:1d:a5:83:12:fe:2c:54:
e0:a7:76:09:11:b2:f6:3d:c1:b0:db:ce:52:6e:54:
e7:42:4a:3a:04:71:07:f0:82:00:44:55:ba:25:12:
ec:53:f7:8c:f5:09:d2:81:98:30:2f:8b:c7:8f:a5:
41:24:86:ba:11:c3:47:b6:7d:8c:09:1f:53:46:06:
0c:11:57:5f:a7:69:a1:2a:b3:f7:fa:e2:c1:34:d5:
74:12:16:0e:4d:22:e8:5f:df:fb:df:54:0a:7c:02:
51:19:d1:77:1b:19:2d:02:97:48:00:69:95:59:c7:
6d:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:07:09:B4:18:37:C5:FD:B6:A0:B3:37:EB:8F:D4:33:CA:89:BB:7B
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/1wcJtBg3xf22oLM364_UM8qJu3s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
39:11:a1:be:28:b1:83:92:19:22:34:1b:ed:73:ca:1a:3f:d2:
60:37:d4:ac:06:59:ef:d1:a9:64:ee:4b:53:c5:63:09:20:c9:
59:fa:02:25:12:2c:19:4f:7d:33:6d:28:c6:ee:f3:d4:90:0b:
da:17:45:bb:1e:45:a6:17:2a:d8:8f:86:a6:09:0c:81:55:c5:
a5:fe:35:44:5e:7f:42:2d:2f:cf:2a:48:4e:fe:db:2e:9c:30:
ba:3b:b9:ea:e6:86:4a:a0:b7:1e:fa:1a:5a:cb:bc:45:e7:85:
2f:c9:a6:a6:ed:0e:77:b6:88:c8:25:eb:ce:d9:90:50:dc:a8:
2f:e0:83:a0:b6:2d:9c:a8:ac:71:4e:73:f4:3c:b6:3b:6f:6e:
69:89:50:f2:bb:54:e3:0a:e9:66:9c:c3:ef:90:a5:93:4a:70:
71:6d:f5:87:97:a4:e9:e5:79:ff:ca:bf:5b:cb:b5:93:dd:d4:
b6:aa:fe:23:3d:14:85:49:87:a7:9b:8a:e0:f0:36:2d:7a:c3:
e9:82:d1:03:f2:97:d3:b6:0c:f0:e7:a3:7e:5c:50:99:18:ff:
f9:bf:a1:26:e3:b4:37:51:15:0f:94:51:72:3d:20:60:12:8a:
5d:18:f6:02:e4:13:d8:a9:2e:ec:18:4d:32:dc:6c:1e:17:4e:
a0:54:84:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:24:54 2025 by rpki-client