Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/0wW69LEdnPbQ5kHjuf8bceHUGqY.roa
File: 0wW69LEdnPbQ5kHjuf8bceHUGqY.roa (raw, json)
Hash identifier: ziC13m8t2fX6kZVbtTPYzIGbD5o9HB7cue4aueKBL/0=
Subject key identifier: D3:05:BA:F4:B1:1D:9C:F6:D0:E6:41:E3:B9:FF:1B:71:E1:D4:1A:A6
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C2281322D341AA00D2CEF32B9CF610858
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/0wW69LEdnPbQ5kHjuf8bceHUGqY.roa
Signing time: Thu 30 Nov 2023 23:12:21 +0000
ROA not before: Thu 30 Nov 2023 23:12:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:22:81:32:2d:34:1a:a0:0d:2c:ef:32:b9:cf:61:08:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 30 23:12:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d305baf4b11d9cf6d0e641e3b9ff1b71e1d41aa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:30:ce:dc:61:58:b4:cf:60:3d:82:3c:54:d5:
58:fb:0b:2e:f7:16:45:98:46:a6:2b:6e:f4:f7:7b:
07:79:56:21:a2:49:74:26:33:3d:c5:8b:34:05:0e:
70:04:76:79:9a:42:a3:66:f1:8f:c0:19:18:f9:3b:
9d:92:3d:af:9a:8c:c8:bb:e5:72:dc:07:c6:2f:ce:
5a:dd:43:a0:c7:a7:01:ee:a7:95:77:d1:23:f6:3c:
eb:d0:24:09:61:b6:2f:c6:db:57:c8:f8:87:95:e9:
13:54:79:60:9b:48:be:e0:45:15:09:6d:01:5a:06:
9b:bf:46:86:f2:7a:35:10:a2:42:4d:37:d3:7c:3e:
53:62:41:6c:fb:9d:e9:6d:1a:87:e5:89:f2:78:0b:
57:e1:ea:21:be:d1:8e:e3:54:67:13:61:89:54:fd:
c6:f7:ce:3f:43:08:28:8e:42:0d:90:f1:fe:25:1b:
29:fc:52:4a:28:4e:14:be:ae:cd:f5:76:fc:d0:4e:
d9:9d:42:fc:67:4c:4e:fa:a0:b6:40:5b:cc:ec:d6:
cd:9a:48:2a:05:32:00:72:66:8f:05:60:82:98:48:
97:cc:e8:1a:94:22:99:cf:e2:99:70:14:e5:7a:27:
39:75:9a:2d:bd:db:4c:5d:2f:b1:be:99:52:86:be:
5a:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:05:BA:F4:B1:1D:9C:F6:D0:E6:41:E3:B9:FF:1B:71:E1:D4:1A:A6
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/0wW69LEdnPbQ5kHjuf8bceHUGqY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
97:30:3e:82:a3:42:27:7d:31:be:31:25:88:59:4c:ce:d4:87:
f7:0b:cf:35:2b:4e:fc:ad:9e:c2:9e:28:eb:32:57:c1:0a:06:
66:b7:67:8a:5f:c1:99:68:a4:f2:8f:8d:31:8f:ba:75:ad:82:
f9:63:0b:ae:0c:37:d2:23:8e:33:71:f3:6d:e1:2e:56:98:35:
ea:99:32:f8:a7:cd:cf:25:22:f1:db:bf:2b:d7:c2:ca:43:67:
11:7a:c6:d2:33:95:b6:a1:ed:16:c5:6f:a0:59:aa:ca:f0:be:
54:78:54:54:db:99:8d:9a:f6:93:ba:09:15:f0:10:25:cc:62:
3c:5e:61:e4:b3:d1:eb:04:9b:b6:e0:ab:ce:57:fc:58:e2:eb:
72:7c:fd:d2:b3:db:2d:b0:33:d1:27:8b:f5:5f:2e:1a:cd:3d:
da:3e:b1:d4:90:53:18:a5:84:26:69:19:36:9b:8d:8e:c8:e8:
d3:d8:35:ef:af:18:9b:b5:e7:5a:e2:fe:ff:46:93:7f:c8:39:
7e:3d:c6:73:f0:6a:ae:04:a2:0e:9e:10:1b:66:d0:cf:12:3f:
84:b0:77:03:be:34:31:d8:fb:7c:a5:d7:82:e0:35:a1:bb:b0:
b8:9f:f3:74:6e:f6:83:c4:3c:9c:99:0a:01:d4:6f:0c:a4:87:
41:c5:19:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 08:15:03 2025 by rpki-client