Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/wOsLwL7whSMNrypROdz-UdDDJ7w.roa
File: wOsLwL7whSMNrypROdz-UdDDJ7w.roa (raw, json)
Hash identifier: F68HhoXnv7NyTQdRSbyOuHGMnvZboUHeDFsuwEIiueQ=
Subject key identifier: C0:EB:0B:C0:BE:F0:85:23:0D:AF:2A:51:39:DC:FE:51:D0:C3:27:BC
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AFAD108DA450093FA75989DC2CD8D915F
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/wOsLwL7whSMNrypROdz-UdDDJ7w.roa
Signing time: Wed 04 Oct 2023 13:11:57 +0000
ROA not before: Wed 04 Oct 2023 13:11:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:fa:d1:08:da:45:00:93:fa:75:98:9d:c2:cd:8d:91:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 4 13:11:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c0eb0bc0bef085230daf2a5139dcfe51d0c327bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:48:86:44:2f:7d:96:95:c0:76:3f:df:69:62:
03:57:8d:2a:fb:31:0b:85:21:7f:4c:db:a1:b9:cb:
87:49:08:15:1e:6e:cb:87:61:53:c3:7a:15:84:11:
a1:e0:50:ef:a4:6f:c2:89:5e:76:44:27:cb:a6:b5:
55:ab:7e:c3:cf:22:8a:90:82:9f:87:e3:b0:4d:3b:
ef:f6:c8:43:b0:86:72:25:5a:6a:ee:8f:96:89:a6:
e9:72:50:94:a9:00:18:b8:9a:4a:16:86:9a:e5:17:
13:fb:bc:c1:eb:9f:dc:ae:42:cc:ce:cc:5f:5e:0f:
39:ce:00:ad:78:03:ab:18:50:90:69:8e:10:bf:93:
15:dd:3e:7e:5d:8a:db:a7:ab:49:60:c5:27:b4:8c:
a8:b7:47:9d:c4:f3:d4:44:02:3a:3c:4c:7a:ad:98:
c0:85:92:95:f2:f4:7a:d0:fb:9a:e1:48:52:08:1d:
1c:0e:39:b4:8a:97:16:7d:24:90:30:e4:62:8f:67:
75:89:0e:ab:13:a5:22:ae:af:6f:8a:5d:21:c6:e9:
34:81:5a:4f:11:ae:53:7d:9d:3a:3c:e4:41:da:4b:
6d:51:f1:99:f6:90:8a:a3:c7:9c:ee:c9:f1:46:97:
6e:5b:e1:61:8b:a1:05:69:08:2c:f2:88:07:4d:57:
79:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:EB:0B:C0:BE:F0:85:23:0D:AF:2A:51:39:DC:FE:51:D0:C3:27:BC
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/wOsLwL7whSMNrypROdz-UdDDJ7w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
41:9d:5d:9e:62:fc:3d:16:1f:ed:c2:6f:d1:60:0c:2a:f1:d8:
d9:61:08:df:5e:b4:35:47:c0:51:a1:55:cd:2d:ab:c7:37:aa:
2f:c6:b4:87:bb:b2:6b:1b:10:8a:49:37:21:77:ee:6b:7c:c1:
54:40:95:80:cb:4a:20:cf:b5:d1:6b:94:c9:d3:f1:28:37:cf:
54:6b:35:27:1e:4e:2b:bf:8f:a5:12:6a:3e:fe:f3:37:21:10:
a4:0d:9e:ee:c1:b5:23:a6:ca:2e:4a:64:05:36:e3:f1:78:fd:
86:7d:60:f5:bc:a8:89:dd:48:d3:3c:4e:45:1e:45:93:c0:21:
88:f1:e3:2a:ce:cf:d9:45:27:38:d3:4e:81:e5:9f:f0:0b:ae:
d8:d9:c6:87:ed:2b:a7:59:da:4b:c3:dc:63:ce:87:3f:47:b2:
2b:ab:7b:38:f9:45:d4:64:5a:eb:64:24:be:ce:60:f6:04:08:
06:f9:5a:9a:35:ca:7c:48:78:8a:ac:89:ec:a2:ee:c1:a6:48:
50:f6:19:ba:cb:2c:dd:c3:27:f0:75:9c:93:0e:f8:39:d9:67:
64:83:6a:cf:f2:97:4a:ef:5c:f2:3a:b1:16:c3:33:2a:2d:a7:
36:4e:a1:9d:dd:64:0b:8c:91:35:a3:3b:8e:c5:67:74:2e:66:
1a:42:2b:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 18:36:20 2025 by rpki-client