Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/bw618_QOW91L7DjCQcpG_fqZA1s.roa
File: bw618_QOW91L7DjCQcpG_fqZA1s.roa (raw, json)
Hash identifier: E54vC1denvyeKJEDewBDyU2MsBZZpjzhPgV9Ys26dSM=
Subject key identifier: 6F:0E:B5:F3:F4:0E:5B:DD:4B:EC:38:C2:41:CA:46:FD:FA:99:03:5B
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B921733AE69436F0E24C2FF46ED336D04
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/bw618_QOW91L7DjCQcpG_fqZA1s.roa
Signing time: Thu 02 Nov 2023 22:11:15 +0000
ROA not before: Thu 02 Nov 2023 22:11:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:92:17:33:ae:69:43:6f:0e:24:c2:ff:46:ed:33:6d:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 2 22:11:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6f0eb5f3f40e5bdd4bec38c241ca46fdfa99035b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:91:3c:d9:2d:0c:fe:31:04:70:8b:0a:69:c5:
75:c8:ef:32:ad:5c:b4:7b:da:c2:03:4d:ec:19:5a:
92:a6:1b:12:ec:11:d2:8a:cd:bf:ce:0c:ae:ac:6a:
93:a0:49:c9:30:ad:35:a1:7d:77:84:e8:b1:43:2b:
cb:ac:79:42:53:57:96:2d:72:50:ee:2e:c3:54:0e:
28:1a:9d:25:3f:1b:fe:63:81:be:87:c9:58:53:71:
2e:e9:55:fc:10:7b:b8:28:b4:ea:f3:bd:eb:00:fa:
c8:bd:76:5e:b4:ef:03:3e:4a:92:ee:c1:fe:b8:5a:
0b:cd:c4:03:f6:e7:1d:39:ce:75:e4:12:4e:d6:d2:
74:78:12:ea:98:ed:79:70:23:32:10:ae:a4:75:f5:
75:2f:e3:7a:9b:17:48:c9:88:c4:1d:9d:25:65:18:
f9:aa:e6:e1:d5:e7:11:30:3b:a4:44:e2:71:25:a5:
48:4d:c4:3d:d5:fc:5a:96:8b:fc:32:26:9c:d1:cc:
af:8d:bb:c6:f7:73:3e:9d:87:b0:db:ee:e3:96:35:
fa:9b:22:f7:fd:c3:9e:92:76:c8:c6:f8:92:0d:22:
d1:1d:1f:ea:ba:02:ab:90:05:b8:0b:66:c9:58:50:
0d:80:ba:0b:05:9d:3d:85:87:49:37:39:1d:7a:3a:
9a:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:0E:B5:F3:F4:0E:5B:DD:4B:EC:38:C2:41:CA:46:FD:FA:99:03:5B
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/bw618_QOW91L7DjCQcpG_fqZA1s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
59:98:80:7b:3f:8a:d9:22:cf:c8:43:50:29:4c:37:47:4c:c8:
a6:72:69:78:7b:26:b1:8a:b3:3d:53:18:34:7e:46:f8:fe:02:
0d:f4:1e:03:a1:c5:7f:91:38:24:b2:95:36:d0:ae:ba:93:8c:
48:60:40:c6:9b:32:29:b8:31:a1:3c:d6:07:02:25:a5:6d:95:
46:81:a9:91:15:78:27:6b:0d:d5:b6:46:2b:5e:ec:46:84:5c:
d5:9f:9b:a6:ae:dc:34:e1:29:55:5b:71:83:cd:da:c5:ae:a5:
fd:3b:23:62:a5:71:3d:74:1e:8b:a2:0b:9f:65:db:b0:80:8c:
c5:b8:88:fc:50:b6:f6:d4:ea:0b:b6:21:8d:2f:33:3b:35:7f:
41:8a:75:b5:68:fc:67:aa:50:25:64:71:00:74:66:6b:26:05:
b1:c8:2d:9f:2d:3e:aa:6b:d9:2b:b7:ec:87:41:93:1b:a3:15:
d7:a9:b3:d7:08:03:0d:3d:0d:86:18:0c:48:97:de:7d:9f:04:
ab:20:4b:10:bf:eb:9b:c1:af:f5:39:19:73:ba:a6:50:87:4b:
f9:b2:0c:ba:cf:a9:21:8f:c8:20:e2:01:e3:ba:57:11:30:ab:
54:47:07:e3:5e:2e:b5:d0:1f:68:a3:65:84:77:ee:f8:fa:ac:
11:bb:89:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 07:16:26 2025 by rpki-client