Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/T_wlpBejmRB3gEA2WkRUciKTre8.roa
File: T_wlpBejmRB3gEA2WkRUciKTre8.roa (raw, json)
Hash identifier: hgPaBFrdSMjj0h6qe3tx2MjkjsTuLd5yMGxRaJX9leE=
Subject key identifier: 4F:FC:25:A4:17:A3:99:10:77:80:40:36:5A:44:54:72:22:93:AD:EF
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018ACF0E544F0B14EBEA6A41ACBBD228CABB
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/T_wlpBejmRB3gEA2WkRUciKTre8.roa
Signing time: Tue 26 Sep 2023 01:15:37 +0000
ROA not before: Tue 26 Sep 2023 01:15:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:cf:0e:54:4f:0b:14:eb:ea:6a:41:ac:bb:d2:28:ca:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 26 01:15:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4ffc25a417a39910778040365a4454722293adef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:fe:7a:61:36:eb:7d:61:44:2b:78:c2:f0:43:
da:2a:5d:c0:c8:b4:d2:d5:17:94:72:46:82:3c:38:
c1:58:3f:ab:b2:9a:eb:ef:d6:cf:dd:d3:ea:b8:53:
d9:c8:78:3e:89:34:c6:b9:aa:7e:16:c8:95:65:f2:
dd:53:17:22:07:3e:3f:d4:6b:36:1e:bc:83:88:ae:
3c:50:9e:88:12:ee:9c:a8:74:74:12:78:e0:d7:98:
45:11:38:f8:a2:e6:60:08:0c:f4:28:65:36:fe:30:
31:bf:e3:2b:c8:22:36:48:8d:66:bd:95:9a:a6:13:
6c:7a:55:68:00:ef:8a:12:28:dc:9d:8c:fe:63:10:
1e:39:df:8f:58:e9:fa:24:44:a6:89:d5:a4:a7:ca:
27:21:e5:72:80:75:39:69:1f:d7:1c:84:1c:d3:31:
e7:c5:81:d5:b4:e1:13:40:b8:0d:b8:a2:f3:6a:85:
a9:9d:b1:bf:eb:8b:ff:53:a9:26:d4:94:d2:7c:03:
41:1a:e8:e2:88:6e:39:a1:f1:fe:1c:c2:6f:63:6d:
0d:5f:12:29:54:55:18:ed:c7:81:0b:d3:6c:17:17:
be:12:d6:8f:10:52:1a:1c:bb:92:51:e1:78:38:7a:
1f:9a:2f:79:fe:41:a2:f3:16:5b:b2:db:a0:39:48:
77:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:FC:25:A4:17:A3:99:10:77:80:40:36:5A:44:54:72:22:93:AD:EF
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/T_wlpBejmRB3gEA2WkRUciKTre8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
80:f1:3c:ff:c6:22:29:f6:8a:94:e1:a7:b2:7e:7a:e4:95:4a:
10:c6:1b:87:ee:9a:95:f4:73:02:1e:96:ad:77:17:56:31:71:
84:57:18:b8:43:d3:2e:69:fc:5e:ef:50:47:d7:48:d3:b0:68:
72:06:55:29:28:dc:22:e7:b4:e7:54:cd:dc:a4:38:e8:d4:dd:
33:0c:ab:e9:3a:49:00:6a:68:f7:b6:bf:2c:63:d2:2f:34:ab:
22:23:f6:61:7b:67:3b:56:00:17:48:80:8e:b9:da:cf:fe:fa:
ae:a0:31:2a:3a:3f:a2:ca:c3:50:16:ac:b1:6d:aa:0a:68:f8:
f2:16:25:45:9a:60:f7:d2:54:7e:51:fb:e7:82:9d:fa:3e:82:
f2:3d:05:4a:ad:94:f4:fc:9c:66:58:4d:c3:da:1a:a6:ba:32:
2f:90:c9:6d:4e:76:82:24:21:ab:79:44:fc:cb:d8:34:3f:92:
82:38:43:9a:45:db:aa:63:1a:db:43:15:03:f6:e1:8b:d8:f3:
d5:df:0f:49:a4:28:ca:9f:3d:3b:2f:89:fe:35:a5:10:3a:c6:
e8:97:85:94:eb:79:05:4b:18:83:3d:ba:8e:e5:b4:e5:c3:47:
06:45:3b:b9:69:a5:f3:15:03:90:b8:12:c7:9c:a2:13:8c:ef:
1a:45:4f:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 14:34:45 2025 by rpki-client