Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/1ww-R9GVU2ESKLfqcsmk-YzrHTU.roa
File: 1ww-R9GVU2ESKLfqcsmk-YzrHTU.roa (raw, json)
Hash identifier: yrVeDlJ5XHXh9n8hHIxpHIhzdupO8SFDK045GOigUcs=
Subject key identifier: D7:0C:3E:47:D1:95:53:61:12:28:B7:EA:72:C9:A4:F9:8C:EB:1D:35
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B2104AA02D333B370CD0F1B9BEDB7A851
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/1ww-R9GVU2ESKLfqcsmk-YzrHTU.roa
Signing time: Wed 11 Oct 2023 23:13:55 +0000
ROA not before: Wed 11 Oct 2023 23:13:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:21:04:aa:02:d3:33:b3:70:cd:0f:1b:9b:ed:b7:a8:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 11 23:13:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d70c3e47d19553611228b7ea72c9a4f98ceb1d35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:a2:98:10:8f:c4:2b:cb:93:17:15:6b:43:91:
10:ff:73:df:9e:26:10:4e:3a:74:f2:81:0c:e8:ab:
f4:bf:4e:f2:7c:bf:a9:e9:07:ef:d4:04:3b:f1:d6:
1e:a4:3a:9b:95:59:54:ea:09:79:2a:29:9a:5e:9e:
51:c3:26:12:35:a3:d1:79:87:ff:d7:b6:7b:d6:d0:
23:f9:5d:76:30:68:f2:38:86:2a:47:3d:5c:37:f9:
43:bd:57:17:e1:4f:cf:5b:3e:d2:ee:1b:04:b8:d1:
57:96:29:e3:19:05:f7:cd:89:09:32:4f:e2:09:8a:
6e:c8:de:bb:6c:fe:9e:b3:a2:be:ec:75:0e:0c:ef:
17:32:47:00:0e:e4:5f:aa:42:c9:26:5f:09:84:78:
f9:8d:a5:bd:14:e0:04:9b:d3:3a:b9:89:07:00:53:
b3:27:dd:3f:6c:12:03:a5:6d:1a:df:3a:a7:ed:f6:
a1:85:f1:f9:e8:96:e0:1f:81:30:b8:c9:18:ca:c7:
2f:19:fe:7c:dd:15:7b:77:ce:13:91:9d:30:55:2f:
aa:2d:66:42:a8:9d:f6:9e:8d:9b:fb:a7:e1:e9:95:
f7:87:6f:63:f1:78:a8:5e:20:b8:ab:1d:ab:74:aa:
ac:c0:62:48:27:1e:06:78:c4:4a:33:6d:d2:38:be:
65:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:0C:3E:47:D1:95:53:61:12:28:B7:EA:72:C9:A4:F9:8C:EB:1D:35
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/1ww-R9GVU2ESKLfqcsmk-YzrHTU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
71:2a:16:9a:76:88:36:ac:6e:aa:ce:03:12:fa:1e:0b:29:21:
a8:86:0d:39:0f:7b:cf:d9:06:00:9a:1b:78:00:8b:72:cd:31:
0e:61:32:1a:5e:06:34:8a:fe:61:34:bc:57:14:83:6e:6b:0a:
dc:73:3c:22:e0:35:4a:db:16:2d:4b:c7:db:ba:a1:e7:ca:8f:
b5:5e:79:73:a8:30:71:9d:40:4f:5d:1a:87:23:c1:62:cf:69:
04:83:ad:27:82:3b:9b:b1:1c:d9:0f:f9:ae:55:22:a2:31:cc:
fb:51:db:6b:d9:4e:73:cd:3e:f6:64:04:b5:79:78:88:5c:69:
7f:b2:66:47:d2:15:8c:ee:a6:f8:89:21:4b:7f:44:b4:6e:f9:
0b:fa:0a:b2:f7:9b:38:73:0b:76:98:e3:25:da:95:49:59:55:
8d:0e:21:3d:2f:b0:3c:a7:26:50:ac:a6:d5:3f:e1:d0:9a:30:
1a:89:b4:0e:32:e9:80:03:bf:40:0d:ad:64:08:70:07:34:99:
0f:a4:3b:3a:ca:16:30:45:c8:e2:b9:e6:23:81:3f:c6:41:8d:
57:b6:ba:ac:e1:f6:e5:9f:1a:41:15:fb:b4:51:a7:6f:11:ea:
08:78:ff:db:8c:06:65:8b:be:db:38:f6:02:7e:7f:2b:c5:5d:
d6:6d:03:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 21:15:30 2025 by rpki-client