Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/WKm_ZH4w9J7roiqQ_ifdaZn5KdM.roa
File: WKm_ZH4w9J7roiqQ_ifdaZn5KdM.roa (raw, json)
Hash identifier: lWu01u6uSVR74nRLhsx1OaqjntGPYIXIjx0LROP6nhQ=
Subject key identifier: 58:A9:BF:64:7E:30:F4:9E:EB:A2:2A:90:FE:27:DD:69:99:F9:29:D3
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B973D8FF976BF1B3CD273FE38626B1036
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/WKm_ZH4w9J7roiqQ_ifdaZn5KdM.roa
Signing time: Fri 03 Nov 2023 22:11:15 +0000
ROA not before: Fri 03 Nov 2023 22:11:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:97:3d:8f:f9:76:bf:1b:3c:d2:73:fe:38:62:6b:10:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 3 22:11:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=58a9bf647e30f49eeba22a90fe27dd6999f929d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:85:b8:93:c8:f9:d9:b6:8d:f2:6c:5d:21:f6:
54:90:00:4f:56:96:8a:55:8d:6f:d4:db:bd:39:69:
9f:3c:25:d5:d5:c0:39:cd:05:c9:b1:e0:78:8c:e6:
4c:e2:90:2e:71:90:c1:8d:0e:ff:b2:81:11:31:3b:
38:e4:ec:e5:dd:47:03:f6:04:8d:7f:8c:08:ae:4f:
d1:4e:05:89:a3:dc:f9:59:70:b6:75:d1:b0:db:29:
32:10:8d:98:c5:75:c8:ae:d8:24:a8:ae:35:21:2f:
2a:f9:d3:55:b9:b9:d1:00:cc:49:2a:d7:5a:3b:4f:
8f:fa:db:8f:b5:a5:58:ba:d9:19:e3:1b:3a:9c:ad:
f6:68:9f:0e:c7:1a:3f:a0:a0:7f:68:88:50:9f:d4:
9a:26:2a:d1:4b:30:d4:be:58:e2:2b:80:6b:14:c6:
c9:ae:ea:05:1e:af:56:36:a9:63:f4:70:aa:96:6a:
b9:bc:0c:96:f7:05:c5:b7:b4:05:f7:f4:9f:90:42:
a1:fc:ad:2c:96:b2:0b:97:9b:6d:89:c2:6f:97:0e:
44:5b:34:8e:61:e2:b0:78:e2:8d:7f:e0:c7:8b:13:
e7:9d:18:a0:75:a6:56:0c:ff:e0:21:7a:95:24:0e:
e4:f6:9f:d3:7a:b4:ba:ec:f4:96:c7:03:ce:72:42:
e0:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:A9:BF:64:7E:30:F4:9E:EB:A2:2A:90:FE:27:DD:69:99:F9:29:D3
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/WKm_ZH4w9J7roiqQ_ifdaZn5KdM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
d2:cb:74:8e:bc:19:48:9e:0f:1f:23:c1:87:52:74:e3:bd:6b:
87:d7:96:b0:1b:a8:1d:68:ec:e0:2a:6c:96:b6:cf:78:06:b0:
4e:21:91:93:c3:cb:90:2d:37:57:a9:43:c1:1d:25:74:1b:ee:
da:4f:db:2c:4e:ab:59:9e:7e:86:4a:86:96:87:e2:ea:a2:55:
fc:85:1f:0d:f7:55:49:b4:dd:73:2d:5e:a7:5f:8c:f7:32:a7:
50:cb:11:bc:07:13:ac:f9:1b:5e:38:1b:e6:59:43:f3:8d:41:
b1:b4:5b:4c:79:8e:bc:17:f4:dc:09:05:35:1a:60:fc:91:df:
40:64:dc:0d:ad:81:a4:7d:81:ab:9c:44:67:30:9e:1c:29:93:
31:e0:d2:08:a5:5f:1d:5c:47:81:78:09:3c:5e:31:db:7a:8b:
9c:49:5e:6f:57:c0:61:b3:d7:cb:1b:2e:fd:a9:08:69:34:5f:
6e:02:f0:1d:38:21:db:e5:9d:8a:c0:bd:df:44:dc:a9:07:e8:
98:dc:cc:bc:cd:e2:36:43:4b:cc:ae:36:50:25:41:b4:18:4e:
81:e7:c7:7c:95:8b:ab:7b:03:41:7c:95:4e:81:3d:d1:8d:ee:
d1:2a:f3:5a:4b:7c:0c:cb:13:93:cf:29:96:5b:63:11:d4:30:
10:c0:b0:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 18:50:19 2025 by rpki-client