Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/rw_juYnHiV_1mrojEF6Q7eTlS8E.roa
File: rw_juYnHiV_1mrojEF6Q7eTlS8E.roa (raw, json)
Hash identifier: iaPgZDHzaRDy46E9fl4cm9VsdbC98YPrwWg0eUQtnsA=
Subject key identifier: AF:0F:E3:B9:89:C7:89:5F:F5:9A:BA:23:10:5E:90:ED:E4:E5:4B:C1
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B36A96FA291D79BA5C64BC4D3454E215E
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/rw_juYnHiV_1mrojEF6Q7eTlS8E.roa
Signing time: Mon 16 Oct 2023 04:05:55 +0000
ROA not before: Mon 16 Oct 2023 04:05:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:36a9:44f7/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:36:a9:6f:a2:91:d7:9b:a5:c6:4b:c4:d3:45:4e:21:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 16 04:05:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=af0fe3b989c7895ff59aba23105e90ede4e54bc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:38:79:7d:5d:b4:e3:2d:6b:b3:d4:aa:7e:7c:
e9:d5:35:93:8b:d0:e7:64:cb:d6:40:6f:73:4f:31:
9e:a9:a5:b5:9e:dc:b2:60:9c:00:0c:64:bb:12:7c:
54:96:1b:05:a2:38:0b:a8:a2:9f:99:e6:da:a9:fc:
3d:76:4b:85:23:97:b6:fe:ec:34:86:8f:c6:02:75:
2e:a9:48:02:4a:00:22:b5:4d:13:ae:cb:79:b5:03:
d8:c6:39:77:e0:0b:7c:a6:8c:f6:28:ff:f9:89:17:
89:9e:77:fb:64:b2:ee:93:95:02:bc:fe:fd:fa:70:
76:d7:89:58:46:c8:fa:24:46:e1:ce:90:82:b3:db:
af:ca:33:e2:ad:ff:ce:58:5d:74:93:ef:1e:41:2d:
14:4a:a5:1f:23:a6:e8:80:25:7c:c6:08:04:95:17:
50:65:3f:08:bb:49:77:87:aa:da:14:46:f7:1f:81:
3a:ea:75:bd:4c:a7:d1:50:06:41:04:be:97:f4:95:
bb:56:93:61:22:3a:68:97:0a:93:10:79:0b:ea:bd:
6a:d0:3b:a0:51:e6:1d:cf:07:1d:47:ee:5d:1e:1f:
33:5c:15:63:c3:d2:f7:e6:b7:df:e7:25:60:36:d8:
4f:ac:b9:07:40:2b:e8:b4:6e:05:72:be:98:09:9d:
97:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:0F:E3:B9:89:C7:89:5F:F5:9A:BA:23:10:5E:90:ED:E4:E5:4B:C1
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/rw_juYnHiV_1mrojEF6Q7eTlS8E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
c2:f6:fe:05:2d:7e:5e:24:cf:a7:ec:86:d1:5a:7a:ab:42:91:
6f:1a:6a:87:85:45:38:6f:c5:e6:25:34:c7:1e:2a:32:7e:7c:
43:3d:30:73:3d:30:45:bf:91:24:06:d4:fa:7f:5a:cf:d1:32:
34:57:62:25:22:63:eb:ad:62:2e:94:a3:4c:ed:c0:50:e0:19:
79:c8:fb:43:b4:f7:bc:12:bf:fa:96:94:e0:47:a3:77:68:d4:
c6:36:c9:d1:7a:c5:44:8c:32:dd:31:82:a6:fd:fb:87:51:93:
e3:69:b0:b5:61:b4:96:de:bd:e9:f2:44:b5:52:b6:37:0d:b0:
5a:a9:13:c4:19:38:6b:2f:01:d7:c7:0c:cc:e6:d1:ae:a2:bd:
1e:cc:4a:4c:8c:c2:f4:db:58:f3:e7:7a:16:af:f0:58:0d:3d:
e6:34:8d:1a:87:86:6b:5b:6e:1b:8d:4c:33:a7:44:59:8e:60:
94:41:04:44:ab:79:d8:90:29:b4:49:e1:2f:c3:36:3d:81:d2:
f2:8e:fa:62:f5:82:d8:a4:7f:63:06:c9:a1:a3:e6:bd:50:0b:
79:f5:ea:3b:e6:8e:0d:5c:bc:a9:5e:24:a8:e2:bd:85:b2:6f:
32:69:aa:e2:77:0f:67:e1:b5:f2:b1:5f:21:19:95:ae:ff:74:
ac:63:51:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 13:23:05 2025 by rpki-client