Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/W2W2_Zjn61aLjX17V3bND_mxlAY.roa
File: W2W2_Zjn61aLjX17V3bND_mxlAY.roa (raw, json)
Hash identifier: RKFHZbD+yxW/p8fcWx1Aj1R9B1oWSP+zbuYqSyCSbak=
Subject key identifier: 5B:65:B6:FD:98:E7:EB:56:8B:8D:7D:7B:57:76:CD:0F:F9:B1:94:06
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018A85D8C3370693DB19A02A4831997689B2
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/W2W2_Zjn61aLjX17V3bND_mxlAY.roa
Signing time: Mon 11 Sep 2023 20:04:50 +0000
ROA not before: Mon 11 Sep 2023 20:04:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18a:837b:f9c7/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18a:85d8:46f9/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:85:d8:c3:37:06:93:db:19:a0:2a:48:31:99:76:89:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Sep 11 20:04:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5b65b6fd98e7eb568b8d7d7b5776cd0ff9b19406
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:9c:d9:a5:fa:3c:94:d3:50:f5:1e:03:17:2a:
43:0b:18:e9:58:ad:29:a8:b0:42:02:e8:d9:ea:8f:
46:be:49:64:91:a8:d8:3e:91:68:af:25:f6:f1:91:
43:b0:51:bd:7e:d1:b5:01:82:c0:b0:01:98:16:d3:
34:b0:da:cc:6c:b4:73:95:2d:18:49:ca:f1:21:25:
cf:55:fe:bc:a3:5c:b8:b7:6f:07:88:41:cd:6b:a0:
07:9b:24:7f:26:b8:09:f5:54:ad:cc:93:82:0f:38:
03:c4:f9:70:74:3a:79:9d:ed:2c:8d:13:e7:22:ce:
71:c4:52:60:01:aa:6b:59:1e:1c:57:a5:ec:f4:6e:
56:7e:1b:62:0a:1e:7c:96:95:9d:41:50:96:82:16:
e1:f7:e6:ec:f6:6e:e5:f3:7c:f2:36:8f:ed:92:80:
bc:d6:e0:a2:d9:7d:f9:4e:b0:8d:91:9a:1d:49:ff:
ce:20:5e:1a:b7:3f:47:63:e9:d3:6e:b6:4d:a8:97:
88:bb:c6:4d:b3:3a:d4:7b:75:05:90:d3:69:1a:c1:
f8:a1:c7:5a:0a:a2:4d:71:08:3b:c7:c5:c7:fb:b7:
e6:73:58:84:13:46:e1:5c:48:2e:76:e9:7b:86:05:
d3:94:55:18:0e:69:df:aa:b1:8c:b0:e5:79:e3:b3:
e0:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:65:B6:FD:98:E7:EB:56:8B:8D:7D:7B:57:76:CD:0F:F9:B1:94:06
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/W2W2_Zjn61aLjX17V3bND_mxlAY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
17:54:ac:c1:29:4a:65:20:ef:15:fe:fb:7a:d2:47:32:ca:66:
a0:7e:13:1a:5b:62:f9:69:f3:13:b2:d2:73:c5:47:4f:68:13:
dc:3d:f9:c3:c4:a7:3a:15:1c:43:e2:85:01:c3:8f:73:55:cb:
02:44:3f:1d:3a:5b:1d:e5:68:84:c5:c0:38:21:0a:ed:ab:44:
8a:c2:da:c5:6b:c4:f9:82:ed:2a:d9:7d:21:16:0a:45:09:fa:
29:e8:8c:6e:95:25:1a:4a:02:66:ee:34:1c:92:63:ab:11:ba:
76:ad:a7:f7:e8:f3:30:24:e6:80:bd:93:49:79:cb:53:e9:2b:
2a:c5:31:2d:fe:5c:ea:ac:d2:a4:95:57:f8:be:76:bd:9f:44:
d0:35:9f:d9:13:77:a0:69:85:7b:c6:e1:b9:27:ca:13:ca:bc:
8d:a2:5c:94:72:92:60:78:92:f2:10:95:50:80:7b:6b:9e:4f:
9e:e6:d9:86:4d:bc:f4:af:93:6c:e6:06:f9:a8:bd:74:49:d9:
a5:40:91:4b:b6:16:44:35:2d:b9:0e:bf:a4:26:ce:1a:45:0d:
0e:e7:66:58:d8:bf:d1:37:88:75:93:73:31:26:03:3c:5b:ee:
f4:1b:59:2b:cd:5f:14:6a:a9:0e:aa:07:e6:fd:b1:0e:3f:e2:
1b:68:54:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 18:34:15 2025 by rpki-client