Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/wqWcrBlCZzEGT5qpQr9_vIkbcOQ.roa
File: wqWcrBlCZzEGT5qpQr9_vIkbcOQ.roa (raw, json)
Hash identifier: 9CElfwJ6B3s0zMgQqm42W9s2jRcaPnULH3iCKkGQSOw=
Subject key identifier: C2:A5:9C:AC:19:42:67:31:06:4F:9A:A9:42:BF:7F:BC:89:1B:70:E4
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B10768266921EA472EE5036859D688457
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/wqWcrBlCZzEGT5qpQr9_vIkbcOQ.roa
Signing time: Sun 08 Oct 2023 18:04:43 +0000
ROA not before: Sun 08 Oct 2023 18:04:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:1076:3f08/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:10:76:82:66:92:1e:a4:72:ee:50:36:85:9d:68:84:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 8 18:04:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c2a59cac19426731064f9aa942bf7fbc891b70e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:30:59:c4:1d:f9:bc:dd:7b:5d:93:08:35:bf:
12:da:ce:f9:9e:eb:69:dc:48:d5:e1:24:06:a5:a3:
84:17:a3:be:9f:79:9c:45:b7:24:10:53:bb:40:f5:
ab:b8:11:1c:d1:dc:ef:c1:f1:cf:f2:78:9a:a5:a9:
5b:bd:a4:20:bb:d1:67:6e:4f:71:c8:ba:81:71:ea:
2c:26:30:38:af:58:cc:cd:52:dc:82:1b:a0:01:db:
31:04:42:1d:de:a9:c8:25:97:2e:4e:89:f7:a8:68:
1f:b5:de:11:8f:0e:2e:31:d9:34:d0:39:a6:f3:4c:
2c:c0:c8:7d:88:25:3c:b0:e8:e9:68:cc:72:55:ed:
e2:80:f2:de:df:9b:23:4e:9c:64:80:69:f3:07:9d:
ec:08:9e:ae:3d:6b:46:7a:50:d3:90:a6:dc:d2:05:
80:21:6c:91:c1:a7:25:e3:5d:1c:bc:dc:c3:90:74:
e0:48:5d:c3:73:cc:f2:5f:bf:56:85:86:c8:5c:e5:
94:90:97:43:4e:10:b5:91:ff:b7:cd:76:62:03:81:
97:05:ec:ee:dd:b7:0c:a9:f3:ff:b4:c0:2a:4c:a1:
05:f4:30:9c:c9:e8:07:7e:8d:1a:fc:7e:e5:ee:42:
51:42:5c:2d:75:3f:9c:2b:ab:87:03:16:49:74:c4:
43:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:A5:9C:AC:19:42:67:31:06:4F:9A:A9:42:BF:7F:BC:89:1B:70:E4
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/wqWcrBlCZzEGT5qpQr9_vIkbcOQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
58:2d:f4:56:8b:3f:c9:75:7e:09:6e:a5:7f:e2:69:a8:23:47:
98:91:68:4f:65:a5:09:3f:10:15:fd:a6:ae:d1:fa:a4:d6:01:
5e:ac:d9:b7:ea:5b:87:8d:48:ef:6b:3a:67:44:40:7a:6e:0f:
d2:36:de:c5:07:91:0d:f3:62:86:63:fc:07:8d:26:99:4a:3b:
56:a9:51:6e:07:d1:ca:96:e0:78:59:7d:27:9c:8a:1b:c3:80:
2f:15:eb:74:d0:4b:19:d7:9d:97:54:ce:f9:af:d4:b1:82:14:
7b:e3:c9:b6:5d:53:bd:7a:6f:a9:0e:af:3f:37:2c:d5:84:45:
33:6c:b6:4f:a0:92:a7:48:2f:3d:d8:c0:32:b4:da:37:da:90:
a7:c0:64:9a:59:fb:54:5b:62:26:57:1c:17:9d:4a:a8:b1:9e:
1e:13:54:34:65:55:fc:0e:56:9e:d6:7c:06:7e:ce:74:64:12:
1f:77:e2:ae:08:75:42:55:b4:a9:92:d9:27:d6:06:67:2c:cf:
5d:ba:90:f6:88:23:d7:8e:3b:9a:6e:49:91:92:fa:12:fa:fd:
5c:08:1b:83:03:93:f3:bb:70:02:8b:cd:35:af:ba:a0:e4:6d:
5c:5e:1a:d9:e8:df:14:2c:5c:0c:23:c1:ce:a5:53:4a:74:76:
92:16:e4:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 18:12:07 2025 by rpki-client