Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/w28G6peP_bkEGPOmrhrWEn2bmvE.roa
File: w28G6peP_bkEGPOmrhrWEn2bmvE.roa (raw, json)
Hash identifier: iZ4KJ5RBqE/sp9i0G87a3u2rKtIRUDLstbhjnGIInJU=
Subject key identifier: C3:6F:06:EA:97:8F:FD:B9:04:18:F3:A6:AE:1A:D6:12:7D:9B:9A:F1
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BE9660E0813E37AC4C5A32701135AB4F1
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/w28G6peP_bkEGPOmrhrWEn2bmvE.roa
Signing time: Sun 19 Nov 2023 21:04:21 +0000
ROA not before: Sun 19 Nov 2023 21:04:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
2001:67c:64:ffff:0:18b:e965:fbf9/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:e9:66:0e:08:13:e3:7a:c4:c5:a3:27:01:13:5a:b4:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 19 21:04:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c36f06ea978ffdb90418f3a6ae1ad6127d9b9af1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:a6:c3:c9:ab:e8:34:2d:a8:01:6c:64:43:17:
f8:0d:86:37:aa:42:6c:46:0b:a5:e9:d8:c2:38:41:
69:05:50:c9:ef:8e:74:e9:0c:2a:cc:78:72:75:ef:
57:e9:10:53:96:33:f9:9b:7b:69:24:73:b7:99:c3:
5b:56:15:0b:da:da:a9:1d:3e:db:fc:98:8d:27:b8:
fa:45:c2:df:23:7e:3e:bd:1a:57:4b:d6:d3:eb:e1:
8c:63:46:6d:fa:20:f5:d4:12:cb:12:a7:55:42:ff:
0c:b9:f6:32:0d:e7:e9:37:bb:66:13:21:94:b0:b7:
f6:87:c3:59:2f:ee:44:42:90:67:9c:36:52:9d:9e:
2f:6e:0c:b8:6f:f2:dc:f8:00:40:02:68:77:9a:d0:
b1:d7:14:59:07:aa:02:6b:60:27:f2:ef:cb:3e:53:
4c:89:99:54:c8:ae:2e:f1:ae:a9:b9:1d:73:38:03:
e5:d3:c0:d2:b0:ce:78:7b:24:d7:1e:e3:6c:a1:54:
9c:3f:c6:c0:a0:eb:90:16:1d:4b:2c:63:02:e3:ea:
f7:92:54:dc:3b:2a:1a:25:d1:89:be:e8:ca:db:4e:
ae:0d:40:11:71:b7:f1:14:3b:b6:b4:ac:3b:b0:92:
28:96:e8:16:d9:ea:df:81:0d:9b:94:0a:c8:e4:3b:
c1:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:6F:06:EA:97:8F:FD:B9:04:18:F3:A6:AE:1A:D6:12:7D:9B:9A:F1
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/w28G6peP_bkEGPOmrhrWEn2bmvE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5c:28:96:e4:94:ca:8a:e7:cf:af:27:e2:60:54:ca:6e:c0:62:
d6:59:6a:8e:43:63:9f:91:b8:27:77:9b:20:22:ed:67:00:92:
aa:a8:8e:50:26:18:ee:c1:24:fa:14:3e:d0:08:15:58:d7:a5:
c9:2b:ce:5d:77:1c:d7:6a:e7:81:fe:2b:e7:70:90:4b:ba:6a:
8f:21:51:92:e3:db:ea:56:c5:ca:09:10:7e:8b:b8:59:83:5b:
14:f1:60:23:41:eb:a8:74:69:85:9d:10:36:31:b5:9a:d2:e7:
7c:1e:0e:61:5d:1c:c7:66:d9:bb:78:2f:4f:5d:ea:05:ae:41:
04:4b:58:61:5e:56:e5:f2:2a:0e:fe:b5:f5:89:fc:78:48:1b:
97:ed:03:33:21:34:d0:88:87:fc:06:7e:19:f5:60:89:99:1d:
a7:bb:da:17:ce:3b:de:1b:2e:70:1a:0f:a6:c8:71:8f:4e:ac:
8d:2c:da:54:ca:4d:1a:01:c0:fa:0c:87:86:7d:25:2b:6a:b2:
51:5a:47:dc:49:c6:06:0a:e2:2b:89:80:38:dc:56:27:75:25:
9d:34:aa:5e:34:0c:0b:19:ef:2d:5d:74:cb:2d:60:84:81:11:
0a:34:df:34:7b:ce:25:44:d6:42:0e:33:0a:6a:7a:c5:38:82:
11:4e:e2:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 16:40:05 2025 by rpki-client