Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/WD8Gc7AOb3G2vQ5b1Xe5PCaDTR0.roa
File: WD8Gc7AOb3G2vQ5b1Xe5PCaDTR0.roa (raw, json)
Hash identifier: ihotJvbSkm7sAOuL8SsBNlpRBajfPt7TD1LvbqvuSMg=
Subject key identifier: 58:3F:06:73:B0:0E:6F:71:B6:BD:0E:5B:D5:77:B9:3C:26:83:4D:1D
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C10B5C8FFECFC754DB78EF04AEDDECC3A
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/WD8Gc7AOb3G2vQ5b1Xe5PCaDTR0.roa
Signing time: Mon 27 Nov 2023 12:16:38 +0000
ROA not before: Mon 27 Nov 2023 12:16:38 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:10:b5:c8:ff:ec:fc:75:4d:b7:8e:f0:4a:ed:de:cc:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 27 12:16:38 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=583f0673b00e6f71b6bd0e5bd577b93c26834d1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:78:7c:6c:a6:81:92:71:ea:be:cc:fe:ca:a2:
fe:ee:66:2c:fc:92:a1:73:7d:bf:1c:45:4c:ab:12:
23:38:31:f7:0e:99:be:32:94:73:27:ce:cf:0b:6c:
90:fb:24:06:65:aa:72:1e:db:3a:7f:ad:59:38:36:
34:69:70:e8:96:aa:0d:b6:d0:50:06:a7:23:82:ab:
05:c0:3f:9d:50:8e:d1:de:66:84:74:f3:fd:3f:d3:
27:98:36:38:3f:eb:d5:ec:61:4c:43:11:02:81:4e:
38:0d:10:8d:5e:e9:09:ee:4e:9d:96:0f:a4:f7:26:
c6:eb:ef:85:8c:5f:42:e0:a0:17:40:0c:e6:27:3b:
fd:dd:e1:b0:03:74:ba:37:55:9e:45:81:10:88:f1:
d3:46:73:0a:59:54:6c:32:c8:28:72:ef:77:2d:9d:
7b:6e:9b:b4:5f:a7:b6:a2:c3:e1:e4:a2:00:60:72:
14:68:2f:6b:2a:13:db:50:bf:a7:2f:bc:cc:65:dd:
fb:c8:44:52:a7:8d:17:cb:f7:4e:8a:84:0e:18:36:
7c:7c:e6:1a:c8:19:4e:db:65:96:9d:ef:3a:8e:10:
04:0c:2e:6b:88:eb:7e:a0:6d:28:93:6e:95:03:3b:
50:ec:33:00:a5:d7:4b:af:bb:b6:7e:e9:08:14:1b:
24:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:3F:06:73:B0:0E:6F:71:B6:BD:0E:5B:D5:77:B9:3C:26:83:4D:1D
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/WD8Gc7AOb3G2vQ5b1Xe5PCaDTR0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4e:cb:90:f0:d2:13:da:72:60:df:0b:0c:96:70:ac:b9:bb:4c:
0d:27:cc:82:05:ed:58:fe:41:8d:b8:1c:ee:71:29:3e:d6:30:
e4:2b:76:c8:b0:1d:0a:f7:11:12:53:bd:25:f1:2a:2a:0c:da:
c1:6c:e7:09:38:b7:0e:5e:5c:65:01:19:9d:5f:30:bc:70:52:
96:7e:98:97:b4:c7:9b:af:ad:fc:c9:2c:55:c7:e4:37:e9:d7:
2a:89:e3:83:a6:9a:36:35:ac:64:88:1d:ce:c9:63:2f:a9:cf:
8b:27:cf:61:94:63:f2:98:35:ea:11:d3:c6:fc:07:7e:89:aa:
b7:6c:49:5e:bf:70:db:f6:d2:32:b6:e6:44:33:4c:6d:d2:1f:
40:ec:d7:6f:51:aa:9c:7b:da:29:83:a8:4c:27:e6:58:d1:d4:
c5:a9:db:96:37:a1:a5:9a:cb:3c:93:80:8f:64:55:b3:5c:86:
6b:b4:1d:f5:fa:08:9a:26:04:7b:da:94:07:37:4e:5e:11:11:
e1:20:33:5c:0a:99:2c:c9:2d:ef:8c:5a:68:f9:76:ca:1e:6f:
37:7e:7c:88:d6:3e:b2:e8:89:79:73:1a:e1:33:b4:ae:3f:8e:
a0:35:8d:15:c5:cf:8c:8c:3a:5d:39:c3:75:7f:22:a5:26:5a:
b5:ea:5b:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 14:40:24 2025 by rpki-client