Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/BW1S1QPEInK3cXVFmK9FzLo6y6c.roa
File: BW1S1QPEInK3cXVFmK9FzLo6y6c.roa (raw, json)
Hash identifier: gzqvWq8Tc1gLSB/9IlF6WlqXg1M+jNA6ExgxGdoU1ww=
Subject key identifier: 05:6D:52:D5:03:C4:22:72:B7:71:75:45:98:AF:45:CC:BA:3A:CB:A7
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B76312C042B0BC1D9B60EB34F68BF40A6
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/BW1S1QPEInK3cXVFmK9FzLo6y6c.roa
Signing time: Sat 28 Oct 2023 12:10:15 +0000
ROA not before: Sat 28 Oct 2023 12:10:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:76:31:2c:04:2b:0b:c1:d9:b6:0e:b3:4f:68:bf:40:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 28 12:10:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=056d52d503c42272b771754598af45ccba3acba7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:19:54:d8:9e:ae:ab:30:30:cd:19:39:f1:fe:
b9:52:fa:7f:c8:9c:07:81:95:fc:5b:6c:24:97:28:
df:7d:6a:8f:e7:a3:7e:92:34:ce:48:b1:ab:02:b5:
95:6a:df:d5:c3:af:7f:90:f5:06:06:d4:44:d8:30:
74:8f:c6:3e:88:27:85:6c:00:e3:1f:9f:fb:2a:fa:
2d:aa:ab:e4:3c:97:78:b6:4e:9c:6b:cb:b0:01:3e:
ad:20:7a:0a:5b:72:95:66:5a:72:8c:38:da:ff:e5:
ce:6f:b5:ef:3c:c3:bc:1e:7c:0c:4c:55:cc:c0:16:
3d:05:66:f5:52:09:6d:48:06:6e:5d:28:af:c2:c9:
11:da:35:e7:f6:70:01:49:06:9a:15:ba:4d:0d:e6:
f1:67:7c:0d:f8:c3:3e:5e:b6:e4:14:36:80:1e:80:
d5:49:05:82:35:f4:be:a4:9e:49:44:44:c5:dc:42:
72:2b:05:2f:fa:bf:72:92:1e:82:b8:1a:89:78:38:
d0:9a:46:3a:61:03:01:63:24:bc:ca:ff:80:f7:9e:
a4:8a:74:88:3d:d7:3a:90:04:6c:f3:2c:32:65:57:
08:55:7b:c7:44:78:f4:b9:1b:ad:fe:bd:d0:b8:5d:
a2:b8:07:0b:d4:e2:2e:f0:6e:b8:a7:af:98:bb:37:
f5:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:6D:52:D5:03:C4:22:72:B7:71:75:45:98:AF:45:CC:BA:3A:CB:A7
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/BW1S1QPEInK3cXVFmK9FzLo6y6c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b3:f1:a9:9b:b4:d4:af:37:0a:b8:b7:0a:b3:a8:8f:2d:01:f1:
d4:64:19:e3:67:d8:4d:1b:40:0b:6e:ae:91:20:13:db:d8:62:
7c:ce:eb:1e:40:7d:3d:29:16:4e:7a:bd:2c:43:cd:43:b2:74:
f0:b6:a7:0d:ac:7a:7f:35:4c:8a:48:9e:7f:01:0a:10:f0:04:
5a:29:b1:ac:43:11:25:56:a7:57:14:49:b3:18:0d:7a:39:d7:
85:cb:34:ed:1b:8c:8b:8a:b3:72:4f:93:7c:0b:5e:d0:21:ff:
ab:6c:01:c8:ce:19:67:8a:03:52:e2:4b:be:1c:e6:a4:56:76:
6f:c0:02:dc:3c:2e:b7:7f:13:ea:99:b1:42:b4:4a:11:f0:83:
60:eb:a5:79:e5:a6:90:63:32:bd:eb:fa:89:cc:32:3b:9b:5b:
98:44:0c:7a:b4:47:bb:8d:f5:8b:f4:ea:b1:62:55:6e:e8:33:
fc:c5:a4:d8:ec:d6:de:03:47:90:c6:63:73:02:e0:73:9c:ae:
66:5d:0a:89:6b:a4:3a:8f:e9:05:51:44:93:10:5a:7f:de:33:
fa:c8:f8:ce:e1:20:4d:33:23:62:84:d9:5e:6f:3b:6b:77:eb:
bf:a2:0e:79:b4:78:13:3f:45:46:ba:68:9d:24:69:1a:1d:6c:
99:8e:da:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 11:49:30 2025 by rpki-client