Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/W4dp_GT5GrUF-jsQLMWsBsj9vuc.roa
File: W4dp_GT5GrUF-jsQLMWsBsj9vuc.roa (raw, json)
Hash identifier: Up+qPzAlcmc5FJqnWTzqrwEAJ6pd/iSXCUcvX1quqlU=
Subject key identifier: 5B:87:69:FC:64:F9:1A:B5:05:FA:3B:10:2C:C5:AC:06:C8:FD:BE:E7
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AED4E33F2533DC447B25A1338070756C0
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/W4dp_GT5GrUF-jsQLMWsBsj9vuc.roa
Signing time: Sun 01 Oct 2023 22:13:59 +0000
ROA not before: Sun 01 Oct 2023 22:13:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:ed:4e:33:f2:53:3d:c4:47:b2:5a:13:38:07:07:56:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 1 22:13:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5b8769fc64f91ab505fa3b102cc5ac06c8fdbee7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:5d:7d:b6:60:72:ee:fa:ab:22:47:f0:bb:98:
17:9c:7a:dd:3c:6e:ed:2c:6a:53:e2:bf:ef:1e:24:
bf:99:cb:0d:cb:ab:be:57:2d:50:e4:63:b9:db:04:
c0:29:01:d3:a3:67:ce:35:61:3e:c1:9a:1e:c4:11:
89:da:dc:18:9f:f3:ec:12:23:93:75:5c:82:75:1a:
38:89:4d:1e:fb:dc:bd:ed:c7:cb:6e:a2:7c:8b:31:
ca:23:14:2d:cf:4e:5e:c6:ad:b7:ca:b3:17:bf:44:
b2:69:3f:99:e4:f4:36:9f:e7:86:12:9d:09:0a:82:
75:f6:59:23:aa:c0:b9:78:95:55:8d:d6:d0:73:b0:
a8:22:4a:33:43:7d:fb:e4:18:b0:34:f5:88:51:93:
cc:fe:4f:42:63:c0:57:04:23:53:17:1e:d6:2b:d8:
a3:9a:dd:f7:d7:2e:54:a6:37:1d:8a:2f:76:9e:c5:
c7:d4:0d:13:ae:2d:da:66:42:cf:b8:63:3a:ff:47:
41:bd:22:21:37:0b:63:29:88:95:91:b5:c6:24:f4:
17:4e:6a:b2:7c:b6:fa:b7:1c:5f:4e:9b:0c:96:b4:
9f:85:78:13:cc:28:66:f2:75:13:5c:a6:7a:2c:20:
a9:99:06:ec:3b:b8:7a:27:7e:a7:e4:ae:ee:87:cd:
26:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:87:69:FC:64:F9:1A:B5:05:FA:3B:10:2C:C5:AC:06:C8:FD:BE:E7
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/W4dp_GT5GrUF-jsQLMWsBsj9vuc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
46:c9:cd:29:cd:25:e4:fe:fd:66:9a:48:6c:90:6e:4a:11:b7:
d0:8a:f4:a6:0e:44:f7:d4:ce:2d:f2:03:48:9b:66:6c:14:92:
a6:45:c7:04:7f:2e:01:d2:dd:34:7c:f0:12:5e:2f:9e:4b:be:
32:45:12:aa:06:41:9f:09:06:31:b4:bd:3c:9d:57:1e:b4:88:
52:cd:86:cc:8f:f7:18:5d:f4:f7:a3:e0:ff:3f:f2:0f:49:58:
90:f3:2d:f2:62:14:e2:54:17:2b:c9:2f:40:07:55:70:84:e7:
23:0c:23:64:0b:06:a8:f8:a5:bd:e2:55:87:9e:9a:3c:93:3f:
0d:79:52:45:9f:3d:87:12:b4:95:69:4c:3f:9c:b7:42:73:eb:
ff:a4:9f:72:2f:23:4c:01:74:e9:4f:03:c3:6e:64:54:e7:20:
91:2b:ba:1a:07:90:37:92:e5:0a:44:68:20:66:bf:dd:44:d7:
64:51:4b:c3:d3:7a:c8:89:27:2e:6e:4e:86:92:b4:49:09:70:
4a:4d:b2:20:94:a9:5a:4c:51:85:50:65:d4:7d:3b:21:89:cb:
6e:02:56:16:f6:f3:86:73:95:41:34:27:c3:9e:6b:bd:7b:66:
c3:86:c9:ba:ce:b5:1d:b1:7e:97:50:f7:46:61:35:1e:6e:90:
ba:90:0e:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 00:00:20 2025 by rpki-client