Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/WIswYPSzpwOE6PnS3BVeRxkvnFk.roa
File: WIswYPSzpwOE6PnS3BVeRxkvnFk.roa (raw, json)
Hash identifier: wtt4kYmsRNEAkS1ve18h3vsqjOrXJmpAdkImhCnBm/E=
Subject key identifier: 58:8B:30:60:F4:B3:A7:03:84:E8:F9:D2:DC:15:5E:47:19:2F:9C:59
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C3A1C9A6333510D9E54D0F5395B57C3B9
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/WIswYPSzpwOE6PnS3BVeRxkvnFk.roa
Signing time: Tue 05 Dec 2023 13:13:22 +0000
ROA not before: Tue 05 Dec 2023 13:13:22 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:3a:1c:9a:63:33:51:0d:9e:54:d0:f5:39:5b:57:c3:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 5 13:13:22 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=588b3060f4b3a70384e8f9d2dc155e47192f9c59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:75:dd:2b:f7:61:4e:12:97:13:1a:92:ce:6b:
b0:4e:d2:f7:82:3d:30:c1:84:7a:92:91:44:46:df:
11:8f:ea:6d:e1:f9:11:a8:1a:09:04:8b:53:de:84:
03:2b:17:2d:63:e1:87:e4:ad:0f:f4:84:e5:4f:ae:
79:db:96:12:e0:f8:6e:b1:ec:db:a5:46:77:ae:c5:
24:ac:e8:e5:f4:28:91:c2:50:5b:f8:00:c4:0e:98:
68:89:27:3f:61:bf:1a:4c:49:06:0d:5c:c4:23:ee:
de:1d:13:30:be:bb:9a:3d:85:68:c0:25:85:27:68:
42:91:cf:9c:45:66:7d:02:a9:2c:fc:00:83:f6:81:
5a:71:d9:4b:46:27:7b:64:59:3a:fe:83:41:76:55:
9c:69:36:5d:26:e9:d5:ad:05:08:05:ad:30:b9:ec:
86:f8:d7:09:28:23:e3:f8:88:48:f4:23:5e:f2:25:
eb:76:ea:15:72:d5:a0:75:36:c3:8e:f1:11:60:89:
3e:56:ec:0e:97:db:5a:45:47:72:72:9f:fd:47:8f:
48:36:b9:11:8c:46:e0:f7:68:dd:66:7c:36:4c:e4:
f2:10:5d:52:61:30:da:2e:31:b0:f1:b9:ec:74:1e:
d2:13:2a:15:0f:31:da:bb:03:5b:9d:77:ae:a6:06:
b3:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:8B:30:60:F4:B3:A7:03:84:E8:F9:D2:DC:15:5E:47:19:2F:9C:59
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/WIswYPSzpwOE6PnS3BVeRxkvnFk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6b:25:5a:8b:e5:7a:ef:52:6d:d7:84:df:f5:18:d2:5d:e0:54:
4a:bd:47:75:74:3d:ac:8f:92:cc:4d:b6:49:ca:23:e1:07:37:
6a:90:57:31:c2:2e:88:8b:5d:03:21:03:d7:08:27:12:c4:3c:
c1:2b:e6:bc:e5:6d:6b:74:c3:27:86:1d:98:d0:cf:d9:ba:d5:
ac:cb:11:2c:25:46:8a:f3:9b:7f:6c:de:14:15:7f:55:a2:94:
04:ed:6b:3f:c5:ca:3b:20:f1:8a:16:22:2d:f9:81:07:5c:b5:
e6:84:65:e2:49:fa:3a:9f:f5:61:66:ae:db:32:be:c0:01:75:
07:84:78:5e:1c:a1:78:9b:48:70:72:fd:c1:98:5c:b9:51:eb:
b8:f7:4f:c6:c9:82:29:c7:44:c9:eb:11:e7:3b:9c:ab:49:44:
11:d7:1a:4f:27:5c:cc:47:47:0e:22:9c:03:4a:1f:fa:68:28:
be:00:dd:d1:6e:93:6f:8c:50:02:a1:0e:fb:b3:9e:12:df:fa:
02:89:a2:38:3c:fd:7f:b9:67:ee:4e:f6:79:0a:51:b0:94:8e:
7b:00:97:6e:e2:8f:b2:8a:d1:9c:f3:f5:f6:8e:6b:9f:9e:f4:
df:28:cb:61:ce:08:ee:6b:cc:bd:a8:e9:bd:15:bc:7e:37:86:
b5:04:66:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 22:45:07 2025 by rpki-client