Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/wRjFFqmG49vOFr0f9QyEG0WJWKI.roa
File: wRjFFqmG49vOFr0f9QyEG0WJWKI.roa (raw, json)
Hash identifier: xz4HGhd9v9wQLqI8Jv0Y5XAR+g/34m9iCKplqNWVT+c=
Subject key identifier: C1:18:C5:16:A9:86:E3:DB:CE:16:BD:1F:F5:0C:84:1B:45:89:58:A2
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C5D8615A8E51D3C6150CF381AFA866EE8
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/wRjFFqmG49vOFr0f9QyEG0WJWKI.roa
Signing time: Tue 12 Dec 2023 10:15:17 +0000
ROA not before: Tue 12 Dec 2023 10:15:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:5d:86:15:a8:e5:1d:3c:61:50:cf:38:1a:fa:86:6e:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 12 10:15:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c118c516a986e3dbce16bd1ff50c841b458958a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:df:73:e9:02:35:2f:7f:8b:2b:36:46:8e:05:
e3:0f:e0:d8:ac:ce:5d:20:61:79:1d:a2:d8:39:ee:
ab:0a:cf:e3:7a:3b:a1:b7:77:b3:92:aa:09:8f:cd:
4b:21:be:42:a0:53:c2:6b:b8:5d:e4:5e:8a:f3:24:
63:fa:12:57:0d:43:4d:32:64:12:37:2d:78:34:07:
d1:6e:b9:3c:23:e3:8c:5a:2d:6b:8c:10:47:a5:98:
2f:ad:14:62:b1:27:85:66:26:d2:9d:81:67:79:ca:
0a:cf:d9:0c:2c:93:43:3c:a5:c8:a6:c8:9d:39:62:
f7:97:71:88:c7:49:3d:a4:72:b9:5c:c3:ea:60:f2:
ea:09:86:3d:56:e9:7b:35:ad:9f:79:18:0e:f3:51:
5c:c2:9e:0c:aa:28:9f:18:12:5b:a9:55:9e:56:fd:
95:04:16:49:ac:f2:24:87:8f:4a:98:42:fb:03:11:
16:d8:0b:48:48:f6:80:0f:d4:f8:7b:f8:3c:e0:bf:
9f:57:18:e2:6a:b1:4a:04:b7:93:b8:9a:8e:3f:cb:
2b:cb:d4:1a:f6:0b:e1:a3:41:4f:67:ea:e9:77:4d:
3a:35:15:0f:13:ab:a0:b7:88:4d:42:7e:f7:04:2a:
15:2a:2e:84:9d:f6:1f:53:4c:6f:41:3c:24:62:42:
4e:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:18:C5:16:A9:86:E3:DB:CE:16:BD:1F:F5:0C:84:1B:45:89:58:A2
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/wRjFFqmG49vOFr0f9QyEG0WJWKI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
c5:b4:f9:36:01:37:e2:43:80:17:58:b0:8b:85:27:8a:18:2b:
cb:8b:46:79:d1:1f:9a:18:ff:4b:16:37:a7:e2:30:48:6f:e5:
34:7b:5d:a0:a5:36:d3:e9:79:51:24:ac:0a:80:3e:d0:74:fe:
07:76:2f:49:9d:8d:ba:e0:6b:7e:17:d1:79:d8:83:73:79:00:
f0:b9:a1:47:13:38:c1:f4:e9:42:7f:da:ce:ae:a7:0f:46:c5:
1e:da:a1:b7:88:17:d8:dd:86:a3:8a:3c:6c:12:ed:04:7c:f5:
6e:65:d0:35:f5:08:15:d6:63:91:66:65:bd:6a:2f:fd:8d:e4:
de:ba:32:42:a9:1a:1d:e8:53:4b:b2:79:70:1f:74:7a:ec:b3:
b9:d9:08:eb:eb:d4:75:93:65:df:23:50:4f:97:14:43:69:74:
02:df:35:47:01:2e:67:be:e5:16:cb:fd:c6:e2:f4:c4:2b:ae:
5b:2b:6d:5a:c1:5c:36:19:b1:c7:74:ce:d8:80:89:31:8a:c6:
60:c8:7a:c8:5c:80:3d:52:93:d5:70:2c:78:4e:0b:b3:05:fe:
7f:37:55:29:80:1f:5f:78:fc:de:3b:1e:71:d3:c8:0a:25:7f:
5e:12:39:9d:ad:47:4d:ad:88:da:29:d5:f1:91:d8:e0:5c:29:
67:b6:9f:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:09:28 2025 by rpki-client