Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/w-WALrKHD6kpqAe9pCNNP6Atq9A.roa
File: w-WALrKHD6kpqAe9pCNNP6Atq9A.roa (raw, json)
Hash identifier: puK7GqsIhPXV7Hc2VAAUM8/9NNFA+D3w0zZWuhL0y+o=
Subject key identifier: C3:E5:80:2E:B2:87:0F:A9:29:A8:07:BD:A4:23:4D:3F:A0:2D:AB:D0
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BB8B5B2FD6A1B410B8BA817E25BB2B8C1
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/w-WALrKHD6kpqAe9pCNNP6Atq9A.roa
Signing time: Fri 10 Nov 2023 10:09:57 +0000
ROA not before: Fri 10 Nov 2023 10:09:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:b8:b5:b2:fd:6a:1b:41:0b:8b:a8:17:e2:5b:b2:b8:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 10 10:09:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c3e5802eb2870fa929a807bda4234d3fa02dabd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d3:04:91:24:de:31:c5:89:37:c5:6d:2f:82:
75:67:1f:c6:a8:d3:81:35:ef:80:26:ab:5d:a8:f2:
e9:8f:9c:58:1f:54:2b:5a:f5:28:51:14:20:4e:cf:
10:e6:24:48:64:66:dd:98:94:23:8f:fa:e1:be:6c:
b3:ab:29:a6:98:fc:11:39:5b:68:c3:ad:ea:be:9b:
04:5f:26:43:83:00:e8:f8:42:2c:c8:aa:a8:43:4b:
f4:59:cc:78:51:18:cb:76:f6:79:27:9c:5e:7d:21:
b3:e9:e4:38:83:43:25:b7:f9:ef:bd:a5:12:d3:01:
d6:bd:e5:e5:9b:86:48:1b:2c:ee:f8:ab:ca:be:78:
3d:04:42:23:a6:a9:61:6a:3f:1c:33:a1:5a:8a:33:
be:1a:ab:5a:3b:bc:a2:93:88:ed:1f:ee:a1:08:d2:
19:35:73:aa:fd:0a:e9:99:09:b5:81:a5:f3:10:f7:
5d:19:ae:a2:52:78:64:c0:b1:fb:fa:fa:21:ab:0e:
4c:d2:bb:b5:f4:94:b2:53:47:96:85:ac:88:15:0e:
52:ef:aa:41:a4:17:f8:0d:5e:af:39:10:bb:50:3e:
ad:47:7b:ab:4c:d1:c3:bc:9d:13:5b:eb:1a:e3:07:
b4:9e:cd:d0:15:7e:88:a7:18:54:61:81:1b:01:85:
1b:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:E5:80:2E:B2:87:0F:A9:29:A8:07:BD:A4:23:4D:3F:A0:2D:AB:D0
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/w-WALrKHD6kpqAe9pCNNP6Atq9A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
17:52:9b:e3:cf:9a:8c:12:3f:db:40:8a:e1:24:89:c7:2e:95:
6a:fa:e9:ec:9d:57:e5:e1:51:cf:d5:62:e1:66:b0:6c:5f:6a:
b4:8b:ce:2e:66:27:44:b6:da:cf:5a:b5:e5:4a:57:16:0a:9f:
b7:58:35:37:47:eb:36:bd:38:aa:ff:66:e8:aa:62:cd:b3:e3:
4b:77:9a:2b:5e:a6:c6:07:df:24:09:11:5f:23:bd:c6:1a:8f:
7c:e3:c3:0f:0a:4b:ed:ea:bd:b8:09:69:33:ce:cd:9e:d0:c9:
3a:ff:9a:98:ce:3e:13:2d:ab:2d:9d:d2:38:7d:21:c3:96:e6:
a5:11:93:28:9e:bf:19:9a:cd:0e:0c:a6:1c:c2:b7:8d:43:0b:
9f:14:27:25:d2:6a:af:6e:b0:27:85:4f:d1:7c:75:10:2a:ae:
4d:02:38:3f:5b:0d:ae:9e:78:d5:ea:40:e3:01:48:23:76:60:
d7:78:4e:1d:56:79:80:48:e1:5f:c9:3f:da:b6:f3:6d:23:08:
2c:2a:c5:87:bb:3c:81:8c:89:24:93:7f:cf:8c:81:67:f1:77:
95:9d:5c:8d:9c:a2:d1:b1:ae:bf:07:af:cb:9d:53:6d:d5:63:
d1:d0:8f:be:7e:03:1b:9b:7c:e9:a6:c4:1e:9b:01:c7:b6:2f:
d8:f6:3d:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 16:50:49 2025 by rpki-client