Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/W6QlJV3XQYO905njtX8eIav5lPI.roa
File: W6QlJV3XQYO905njtX8eIav5lPI.roa (raw, json)
Hash identifier: 3nqHXH01XMqS9rrwZVwCpLAZvnIOAVtuu/U6pTcfZLU=
Subject key identifier: 5B:A4:25:25:5D:D7:41:83:BD:D3:99:E3:B5:7F:1E:21:AB:F9:94:F2
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B8D5DCB5E4D420CE5686F7DDB3299BBD3
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/W6QlJV3XQYO905njtX8eIav5lPI.roa
Signing time: Thu 02 Nov 2023 00:10:16 +0000
ROA not before: Thu 02 Nov 2023 00:10:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:8d:5d:cb:5e:4d:42:0c:e5:68:6f:7d:db:32:99:bb:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 2 00:10:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5ba425255dd74183bdd399e3b57f1e21abf994f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:df:5b:0f:8c:cf:e8:39:ac:14:3b:1c:e8:c5:
07:fa:ef:d5:5f:06:4d:bf:6f:18:9c:35:7b:a5:b8:
49:a2:64:1d:1b:3a:74:5a:ef:53:fe:ad:4e:21:c4:
9a:af:3b:b3:b5:04:8b:86:f1:33:92:08:89:ab:b6:
07:09:e2:49:53:52:7a:70:41:86:60:9e:df:72:56:
bb:29:2e:06:ac:ff:5e:e9:67:12:4b:a6:1b:1e:ad:
9b:fd:b9:6d:42:96:34:98:71:49:e8:d0:43:6b:d5:
76:83:a8:79:4f:2c:f7:2d:5b:7f:f0:7c:9d:14:2e:
99:25:1e:39:0f:1d:84:6d:81:51:55:7e:d4:c4:c4:
fd:29:79:b2:11:89:57:0c:59:9f:17:b4:b6:42:0a:
e2:bc:d9:26:90:95:ce:78:ac:fe:08:fa:20:4b:a2:
a1:78:91:0f:62:f3:ee:7f:63:de:fa:f6:55:18:f9:
d0:11:62:52:11:30:43:d8:97:17:22:8f:ff:c6:1a:
1f:e2:db:aa:13:2b:78:4a:36:42:7d:c2:e3:0b:b7:
e0:f5:68:3c:72:ad:20:27:3e:da:25:86:60:42:fd:
e4:a5:f5:20:38:03:6b:09:7d:98:31:ec:10:c1:86:
e6:d3:ad:58:9d:b0:fa:78:97:f8:a3:b2:91:92:43:
de:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:A4:25:25:5D:D7:41:83:BD:D3:99:E3:B5:7F:1E:21:AB:F9:94:F2
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/W6QlJV3XQYO905njtX8eIav5lPI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
14:a5:5b:0f:c8:9a:7e:d2:cb:d6:19:a9:f5:15:b4:6c:dc:12:
f7:63:6b:07:cc:0a:02:5e:e1:28:e9:2f:cd:47:b6:c2:4b:06:
f8:be:46:19:c8:c8:cc:48:a4:24:27:15:29:ad:b1:5d:c6:d4:
aa:39:bf:6c:6c:99:68:9a:62:4d:7f:ba:06:34:21:59:c8:5c:
20:83:97:f8:3f:da:3d:a3:e9:36:9a:8e:90:28:66:06:25:b2:
c2:c5:7c:eb:51:f0:6a:2b:54:9e:27:f7:98:07:98:52:ed:34:
a1:42:93:70:49:a6:66:45:f6:1c:b8:35:bf:0c:16:41:84:ea:
ff:62:02:82:66:73:4f:8c:9e:c7:c6:6b:5f:cb:da:f0:e4:a2:
b3:64:67:aa:b3:48:fe:21:c7:e9:58:cf:2f:1f:ee:f8:96:8c:
c6:b8:ef:f7:08:70:c1:e6:a1:3a:86:55:d3:70:49:ac:d7:fd:
39:c6:8e:f3:01:ba:77:47:97:c0:cd:69:bd:92:c3:7b:04:cf:
3c:cf:5f:67:29:40:32:96:4e:dc:98:0c:c7:43:69:17:56:46:
1a:78:1f:9c:79:cc:48:56:10:7c:c9:39:63:a3:07:13:8e:34:
e3:6d:6e:ef:f4:7d:10:7f:14:88:51:ed:bb:c1:8a:8a:27:f7:
2f:5a:ee:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 02:25:58 2025 by rpki-client