Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/W_Pf_biUTg_dEszSEpqL0zpv0ZY.roa
File: W_Pf_biUTg_dEszSEpqL0zpv0ZY.roa (raw, json)
Hash identifier: jfKO5BTDJXjK4O1rSRNJExaySTR6YgMIHEXxlaNcueo=
Subject key identifier: 5B:F3:DF:FD:B8:94:4E:0F:DD:12:CC:D2:12:9A:8B:D3:3A:6F:D1:96
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C7C61FEC6A42D108F4AE7E6435B32115B
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/W_Pf_biUTg_dEszSEpqL0zpv0ZY.roa
Signing time: Mon 18 Dec 2023 10:04:06 +0000
ROA not before: Mon 18 Dec 2023 10:04:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18c:7c61:f9f2/128 maxlen: 128
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:7c:61:fe:c6:a4:2d:10:8f:4a:e7:e6:43:5b:32:11:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 18 10:04:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5bf3dffdb8944e0fdd12ccd2129a8bd33a6fd196
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:41:99:69:47:65:e1:a2:66:64:c3:cb:68:3e:
db:a3:c3:cc:21:09:58:d6:90:df:dd:96:b1:98:b7:
2f:80:31:f8:66:44:ad:4e:16:68:ad:49:d2:e0:c2:
45:38:51:5f:41:4b:c6:2e:e9:a0:ed:bd:a5:36:74:
ff:04:3a:f7:43:f9:a4:64:c2:59:f9:67:51:bc:45:
76:aa:80:04:01:1f:fa:58:1e:ba:71:36:02:1c:99:
89:68:69:33:9a:1b:4c:49:12:9d:0a:d3:34:6b:5d:
54:57:f2:ab:c9:6a:aa:fa:79:91:24:15:1a:07:a1:
61:06:9b:fe:9e:59:8e:5f:68:aa:3e:8a:c4:e9:7d:
c7:a7:67:9e:bb:06:e4:e3:94:7c:dd:ea:60:ea:8b:
fe:d9:df:ba:bb:0c:2b:5b:59:f2:3b:a1:c7:fd:e7:
01:6c:bb:68:57:ce:6a:5d:82:b1:5e:b9:f7:17:e1:
05:f2:3f:43:1d:64:a2:77:fd:f4:20:5c:45:71:97:
ce:45:2b:17:ba:2b:a5:9a:6e:bc:81:18:1b:08:57:
5f:c0:50:31:33:57:5b:f3:05:f2:32:f7:43:b4:60:
19:84:2b:ed:52:51:f0:cd:43:62:71:f2:54:8b:da:
93:8c:6b:83:63:e9:61:0e:6f:4b:a3:83:26:0a:f2:
a1:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:F3:DF:FD:B8:94:4E:0F:DD:12:CC:D2:12:9A:8B:D3:3A:6F:D1:96
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/W_Pf_biUTg_dEszSEpqL0zpv0ZY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
61:ce:f4:7c:ce:6e:b0:32:a1:a9:15:7f:38:95:d7:1b:c9:62:
71:b4:2a:0a:20:2a:a7:f3:c8:fa:87:85:eb:24:bb:16:42:c4:
80:89:11:e6:05:61:2b:1d:d6:d9:d6:ea:eb:8a:86:45:aa:9d:
d1:69:2c:b3:7b:e9:2a:92:3a:5e:57:a2:ee:37:85:d8:38:71:
bf:f7:e8:b2:62:96:ce:d4:40:3d:67:e0:2b:6f:ca:06:bc:8e:
91:93:e4:dc:03:cb:31:c1:5e:6e:22:08:90:e8:cf:a5:78:b9:
47:0e:af:dd:55:0c:1f:2a:ee:69:e4:e4:4d:86:af:98:d2:e9:
b6:d9:c2:e1:fe:0d:83:32:15:bb:0b:8c:87:bd:1c:b6:2a:c6:
56:3f:f3:0b:0e:25:da:22:d6:a2:97:e4:af:d7:35:36:6e:7d:
69:94:96:05:42:6c:a1:e1:4c:13:f3:51:11:f5:4a:0f:1a:1b:
e3:7a:a2:8c:18:c6:98:f7:90:8a:39:2d:33:31:b3:2f:da:52:
80:68:cb:74:66:d3:c8:1c:bc:69:b8:43:39:9f:8f:46:8e:15:
8c:3a:e6:0d:ff:bf:6e:b2:5d:a2:fd:87:bb:ef:de:6a:51:19:
46:03:4c:13:64:c9:74:95:05:45:b6:de:bb:38:07:03:ee:b3:
45:0b:3a:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:58:06 2025 by rpki-client