Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/wv635BWyXIboBNwUKyp7MhuF4_M.roa
File: wv635BWyXIboBNwUKyp7MhuF4_M.roa (raw, json)
Hash identifier: jZdFyHa0mFvDXQuu8exWXk6VgwMLr+4tgTFDDBw8orQ=
Subject key identifier: C2:FE:B7:E4:15:B2:5C:86:E8:04:DC:14:2B:2A:7B:32:1B:85:E3:F3
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B905FBFC09B787DBE82D18DE0F81C3150
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/wv635BWyXIboBNwUKyp7MhuF4_M.roa
Signing time: Thu 02 Nov 2023 14:11:15 +0000
ROA not before: Thu 02 Nov 2023 14:11:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:90:5f:bf:c0:9b:78:7d:be:82:d1:8d:e0:f8:1c:31:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 2 14:11:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c2feb7e415b25c86e804dc142b2a7b321b85e3f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:8f:db:69:18:fe:e7:35:4e:3d:c2:43:75:67:
32:e7:df:59:c9:2e:b5:f1:ad:80:24:10:7c:28:5b:
fc:40:c4:77:d4:ac:5a:7b:e0:70:50:96:a5:b4:f8:
c5:19:66:33:74:ad:68:06:4d:02:20:f7:ba:e4:41:
85:30:81:1e:ad:b3:de:ad:f7:59:43:e8:13:67:45:
87:f2:a9:e5:84:fc:e8:03:b3:98:f9:26:de:c0:50:
ad:bc:17:d9:90:9f:6f:58:bf:5d:2d:96:c1:65:ba:
5f:ed:a4:a7:e2:c5:34:ad:2a:fa:73:c3:84:b4:23:
22:9e:15:4b:15:5c:41:74:99:96:8f:73:d0:c9:6b:
6c:a4:73:e1:c5:70:48:b4:da:ae:09:b2:e5:c2:c1:
ce:a7:9d:dd:71:44:8f:df:3c:72:c0:68:c8:1c:6d:
38:74:f7:12:ce:53:2e:8c:00:21:1c:0a:b2:69:87:
72:8f:33:1c:80:20:72:9a:7b:3f:eb:79:70:73:e9:
76:f1:8d:3a:bb:a7:97:d1:21:fd:2e:38:49:7d:ea:
6d:63:13:a5:79:e4:de:30:7e:b5:b1:77:97:74:70:
65:28:19:df:88:95:da:92:c6:98:28:59:87:a2:9f:
1c:2c:2f:76:fb:c2:9b:4c:e9:1e:e7:47:b3:6a:ad:
fb:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:FE:B7:E4:15:B2:5C:86:E8:04:DC:14:2B:2A:7B:32:1B:85:E3:F3
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/wv635BWyXIboBNwUKyp7MhuF4_M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b7:eb:58:35:ee:99:2e:78:41:7b:2b:0c:88:10:3b:af:cb:dc:
33:89:32:1b:99:a7:c0:83:75:c8:c9:15:06:e6:45:ec:9a:95:
1a:69:7b:f0:3e:ee:57:7d:9f:dd:e0:ef:41:1d:3a:8c:c7:e9:
82:85:4a:1c:33:b7:b2:f4:ed:aa:de:dd:15:73:41:5a:5b:cb:
65:4a:4a:c9:c4:b8:ef:01:ae:a2:0a:60:7c:7b:00:bf:15:36:
ca:24:fc:32:4b:f0:32:db:c8:a1:48:f3:ee:1c:9c:e7:33:2a:
af:87:b0:96:3e:91:f1:91:fe:bb:57:df:08:75:ac:72:2e:bc:
3f:b6:91:8d:c0:3f:a3:71:11:56:10:23:f4:2d:3b:5d:5f:64:
6f:18:87:fe:71:86:9f:2b:34:4b:ab:96:95:79:d7:98:78:e6:
d8:4b:9f:57:f2:dd:eb:87:f3:3d:18:4e:30:63:92:35:1e:95:
72:16:f7:a1:94:a0:3d:f4:40:52:17:17:80:e0:2b:36:96:34:
7f:6f:db:47:d3:03:f9:ae:f8:90:eb:f5:06:04:2f:ff:6c:f3:
7b:f8:ac:f3:3e:85:58:67:01:79:81:18:3e:56:96:57:3c:c0:
12:bd:ed:11:63:d2:a8:31:11:b0:f8:56:4f:df:1d:35:2e:94:
44:8b:a8:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 20:13:11 2025 by rpki-client