Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/dWwW80Ez1nhByGdllnnc8_mU44A.roa
File: dWwW80Ez1nhByGdllnnc8_mU44A.roa (raw, json)
Hash identifier: QdmWarop1hVq3FyrfxlAr5dnBzOmcu5tsPJFY+lUDIA=
Subject key identifier: 75:6C:16:F3:41:33:D6:78:41:C8:67:65:96:79:DC:F3:F9:94:E3:80
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B49930D1703C824FD2E8CA1B3448E7DC9
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/dWwW80Ez1nhByGdllnnc8_mU44A.roa
Signing time: Thu 19 Oct 2023 20:14:15 +0000
ROA not before: Thu 19 Oct 2023 20:14:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:49:93:0d:17:03:c8:24:fd:2e:8c:a1:b3:44:8e:7d:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 19 20:14:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=756c16f34133d67841c867659679dcf3f994e380
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:18:5a:53:8b:e1:c7:26:9b:0c:d2:77:c5:25:
f0:b7:0d:fe:25:fa:49:f4:c6:dc:46:72:91:f4:22:
18:ac:71:2e:40:ff:5a:50:a9:e6:39:1f:b3:7a:5b:
79:63:64:59:f2:eb:1d:14:ac:9e:ed:35:5f:7c:e8:
68:db:31:18:dd:57:c2:c8:ae:7e:95:cb:ca:c5:44:
18:be:9b:f0:b0:bb:0b:70:76:5c:4d:e3:66:bb:53:
54:45:74:49:d4:e0:b3:be:0d:19:8e:0c:45:14:1c:
63:76:e7:ba:e0:d4:a5:3c:92:43:22:a9:a1:7d:03:
85:1f:d1:25:8b:ac:e5:d3:ee:9d:22:9b:33:7f:9d:
b6:4d:89:3e:aa:c1:94:90:ee:00:96:e9:f1:a9:b5:
4d:ea:89:76:61:a8:b8:b9:81:ff:fa:ef:c5:74:42:
ac:3b:c1:df:73:a7:d6:3f:03:0e:a4:da:a3:10:9d:
fe:6c:b7:5e:88:b7:75:2b:49:fb:79:5d:7e:8e:ac:
13:28:8e:a1:03:f8:af:96:5b:97:dc:d4:f8:52:9b:
ab:81:46:c0:01:a8:9c:95:09:11:4f:07:65:5c:f3:
13:72:9d:c5:6a:61:38:50:12:66:1f:e3:e8:08:c0:
5f:be:54:1e:e1:ff:8a:53:1f:c7:78:6c:53:53:6e:
4f:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:6C:16:F3:41:33:D6:78:41:C8:67:65:96:79:DC:F3:F9:94:E3:80
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/dWwW80Ez1nhByGdllnnc8_mU44A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
10:32:4a:04:fe:0a:4a:ba:f7:41:87:57:16:25:4a:48:f8:86:
b3:f6:62:35:fd:bb:fa:37:03:61:c3:d8:ac:80:dc:12:80:9f:
25:16:ec:97:5f:0a:de:7f:1b:f9:19:f2:ce:03:2d:29:97:a1:
3b:b4:66:73:10:7a:52:d8:ab:2d:fd:fd:20:50:66:dd:58:28:
93:10:53:6c:55:f2:28:21:78:63:95:7e:d5:73:00:92:eb:a3:
07:b0:02:fe:23:87:2b:1c:e8:f1:76:e6:6f:ca:c7:d4:b7:5f:
2d:cd:af:b8:d2:c8:06:ff:55:92:ee:18:3d:ac:7c:b3:6f:1b:
c2:c9:41:33:45:75:09:e0:30:dc:9d:d7:d0:87:ae:e4:59:9c:
f0:07:d9:7a:09:bd:47:dc:fd:cd:1e:69:ac:05:3d:74:51:b2:
86:3e:f8:92:1e:38:53:32:2a:ea:c4:80:0c:67:0b:1c:7a:02:
d5:f9:f4:da:30:96:bf:85:10:4f:d5:54:fd:99:86:60:ae:bd:
5e:e1:87:26:46:09:5e:e5:b6:d8:4a:b3:26:c4:34:8f:a2:83:
d4:1c:54:9c:51:0b:a3:a3:99:56:a0:c8:fd:b9:cd:ba:21:77:
5a:e9:f1:b1:42:61:0f:fc:2d:f7:37:96:c6:6c:48:4a:dd:39:
f0:0d:47:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 04:05:46 2025 by rpki-client