Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/WgvvLtkinUqkQKKcz2UC5D_L98o.roa
File: WgvvLtkinUqkQKKcz2UC5D_L98o.roa (raw, json)
Hash identifier: PKwT3MghCmZtbHkDmOiL8FnsgQo0o94BP7S76h25iZ0=
Subject key identifier: 5A:0B:EF:2E:D9:22:9D:4A:A4:40:A2:9C:CF:65:02:E4:3F:CB:F7:CA
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BC484C64F901D0E6A4351E08F4C41FF58
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/WgvvLtkinUqkQKKcz2UC5D_L98o.roa
Signing time: Sun 12 Nov 2023 17:11:57 +0000
ROA not before: Sun 12 Nov 2023 17:11:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:c4:84:c6:4f:90:1d:0e:6a:43:51:e0:8f:4c:41:ff:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 12 17:11:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5a0bef2ed9229d4aa440a29ccf6502e43fcbf7ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:2d:66:15:9c:5f:e0:84:f2:af:ba:19:2f:87:
2c:36:45:f6:0f:44:0b:5d:4a:76:ce:55:d9:d6:ec:
df:d1:4c:45:b9:d8:68:13:a6:65:c6:02:25:5d:9b:
36:cd:d3:4d:12:9c:90:06:da:33:1f:8d:e5:9e:b9:
6b:97:f8:5d:a9:4f:76:1e:2a:2e:7a:0b:d2:60:3c:
09:9d:9e:36:28:7c:ce:66:3f:4c:2d:c4:76:26:16:
61:b0:76:0a:2d:c4:56:54:1c:5e:52:b2:cd:db:81:
34:2b:34:74:32:89:76:9e:82:bb:d7:f5:de:6f:ca:
4a:68:46:ea:dc:49:fe:b3:1c:d8:fe:45:35:6f:ff:
fb:8e:e4:da:ff:57:ba:72:f0:a8:b1:59:ce:69:4f:
86:5a:e8:7b:9c:db:b4:74:69:4f:71:57:26:47:3b:
2f:27:0a:cc:94:d7:fc:ec:07:81:69:3d:97:41:b6:
9c:6f:ee:82:ed:93:2e:93:75:65:b8:53:d2:60:07:
1f:d8:b8:62:c4:7c:4e:8d:26:69:13:8d:cb:99:72:
9d:4b:38:e4:5f:55:bc:73:bf:77:ab:85:9b:c3:aa:
b3:90:de:a8:5e:50:21:49:bf:ad:be:d2:de:83:ef:
2a:d2:76:47:f5:87:78:f7:a8:74:28:d2:51:d4:af:
b2:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:0B:EF:2E:D9:22:9D:4A:A4:40:A2:9C:CF:65:02:E4:3F:CB:F7:CA
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/WgvvLtkinUqkQKKcz2UC5D_L98o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5a:ce:5d:29:90:f5:04:5c:62:77:4f:86:7d:09:1e:8c:7c:0f:
26:9b:27:63:8a:f8:f7:e9:fa:73:c3:50:35:f3:8e:6f:f6:f7:
89:67:eb:01:fd:ba:bc:07:55:ac:a2:cd:c6:b6:f4:97:84:ce:
fb:e7:0c:f0:f8:03:90:f4:d3:1f:b0:c6:69:50:bc:52:42:a8:
22:3b:93:f8:1f:ec:41:1f:d4:b2:30:ee:ee:2c:35:ff:01:52:
fe:d9:12:76:29:47:9c:c0:a0:4a:7e:c9:18:38:d6:e4:5f:2c:
38:79:04:b3:e8:14:b4:6d:37:8c:7d:a0:06:64:8e:65:8e:66:
c0:6d:ad:14:7d:27:e5:95:89:c5:d5:8a:31:a8:c5:35:50:15:
d1:f6:66:74:19:6b:a4:89:42:08:6b:7c:dd:97:32:08:9a:06:
77:03:3a:94:db:7d:6f:4c:11:07:da:6f:92:76:07:0e:5c:9a:
24:56:26:3e:96:05:68:81:87:5e:70:76:88:34:45:62:50:f0:
cc:b3:ba:2c:56:ae:84:cf:eb:b6:c2:b5:0b:32:83:fe:f4:fb:
c8:14:6c:c8:f3:cc:6f:27:7d:c2:d5:7a:8f:21:95:5f:c3:38:
3e:19:55:ec:f9:b0:31:cc:33:82:4c:21:96:fa:8b:e2:4e:b1:
da:f8:5a:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 15:00:10 2025 by rpki-client