Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/BWDHR0q9r6YZUey0MTquifAkZ5s.roa
File: BWDHR0q9r6YZUey0MTquifAkZ5s.roa (raw, json)
Hash identifier: gxN5jtmrag6RAj8gnzDBOsxmGkdW8u0KstX24hckJWI=
Subject key identifier: 05:60:C7:47:4A:BD:AF:A6:19:51:EC:B4:31:3A:AE:89:F0:24:67:9B
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BCABBF6C07228E8CEFD0819E3140607CD
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/BWDHR0q9r6YZUey0MTquifAkZ5s.roa
Signing time: Mon 13 Nov 2023 22:09:57 +0000
ROA not before: Mon 13 Nov 2023 22:09:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:ca:bb:f6:c0:72:28:e8:ce:fd:08:19:e3:14:06:07:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 13 22:09:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0560c7474abdafa61951ecb4313aae89f024679b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:34:d6:2c:65:83:4b:be:33:77:28:c5:69:af:
f6:1c:b6:20:79:bd:ad:23:11:e7:dc:e7:d0:47:57:
d8:42:34:69:44:85:ca:f5:a7:c0:56:2b:4d:41:03:
fc:f6:91:a8:67:79:c4:79:99:3b:c0:78:2c:f3:00:
4e:b2:df:b5:c3:13:78:4a:f3:bb:52:8e:7f:f9:55:
d6:19:ef:cb:70:62:d4:26:5e:51:ff:79:a2:ed:94:
1c:57:27:20:f3:be:3e:af:23:67:13:07:22:a4:b5:
a8:aa:f0:68:ed:36:9e:18:2c:16:f1:f0:83:d5:cc:
ee:01:b5:e1:01:2a:96:b6:08:89:d7:43:40:94:a6:
56:8d:e3:f7:db:31:80:85:ca:ac:96:68:6b:f1:74:
ac:5d:1c:34:ca:51:eb:7c:95:2f:a4:94:41:57:e2:
1f:ad:52:03:90:8c:6b:d2:e0:1f:38:b5:f8:3b:b3:
9c:10:10:87:06:4b:24:f2:f0:9f:57:6e:98:9e:ed:
c4:95:68:a4:c3:dc:51:a7:ae:99:c3:3e:7c:08:55:
d0:62:54:32:3d:60:09:e8:07:6d:6c:15:d6:9a:cd:
46:ba:dc:ca:a8:8e:88:34:2d:3f:5d:d5:2c:19:8c:
f0:37:64:f6:33:c6:a4:37:09:fe:43:ab:79:2a:45:
26:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:60:C7:47:4A:BD:AF:A6:19:51:EC:B4:31:3A:AE:89:F0:24:67:9B
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/BWDHR0q9r6YZUey0MTquifAkZ5s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
53:ee:28:80:c2:4f:7e:5b:37:f3:16:50:55:ff:1a:f2:bd:d8:
8d:5a:7c:86:b8:d4:ea:aa:a0:b5:90:b8:05:a4:5a:93:a7:47:
5c:9a:5e:c5:96:d1:55:3d:2d:49:61:02:c4:d0:e7:ec:9d:51:
4c:a8:93:67:3f:8b:b9:20:be:de:3c:33:e9:42:96:79:d0:3f:
09:2e:70:5c:ac:e9:d0:65:65:00:e6:a9:c1:a8:a9:44:5d:17:
7d:83:00:1b:15:4f:22:25:75:7e:e7:2b:cd:86:c1:39:f6:fd:
8e:07:02:b5:1e:a3:86:8a:76:31:19:2f:48:46:86:87:c7:8c:
61:b6:02:35:19:f6:27:25:93:91:1c:1d:f3:29:be:78:8f:92:
af:b4:4e:5c:f7:54:7f:86:43:f2:ec:e8:11:9c:a4:d2:66:12:
69:5a:9e:98:a0:54:de:1d:d1:cf:94:05:9e:c5:f6:ba:82:8d:
a1:4c:4f:b4:7c:be:43:73:67:39:99:be:38:40:eb:e4:24:e9:
70:6e:f7:68:d8:62:0c:39:bb:31:0c:83:40:ef:63:13:e0:c4:
24:ea:e1:16:5a:e5:ab:da:b1:90:95:06:34:a9:44:f5:95:6d:
0e:14:ab:b2:57:9f:f2:07:a9:3a:9c:88:3d:69:d9:16:9b:fe:
48:67:9d:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 04:58:22 2025 by rpki-client