Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/n-WUsq79mFz4jF4a6uE4GP2TxB8.roa
File: n-WUsq79mFz4jF4a6uE4GP2TxB8.roa (raw, json)
Hash identifier: bYO/EMRpnQJxPn+PC2TmYZYRFFPDqFfBC1C2PdUg4Qo=
Subject key identifier: 9F:E5:94:B2:AE:FD:98:5C:F8:8C:5E:1A:EA:E1:38:18:FD:93:C4:1F
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B7D7DC356D30A248862473F19479F040F
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/n-WUsq79mFz4jF4a6uE4GP2TxB8.roa
Signing time: Sun 29 Oct 2023 22:11:15 +0000
ROA not before: Sun 29 Oct 2023 22:11:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:7d:7d:c3:56:d3:0a:24:88:62:47:3f:19:47:9f:04:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 29 22:11:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9fe594b2aefd985cf88c5e1aeae13818fd93c41f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:3d:5b:2c:a1:01:73:d0:d2:c7:5d:16:08:c0:
90:9c:3c:dd:f8:b5:b5:cd:10:cf:35:22:35:ea:01:
a1:0c:35:30:97:ca:d5:9d:09:19:45:26:5d:5d:b2:
7f:13:d4:a3:87:ed:da:b7:c6:82:fe:1a:99:51:40:
55:1f:bd:2c:9c:83:49:5a:ef:49:fa:14:a1:20:97:
81:b3:36:e9:87:0b:07:f3:df:72:6f:5b:93:2c:53:
84:d8:a3:01:04:18:c5:93:71:4f:1f:32:8f:2a:94:
57:9a:0d:f4:96:89:e5:b9:70:8b:ea:ba:56:91:17:
40:35:be:83:de:fc:63:cc:70:46:b9:49:c4:10:6b:
7b:9e:ee:e2:ae:33:30:3c:5b:42:35:20:90:59:d9:
95:a4:83:14:3f:f7:a5:fc:34:9e:d8:a9:e2:d1:8c:
63:f2:49:43:8d:6f:7b:49:fb:98:73:92:b7:c6:f9:
94:4e:9d:3f:7e:66:56:e9:a3:e0:fa:cb:16:d7:a1:
17:23:cb:e9:d5:b5:51:92:93:f9:30:63:e2:90:4d:
9a:a7:61:d2:00:36:ec:23:5b:12:11:b1:93:26:ab:
b1:c0:e2:af:f9:89:55:2e:1f:c5:7a:ac:9a:83:58:
a5:ef:44:dc:02:59:d7:6a:b0:ae:2b:4d:68:4a:da:
9e:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:E5:94:B2:AE:FD:98:5C:F8:8C:5E:1A:EA:E1:38:18:FD:93:C4:1F
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/n-WUsq79mFz4jF4a6uE4GP2TxB8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
56:a8:4f:f9:e7:ef:13:6f:aa:93:8d:81:de:a1:c8:83:44:cf:
9f:39:f8:55:25:4f:b3:d0:51:b4:f0:d2:81:2a:8b:a1:03:76:
02:63:1d:dc:5e:25:8b:d7:34:4e:e4:6d:ca:4f:42:54:3e:c6:
90:43:7d:71:cc:67:a7:7d:14:f0:f0:42:48:46:58:9f:d0:3c:
de:15:ec:bc:31:b5:c3:e0:69:3c:48:8a:a8:0f:d8:ea:0b:c6:
82:cd:42:56:32:34:a2:67:4f:74:c8:be:04:95:32:18:ba:78:
8c:6a:55:3a:ec:61:d8:01:e4:d8:f7:bb:55:c9:29:16:77:8d:
86:9f:71:f4:ad:d4:aa:1f:9e:b3:03:dd:4c:76:7c:28:dd:12:
3c:a8:ab:4c:85:15:40:a5:50:f2:e2:cb:95:52:ef:03:4c:b8:
46:1d:ad:99:d9:76:1b:d4:c5:b4:70:56:30:f7:96:b4:15:70:
e6:ba:17:e8:73:8a:91:b6:27:e5:e2:5e:3b:96:ab:1f:d8:f5:
9d:e0:80:dd:5f:b7:24:ab:a5:f0:0b:62:3b:e3:40:bb:50:88:
0d:15:03:23:66:04:be:35:42:61:fd:3e:cf:4b:0a:8c:ac:e6:
fe:49:77:4e:46:9f:bf:09:93:5e:fb:b2:a1:8f:8d:35:d9:fd:
c8:c2:c8:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 03:54:06 2025 by rpki-client