Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/wZ8fHydwwYoFaKtJb7dC4J56ZSE.roa
File: wZ8fHydwwYoFaKtJb7dC4J56ZSE.roa (raw, json)
Hash identifier: bb5f7hOhILfUsvQV2l4cJxwB6bO8q/UJq70VQ9bE7aw=
Subject key identifier: C1:9F:1F:1F:27:70:C1:8A:05:68:AB:49:6F:B7:42:E0:9E:7A:65:21
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B3DCA3EC5FD3FB324492F39304EDC435D
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/wZ8fHydwwYoFaKtJb7dC4J56ZSE.roa
Signing time: Tue 17 Oct 2023 13:19:06 +0000
ROA not before: Tue 17 Oct 2023 13:19:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:3d:ca:3e:c5:fd:3f:b3:24:49:2f:39:30:4e:dc:43:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 17 13:19:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c19f1f1f2770c18a0568ab496fb742e09e7a6521
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:39:2d:29:b8:ba:68:f5:53:c7:ad:ff:7a:2d:
aa:91:bd:b3:b6:bd:cc:c3:a1:33:82:d0:03:61:81:
30:04:06:2b:50:ca:25:42:f0:f2:3a:d5:2f:9c:01:
07:dd:da:f2:84:76:f2:42:c8:7d:62:b0:7e:96:87:
67:0b:ba:8e:cf:00:aa:5a:6f:88:da:27:ab:0e:16:
6f:94:d9:7a:f3:ed:63:4c:7c:6e:e4:86:65:00:ad:
52:a7:7d:a8:bd:6b:d7:17:db:47:08:64:33:71:5e:
55:c2:96:0a:ed:e8:a3:6b:39:8a:12:ab:a2:26:21:
e7:7d:27:98:fc:db:36:fe:ac:3e:5e:56:9f:d2:34:
17:7c:85:6c:1c:a6:2b:87:f1:b1:29:82:5e:99:7d:
0c:d1:0d:d9:e6:c8:23:ff:67:90:83:44:66:bc:4d:
3a:01:79:0a:1b:81:54:31:a4:63:a1:e4:c0:3b:55:
8f:e8:e4:4b:56:ea:c1:04:e5:75:df:f5:14:0e:c1:
a6:9c:ac:67:75:bc:d8:d1:55:92:79:55:6a:cc:16:
c2:2a:1f:2f:ca:6e:c4:c5:65:46:ea:fa:c0:f7:e0:
7f:84:10:2c:d2:89:90:00:ca:99:d1:4f:2b:c1:57:
b3:ac:56:a5:0c:c9:e8:eb:7e:cb:7e:db:8f:5a:94:
a7:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:9F:1F:1F:27:70:C1:8A:05:68:AB:49:6F:B7:42:E0:9E:7A:65:21
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/wZ8fHydwwYoFaKtJb7dC4J56ZSE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
33:db:0a:c6:16:8d:85:3c:90:aa:39:0e:b6:c2:60:ba:d2:56:
03:7e:bd:b6:a4:14:36:ff:82:d2:a9:f5:72:c8:4b:15:1d:e8:
37:a4:a0:c6:1c:1a:aa:c4:64:b8:d2:9c:a2:f5:57:7d:04:4a:
f4:98:b3:1d:d6:ba:00:8d:5f:86:2f:7e:73:39:bd:62:86:f5:
73:cf:19:a1:31:df:37:7c:99:5f:75:ad:7f:66:4b:bb:eb:4f:
e7:0d:b9:83:52:84:cd:7a:2c:2f:71:b8:9f:1f:e0:2d:3e:8e:
98:6a:d4:05:60:3a:6d:6b:b2:e8:48:81:60:bd:6e:28:28:f7:
79:16:50:44:4c:f2:9f:aa:c5:b3:45:d6:4d:02:d2:bd:4e:5b:
69:2a:69:55:9a:bd:ee:67:4a:99:6a:72:96:f2:58:f1:b0:47:
64:66:54:5e:f4:91:c6:e3:9d:e1:f6:de:c4:e0:3d:73:6f:d5:
4c:3c:f2:55:17:84:06:67:92:a7:71:c8:eb:58:24:18:98:7f:
5d:5b:7a:19:b9:f9:ee:c2:42:b9:ac:62:39:75:da:dd:47:be:
29:04:09:bc:20:66:80:88:8a:71:ce:7a:10:bb:08:43:5a:7b:
05:79:9e:71:b5:ff:ee:ef:d8:32:a0:c5:1b:f1:a7:25:32:88:
d4:06:c9:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 22:24:38 2025 by rpki-client