Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Wrql4QJOpUZaOGnpZjp0j-75FBI.roa
File: Wrql4QJOpUZaOGnpZjp0j-75FBI.roa (raw, json)
Hash identifier: Un9W9SyQH24NI9nNJET7bsWCfTHLW97RlFK+UWrRuTU=
Subject key identifier: 5A:BA:A5:E1:02:4E:A5:46:5A:38:69:E9:66:3A:74:8F:EE:F9:14:12
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AC7C1BC3507C7765874726E8327A08196
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Wrql4QJOpUZaOGnpZjp0j-75FBI.roa
Signing time: Sun 24 Sep 2023 15:14:37 +0000
ROA not before: Sun 24 Sep 2023 15:14:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:c7:c1:bc:35:07:c7:76:58:74:72:6e:83:27:a0:81:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 24 15:14:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5abaa5e1024ea5465a3869e9663a748feef91412
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:07:a1:4e:f1:fb:a3:b7:2d:2c:53:1a:9a:e4:
77:47:e7:47:d6:33:3b:7b:79:f0:84:bf:cc:3e:bf:
8b:8c:bf:79:dc:3f:e0:6a:7c:31:79:72:1b:9f:2a:
5b:94:34:c4:c4:20:bc:95:13:12:d2:1a:5a:fc:bc:
c4:ab:7f:72:a5:51:ee:b2:0c:e3:a0:a8:29:bb:cf:
56:a1:b4:5a:aa:6d:dd:e0:16:55:3c:b3:e0:2e:eb:
3a:60:65:d4:12:a1:0a:5e:88:44:1a:b8:9b:b9:1c:
5b:77:b7:74:f8:94:f5:4b:9e:7d:51:c9:17:8e:e6:
6c:26:7d:83:7b:ba:c9:ce:18:00:2d:ce:44:9b:e9:
3b:df:43:d4:c8:91:8c:23:46:e3:5d:5b:bd:43:bd:
7d:f1:28:4b:2e:91:94:61:d2:b1:bd:c0:75:3e:b5:
47:31:12:4a:1d:9c:e9:75:97:9a:8a:05:fc:82:b2:
41:52:4b:9e:fc:de:17:f3:61:4a:f5:c1:ff:63:19:
fc:0e:80:01:cb:0a:2f:0f:3e:dc:36:ca:90:b4:2d:
3d:a6:d8:f5:62:03:a5:47:fa:3b:22:08:6d:c7:9b:
87:8c:1d:1d:a7:d4:e5:ca:40:04:3f:39:f5:8d:8d:
8d:0a:d7:1c:41:2f:47:ba:30:01:d3:e1:06:ca:80:
a1:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:BA:A5:E1:02:4E:A5:46:5A:38:69:E9:66:3A:74:8F:EE:F9:14:12
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Wrql4QJOpUZaOGnpZjp0j-75FBI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a9:cc:4a:d1:c2:7d:96:92:4c:09:f9:f9:12:81:3b:1b:45:ba:
33:9c:94:63:1a:a1:82:fb:a9:10:4c:7d:4c:fc:68:9b:61:54:
9f:97:b7:1d:e3:83:57:ad:40:ee:6e:d5:3f:4b:4c:34:39:a1:
0b:e1:33:0e:17:27:b0:4d:bb:82:59:bb:c6:8b:dc:57:23:5d:
13:a8:df:54:68:7a:d4:87:a9:79:f9:9a:e5:40:7e:69:6a:14:
33:5f:e8:22:ee:0b:29:12:67:60:bc:90:72:e2:82:6a:f8:d4:
a3:d0:4e:73:b0:1f:eb:39:75:51:1f:7e:3b:63:dc:d5:9a:8d:
ff:e1:51:34:fd:6f:dd:a1:9e:e7:cd:f4:7b:87:93:b6:bf:47:
4a:64:57:aa:71:88:87:c4:08:fe:5a:dd:51:3a:3d:44:9b:93:
b1:4d:40:c3:66:0a:7b:87:49:70:0b:90:ac:9d:8d:67:89:79:
6b:a0:d8:22:b8:f7:5b:03:63:a5:8e:a0:e7:24:52:2a:4c:de:
3d:1b:24:5b:12:47:62:b4:6d:64:07:0d:6a:80:ca:7b:fa:bf:
55:58:2c:9a:34:f5:b6:84:da:f0:de:83:6b:fe:e1:b1:5c:f7:
70:e0:f2:7e:7a:c4:35:a9:de:42:db:2a:02:bf:94:08:03:d3:
0a:8e:fa:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 04:01:15 2025 by rpki-client