Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/wUkU4EzmcgENmMigIQXQHwzm1vI.roa
File: wUkU4EzmcgENmMigIQXQHwzm1vI.roa (raw, json)
Hash identifier: JaRyfz201FvUcfLOB3QOfTg6520Qld9C3kwT+RuZvSI=
Subject key identifier: C1:49:14:E0:4C:E6:72:01:0D:98:C8:A0:21:05:D0:1F:0C:E6:D6:F2
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AB32761D71B982E3890888321BCF81586
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/wUkU4EzmcgENmMigIQXQHwzm1vI.roa
Signing time: Wed 20 Sep 2023 15:13:37 +0000
ROA not before: Wed 20 Sep 2023 15:13:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:b3:27:61:d7:1b:98:2e:38:90:88:83:21:bc:f8:15:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 20 15:13:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c14914e04ce672010d98c8a02105d01f0ce6d6f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:89:f8:ae:da:7e:45:ab:3c:a3:70:9c:e5:fc:
bc:2c:8e:a7:fb:fa:d4:c9:02:e3:07:de:2c:fc:15:
58:8f:fc:94:d0:44:a3:c0:c9:a3:0e:f0:2d:bc:84:
b8:6c:54:c4:74:66:15:fa:6c:04:70:a7:ee:f3:23:
8b:7f:03:d1:dd:f0:ad:b4:93:c6:08:fa:2a:e0:cc:
be:3f:04:18:a5:50:99:59:5c:d8:65:c2:3a:b7:a6:
75:48:04:0c:dd:c8:af:5c:ca:88:29:1a:bf:f2:cc:
31:fa:da:ad:95:bd:26:6c:d9:27:f7:10:c5:d4:4a:
d1:8c:a6:dc:7a:05:44:46:b5:9f:bb:57:b0:70:fb:
f4:4b:cf:bf:54:c0:19:07:76:cf:c7:30:03:9e:44:
42:42:3c:6b:67:f2:43:e9:fd:3b:82:3c:f0:9b:17:
8a:c2:db:bf:ee:e4:f6:10:e4:e9:4d:b4:ba:9f:1b:
b1:18:8d:1f:57:02:fc:76:b6:29:88:f6:eb:b7:c4:
44:65:46:f5:04:9f:15:cd:68:4d:32:f4:35:70:e9:
f6:66:c9:d9:68:d0:18:51:d0:95:ec:22:79:23:1c:
65:c6:c5:ca:0b:4e:16:cf:a6:c9:c5:6c:59:e2:66:
94:c6:9b:82:32:cb:11:8f:00:08:fd:fe:11:f7:cb:
7e:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:49:14:E0:4C:E6:72:01:0D:98:C8:A0:21:05:D0:1F:0C:E6:D6:F2
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/wUkU4EzmcgENmMigIQXQHwzm1vI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a8:b7:4f:4f:6a:50:0e:f1:de:bb:0f:04:21:5c:ad:45:d6:dc:
d6:5b:44:74:7f:11:2d:95:f2:df:b7:f1:90:5f:61:0f:7b:14:
43:ae:62:24:a6:90:bb:0c:1e:51:91:8d:b1:15:63:4d:a4:b7:
45:68:7b:cd:32:22:f7:af:d7:e1:74:de:58:5b:40:10:8c:85:
6a:e5:a7:cb:32:26:11:4f:5c:9f:36:5f:a0:f5:50:71:ff:2a:
25:59:4d:c7:02:b9:76:3b:0d:b4:f6:e9:ce:4e:aa:eb:34:8c:
ac:04:ce:e5:93:f0:7b:7c:94:c4:ae:3c:11:04:47:9a:07:28:
39:dc:92:d2:80:be:bd:9c:b9:15:19:61:7f:3d:22:5e:25:0a:
39:48:0e:a6:bd:7b:b5:a3:9f:11:1f:d8:8a:8b:f8:22:a8:8d:
95:c2:0c:8e:a6:72:3c:f9:9b:a5:7c:fe:47:10:a1:2b:9f:47:
31:b4:62:f7:ce:46:38:ff:1d:bf:d7:68:fd:88:51:bd:14:10:
c9:d0:ce:a2:08:f6:70:30:81:fa:e4:87:c4:5a:5a:03:7d:bf:
62:9b:17:00:2d:46:f4:8a:f1:06:e4:06:a0:69:4a:1d:23:0b:
05:f3:16:d5:0b:4d:dc:46:bd:0c:d1:9b:ee:0f:98:cb:0b:71:
91:aa:68:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:35:54 2025 by rpki-client