Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/WdAAg2d2KxwHxTcCsnrHaeRQ8Wk.roa
File: WdAAg2d2KxwHxTcCsnrHaeRQ8Wk.roa (raw, json)
Hash identifier: 4BrlLvW3YlnMGEswail7vKdoTqBgnSO88YE/B58nFdo=
Subject key identifier: 59:D0:00:83:67:76:2B:1C:07:C5:37:02:B2:7A:C7:69:E4:50:F1:69
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B2397D9472FD02C7252DFB1256015C6CA
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/WdAAg2d2KxwHxTcCsnrHaeRQ8Wk.roa
Signing time: Thu 12 Oct 2023 11:13:55 +0000
ROA not before: Thu 12 Oct 2023 11:13:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:23:97:d9:47:2f:d0:2c:72:52:df:b1:25:60:15:c6:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 12 11:13:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=59d0008367762b1c07c53702b27ac769e450f169
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:10:14:47:e0:5f:81:ec:87:f4:dc:6d:9c:00:
34:2b:bc:6a:92:ed:48:7c:f0:8f:63:d4:4c:90:da:
8b:94:ea:45:3a:d1:e3:5c:21:c8:27:9b:e3:d8:44:
09:6c:42:b7:5d:b7:e5:3e:d5:10:de:4b:3c:e9:9e:
17:4f:74:47:2c:25:6c:b0:72:7a:1a:ea:ee:12:7e:
9a:e4:8d:a1:27:6d:d9:dc:51:be:84:32:30:b2:94:
2d:f5:6c:9f:e9:12:cb:f4:24:72:89:99:07:ec:ed:
b2:2d:0e:f3:6e:97:fa:bb:2c:35:8b:c8:9f:a7:9a:
66:a7:d3:26:4d:0b:7f:63:1c:40:cd:a2:71:2a:b8:
13:ef:da:b9:a3:b1:bb:55:35:8c:75:80:64:8b:71:
f1:04:17:d9:45:27:6b:c5:b9:3e:fd:ce:89:b1:0f:
d4:5c:ec:f3:3a:4c:87:c4:f4:95:0a:69:13:b0:15:
8f:71:f7:ba:51:67:93:3d:31:f7:2e:c8:7e:57:9f:
30:2c:a7:1f:62:0c:95:57:12:3e:01:3b:99:3b:48:
dc:04:df:fd:f4:6c:7b:d3:82:8f:a7:13:b5:f1:03:
5d:12:cc:b5:c1:69:4d:cd:71:69:2f:e4:6a:ac:e4:
5b:ef:4d:98:d7:9f:98:b7:56:9b:68:56:df:fd:eb:
37:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:D0:00:83:67:76:2B:1C:07:C5:37:02:B2:7A:C7:69:E4:50:F1:69
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/WdAAg2d2KxwHxTcCsnrHaeRQ8Wk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
10:ec:44:69:8a:3f:5d:36:b8:2c:ed:2a:2a:2d:2b:40:76:bd:
c3:66:50:99:e0:81:44:dd:1e:cd:90:90:4f:22:6c:9c:fb:fc:
9c:2e:54:bf:85:7f:b9:66:d9:bc:40:28:8b:6b:e5:ad:ac:92:
ad:b1:5b:8c:e1:9b:52:18:59:ee:8e:88:a8:fc:2b:8e:0b:ff:
bd:00:54:cd:34:87:4e:09:d8:13:8d:76:5b:8e:24:9e:e6:d1:
01:19:bc:d9:a2:7d:be:3f:59:a3:ab:da:c8:6b:e7:58:ef:45:
63:9f:6f:1f:a5:c5:08:93:d9:ce:62:d4:5e:48:f7:28:cd:3f:
45:85:53:b2:69:10:77:73:a0:b1:04:5b:4d:99:5f:89:04:89:
a6:a9:13:68:a5:dc:8d:d9:2c:c6:c3:cf:51:e3:5d:73:de:cc:
12:da:04:87:de:78:8b:e1:0b:38:da:e5:95:b5:38:50:83:be:
4d:23:d9:2e:30:12:13:29:6d:ea:b6:f1:8d:7f:4c:8a:fd:06:
35:ae:35:9e:16:46:f8:f3:dc:29:db:38:04:f9:10:af:ed:ec:
6c:27:c8:a3:8e:55:fe:d6:35:50:4e:5c:15:e5:2f:42:f9:dc:
37:96:67:fe:bd:1a:ab:48:9d:ea:7f:4a:fa:35:e4:8a:ad:24:
56:d8:84:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 22:00:42 2025 by rpki-client