Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/8Wwy_Bb4HDYXesE5xd699Kk8PJQ.roa
File: 8Wwy_Bb4HDYXesE5xd699Kk8PJQ.roa (raw, json)
Hash identifier: iXgyR8dMSARkdRYMJqbQSjZ3Qg0tO7SJSekicp7c46U=
Subject key identifier: F1:6C:32:FC:16:F8:1C:36:17:7A:C1:39:C5:DE:BD:F4:A9:3C:3C:94
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B4090B2395B681EBA4643FDCEA5D9A179
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/8Wwy_Bb4HDYXesE5xd699Kk8PJQ.roa
Signing time: Wed 18 Oct 2023 02:15:06 +0000
ROA not before: Wed 18 Oct 2023 02:15:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:40:90:b2:39:5b:68:1e:ba:46:43:fd:ce:a5:d9:a1:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 18 02:15:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f16c32fc16f81c36177ac139c5debdf4a93c3c94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:f8:5b:e4:98:3a:54:25:eb:d9:7a:a5:e2:bd:
c1:29:f9:2e:89:b6:79:9c:be:4d:7f:d3:4a:6e:98:
b8:5b:fd:14:1e:93:b4:f8:14:ca:7b:b3:81:0f:56:
7a:d5:9a:e3:1d:68:f2:55:b2:c5:22:a9:fb:2a:c2:
71:77:18:ac:3a:e5:8d:e6:b8:aa:f6:0d:e6:01:0d:
5e:ef:57:dc:80:e5:fb:ce:a3:b8:f9:f7:96:8b:41:
9e:74:40:90:c3:3d:f4:dd:47:8c:97:00:a9:b6:a1:
31:ec:79:0b:ec:cf:4e:3d:01:96:64:6a:17:c1:5d:
8e:f7:41:4d:e8:e0:fc:34:4d:ee:b6:d0:f0:66:29:
b6:f4:0b:2a:d7:aa:b5:41:88:e6:c6:0a:1e:06:47:
df:1f:18:6b:e8:5e:d6:9f:b0:9d:bb:fe:d7:e8:20:
b6:d3:3f:a2:86:d4:21:de:1b:74:88:2f:2d:3c:67:
cd:68:54:45:43:04:b1:16:8e:79:fe:3b:09:ac:76:
69:2b:e2:fb:3f:44:2e:da:a4:a3:7e:d6:c3:2c:9c:
61:21:10:0d:1f:14:cf:0a:ff:59:5c:9e:42:ca:85:
45:cf:89:19:fd:5a:5e:60:18:1b:40:81:15:7d:59:
0c:9a:74:8a:33:7c:de:53:01:d8:f2:e4:f8:33:ba:
4e:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:6C:32:FC:16:F8:1C:36:17:7A:C1:39:C5:DE:BD:F4:A9:3C:3C:94
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/8Wwy_Bb4HDYXesE5xd699Kk8PJQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3d:1a:71:92:08:27:d2:0d:ad:e7:8c:df:76:63:6a:39:33:5a:
fe:ff:21:70:88:2d:18:00:69:10:9c:c6:78:4c:2e:c8:a6:21:
0d:c0:a8:79:a3:06:8a:43:16:35:9e:7f:f3:b2:71:50:a6:8d:
b5:71:90:07:9c:4c:01:e9:f9:c5:3d:43:73:d8:cb:15:5e:dc:
26:d4:b2:a3:76:09:83:0a:2d:9b:31:53:3b:43:4e:b2:4b:91:
f5:da:f7:d9:93:51:fa:47:c7:3c:ba:60:5e:84:d7:f4:63:d5:
1c:2d:cd:ea:81:db:88:60:42:e3:13:5a:4f:38:01:78:3d:e9:
33:f0:d9:b3:dc:ee:be:f4:6a:c1:1b:f8:1f:00:a1:b8:42:ea:
e8:33:fe:66:e9:09:04:6a:cb:c4:42:f6:96:36:6b:a9:7f:82:
3f:21:52:4b:31:26:92:34:59:4a:83:5b:d2:3d:d2:e3:c2:cf:
2a:fe:74:e9:df:ab:2f:7a:33:a2:ab:47:77:5b:ca:8a:fd:d6:
4e:2f:2b:9f:74:de:d7:b4:4c:0b:2b:86:36:cd:d3:09:90:1c:
b3:4d:6a:38:8e:d5:53:52:d7:f5:f0:31:4f:9a:96:60:24:69:
90:92:a1:a9:ef:51:8a:4d:a7:53:4f:16:d0:6e:f0:4f:69:94:
3d:38:e3:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:35:57 2025 by rpki-client