Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/WYS2WMnt7-P0-o5K_peeU0Z-Pyc.roa
File: WYS2WMnt7-P0-o5K_peeU0Z-Pyc.roa (raw, json)
Hash identifier: gIZRcucE89hGoNA4zubHxMubZhNTnNYLGegYj07T34U=
Subject key identifier: 59:84:B6:58:C9:ED:EF:E3:F4:FA:8E:4A:FE:97:9E:53:46:7E:3F:27
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B205FDEA162CFA95B1CCA8468AFDE7326
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/WYS2WMnt7-P0-o5K_peeU0Z-Pyc.roa
Signing time: Wed 11 Oct 2023 20:13:55 +0000
ROA not before: Wed 11 Oct 2023 20:13:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:20:5f:de:a1:62:cf:a9:5b:1c:ca:84:68:af:de:73:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 11 20:13:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5984b658c9edefe3f4fa8e4afe979e53467e3f27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:21:de:f5:37:9b:6e:3a:39:e8:85:e1:cb:cf:
57:d1:5e:16:ec:32:6c:3b:ec:d8:41:7b:3e:33:5d:
0f:60:9d:5e:a5:b0:de:fb:c3:aa:49:86:47:d1:a8:
26:0a:06:09:5a:f4:49:91:11:33:7b:37:56:1c:22:
38:de:e4:1b:c7:c9:86:00:3f:cf:72:1c:61:16:57:
92:c3:1f:54:cf:82:54:08:6e:e5:31:98:ac:5c:a9:
38:a1:f0:d6:30:51:ef:70:84:3e:5d:a7:b4:9a:0e:
2f:8f:6b:f3:c1:b9:06:ee:ca:0b:b1:4b:c6:86:f9:
36:54:65:14:11:e3:1a:e7:f2:72:8d:5a:08:d3:aa:
1e:d6:bc:c2:e3:cf:ee:d5:15:3d:ea:27:2e:8e:43:
9a:f3:30:7e:75:83:3e:b5:2a:ce:17:16:89:1f:77:
af:e0:55:9f:5e:3e:b3:f3:07:a4:a4:4a:e1:12:64:
c0:eb:02:ba:29:79:98:5e:cf:3c:59:85:a6:bb:58:
b4:c9:39:57:bb:c4:02:68:15:bb:00:47:8e:70:f4:
fe:57:49:08:6e:1f:3f:fc:87:9e:19:7b:e0:a2:60:
4d:76:6a:d7:fb:b3:af:a3:6a:86:87:fd:91:de:6d:
b5:25:6b:7c:15:8a:d1:bb:d2:19:15:7d:9f:32:36:
f7:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:84:B6:58:C9:ED:EF:E3:F4:FA:8E:4A:FE:97:9E:53:46:7E:3F:27
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/WYS2WMnt7-P0-o5K_peeU0Z-Pyc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6b:23:32:16:3b:7b:92:9d:87:0f:b0:54:0a:70:de:8e:6c:fb:
e3:ea:dd:bf:cf:81:bd:37:49:16:77:a2:b7:cd:0b:d2:ff:69:
94:ef:d1:5e:b4:27:49:15:a9:03:bc:b7:63:2c:70:7b:85:f8:
1c:56:7b:af:2c:3b:d8:18:bc:c0:a0:cc:a5:8b:b1:f4:2d:67:
82:1e:a9:2c:a8:bc:f1:6e:98:73:84:3f:ec:71:06:bf:c2:e7:
71:43:4b:15:78:f3:07:e0:ac:5f:6c:0e:7d:75:a7:bd:d8:eb:
2a:13:46:df:3d:ee:39:91:54:fd:5b:d3:81:5b:b1:82:a4:ce:
7f:5c:12:22:5d:81:d7:4c:76:5b:53:1d:f5:eb:d2:4f:5b:da:
d9:05:54:82:bd:62:d3:fe:a0:63:bf:c8:a8:fd:54:c4:df:36:
ab:d6:fe:a1:7e:95:f1:7b:9b:86:48:f8:c1:ad:c9:f5:65:d5:
b5:d8:c2:0c:06:8d:db:8f:fd:d4:db:8a:34:da:85:64:74:e0:
f1:6b:b6:00:1d:0b:12:7f:bb:84:2a:f4:bf:e0:c5:a0:5b:b1:
82:c9:8d:a5:30:ed:53:45:46:6a:0c:65:04:72:68:b9:63:48:
b8:f0:2f:a1:22:70:5f:23:f2:27:ab:8c:92:f4:79:cb:8d:79:
8d:bc:1f:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 00:14:02 2025 by rpki-client