Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/WyiEAjzrUyhNYCcL0mYzbqG_8ro.roa
File: WyiEAjzrUyhNYCcL0mYzbqG_8ro.roa (raw, json)
Hash identifier: YZww+T3xtMvJGitRXfNaB2nvvDogqJmmUwUVLQStU/Q=
Subject key identifier: 5B:28:84:02:3C:EB:53:28:4D:60:27:0B:D2:66:33:6E:A1:BF:F2:BA
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B1158A507901693FCA826A9CD888E40A7
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/WyiEAjzrUyhNYCcL0mYzbqG_8ro.roa
Signing time: Sun 08 Oct 2023 22:11:43 +0000
ROA not before: Sun 08 Oct 2023 22:11:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:11:58:a5:07:90:16:93:fc:a8:26:a9:cd:88:8e:40:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 8 22:11:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5b2884023ceb53284d60270bd266336ea1bff2ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:77:f4:6d:db:d1:f3:fe:9c:c7:5d:6a:fa:90:
f5:8f:d0:b2:f5:bf:5d:a1:a3:91:fe:a0:38:ea:51:
97:7e:29:4a:98:31:e0:c5:6e:68:e4:32:91:12:3e:
25:8a:84:70:94:58:1c:dd:68:31:52:8e:68:b0:93:
67:9a:06:58:c5:1f:35:b6:a6:32:92:e1:d9:64:d9:
45:f5:47:67:59:b5:6a:66:bf:f4:4e:e7:c2:55:14:
f7:a9:6f:b1:de:80:50:fb:3a:33:2f:0c:e1:1c:3f:
a2:76:51:d1:24:ae:18:3e:76:23:e6:87:d3:8b:76:
1e:38:24:47:1c:5c:19:c3:d5:39:c4:83:95:4b:4a:
bb:3b:86:f9:8f:2a:86:ec:bd:c8:b2:c1:14:63:2f:
0d:ff:35:ac:e9:66:f8:ea:0f:bf:39:ac:b1:c2:00:
5e:27:ae:5d:60:9a:d2:bd:c8:c8:fa:65:9a:c6:73:
22:41:e0:c2:40:6e:40:99:58:84:fe:02:6e:9d:9e:
26:9d:69:c2:10:14:dd:c1:7d:60:b9:e2:f2:92:3e:
12:b7:2b:20:0a:bf:c7:61:ca:90:cb:9e:e9:51:f7:
9a:03:87:13:70:c9:ef:d0:d7:b9:e3:87:f9:1d:3d:
bb:ed:4d:64:bd:44:32:59:c5:ac:d3:ac:d1:90:aa:
50:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:28:84:02:3C:EB:53:28:4D:60:27:0B:D2:66:33:6E:A1:BF:F2:BA
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/WyiEAjzrUyhNYCcL0mYzbqG_8ro.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
02:3c:25:8d:2b:94:f6:7c:73:2d:97:1d:05:cc:58:b5:0f:a1:
77:d4:b3:f5:d0:85:f8:e7:79:20:d1:b5:61:97:33:66:54:c9:
59:08:76:ba:2a:fc:f4:35:e3:4b:42:d9:22:5c:3e:e8:8c:5e:
c4:c6:34:45:af:61:53:fe:45:f4:0e:c1:f0:5e:13:c5:80:9a:
5d:c0:07:5c:45:cd:f5:4b:3c:9c:3d:cf:8e:aa:3b:c8:73:34:
38:42:58:02:fa:f1:ce:a1:2f:8c:07:b6:88:1d:dc:47:e3:6b:
08:4f:e0:08:29:c3:e4:95:35:ca:ae:16:d1:1f:8a:04:8a:a4:
07:f9:b6:46:5b:e9:21:3e:67:4d:e0:f7:0c:26:94:92:98:2d:
5d:dc:f5:02:aa:1c:06:8d:4d:e8:40:c8:b8:9c:8d:e3:99:7d:
e8:f3:f1:ff:6f:4e:99:2e:dd:55:90:7d:8c:8a:e3:34:65:2a:
e7:73:21:51:c8:dc:f8:79:4c:00:13:0e:3f:50:23:3d:df:e0:
ef:97:9d:ba:dc:2c:fb:d0:22:5a:49:40:94:b0:9f:8b:79:cf:
00:74:70:6a:ed:4f:68:d7:18:01:c6:ba:4d:d2:e2:57:73:19:
8e:04:4d:a4:b4:60:5e:c8:6b:cf:80:00:3a:18:16:26:5d:27:
50:0b:a4:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 12:33:10 2025 by rpki-client