Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/WgZgikKt4gGXMz3HM1o4wYcBxX4.roa
File: WgZgikKt4gGXMz3HM1o4wYcBxX4.roa (raw, json)
Hash identifier: 2mTW9/f2HBYaNriQfRQWdUQFaEZu0uoLC37S7TP/CcE=
Subject key identifier: 5A:06:60:8A:42:AD:E2:01:97:33:3D:C7:33:5A:38:C1:87:01:C5:7E
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B47D338D90A5394003545890B0B1B00BE
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/WgZgikKt4gGXMz3HM1o4wYcBxX4.roa
Signing time: Thu 19 Oct 2023 12:05:06 +0000
ROA not before: Thu 19 Oct 2023 12:05:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:47d2:9c7c/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:47:d3:38:d9:0a:53:94:00:35:45:89:0b:0b:1b:00:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 19 12:05:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5a06608a42ade20197333dc7335a38c18701c57e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:91:a2:be:65:2f:6e:ef:29:bf:09:7d:f1:4f:
30:95:49:38:d5:9a:e6:2e:3b:75:a6:5b:6f:d1:2b:
db:aa:a0:cd:40:5d:6a:65:46:a3:23:0d:fc:eb:26:
40:1c:72:1b:6b:1e:d6:a2:24:31:83:be:f5:34:84:
51:93:28:2b:3f:81:e7:31:d5:01:5f:80:eb:bf:7a:
9d:67:d9:43:86:e3:ed:3e:3f:5b:8f:0e:91:35:31:
e7:c8:0c:5a:e0:81:e8:4e:3a:3a:96:4e:b5:75:e5:
ce:ca:6f:62:d4:fe:8a:c9:ae:27:f8:8a:f5:7c:52:
68:8e:4d:15:3d:5a:1f:ff:35:8d:e3:85:b7:ae:43:
d0:70:34:21:09:89:d7:a6:25:76:95:8f:e1:3f:3c:
e5:4e:8f:8e:88:43:64:9d:88:6f:22:22:8a:c9:b2:
f3:e8:e3:e0:13:40:fa:ad:a0:48:1b:fd:26:82:fa:
d8:82:05:27:db:80:50:4c:1f:46:68:fb:f0:0c:11:
ae:1d:d0:75:4c:ca:87:45:14:ad:fe:e7:af:a3:ab:
64:91:e8:b3:bc:80:fe:86:19:fc:40:21:76:01:27:
3d:e4:b0:49:e4:6e:c3:41:45:6c:6c:90:38:38:f1:
08:3b:f6:b5:54:6f:44:36:55:1a:f9:fd:b1:3b:9a:
f4:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:06:60:8A:42:AD:E2:01:97:33:3D:C7:33:5A:38:C1:87:01:C5:7E
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/WgZgikKt4gGXMz3HM1o4wYcBxX4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
84:73:dc:dc:6d:78:a2:e8:ac:75:96:18:92:e8:79:12:72:34:
39:90:44:ba:4d:3e:9c:b8:24:e3:6f:4b:6c:16:6d:f0:c7:01:
ea:37:b4:73:69:85:b5:41:51:e1:be:c6:01:85:7f:a3:ce:6a:
6a:6d:05:8e:97:d9:c6:6f:29:c2:8d:39:e4:78:5d:a8:6c:87:
d0:d6:1f:7f:18:55:8f:4c:6a:fe:b5:30:41:93:9e:39:a4:c2:
b2:32:1d:08:cd:83:29:30:85:39:51:cb:47:31:d1:79:ab:fd:
9a:3d:dc:41:e9:1f:dd:ad:26:51:26:00:8b:d4:e9:f6:2e:e8:
c6:80:c6:c5:94:4a:6a:8f:04:0f:06:91:38:08:8b:28:2e:6d:
59:88:83:ac:72:21:3d:58:fd:06:52:7f:15:f5:5b:ba:64:63:
b5:31:61:04:a6:99:0d:cf:ba:8a:48:f4:98:28:07:16:e9:8f:
30:a1:0e:3d:ea:ba:10:00:dd:47:09:29:b8:71:b4:ea:2f:7c:
fb:a8:19:83:8b:9d:67:87:a2:cc:f4:bd:cc:b9:31:26:43:12:
db:63:9d:f2:4d:8a:ea:bd:b6:eb:f9:05:d5:f9:39:76:ee:87:
70:73:0e:07:a7:90:0a:46:a1:0e:49:58:fa:58:78:72:4d:22:
5c:a5:c7:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 06:05:36 2025 by rpki-client