Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/wUHf8Fa5jWaRI7IAo8b4Cs5Zlu4.roa
File: wUHf8Fa5jWaRI7IAo8b4Cs5Zlu4.roa (raw, json)
Hash identifier: u7QUoyS3/ZLZRxwDhmH7waVVAoBYvarzKvgQCT4wu5Q=
Subject key identifier: C1:41:DF:F0:56:B9:8D:66:91:23:B2:00:A3:C6:F8:0A:CE:59:96:EE
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C19111F16566FBC67D2D4C77517A8843B
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/wUHf8Fa5jWaRI7IAo8b4Cs5Zlu4.roa
Signing time: Wed 29 Nov 2023 03:13:21 +0000
ROA not before: Wed 29 Nov 2023 03:13:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:19:11:1f:16:56:6f:bc:67:d2:d4:c7:75:17:a8:84:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 29 03:13:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c141dff056b98d669123b200a3c6f80ace5996ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:ea:6e:e5:50:a8:81:d1:12:ae:06:7b:82:7f:
fa:22:f8:47:23:fb:09:33:d5:ea:95:ca:0e:9e:2d:
68:2a:f6:a5:13:f9:63:50:fb:f5:07:18:9b:70:36:
0d:12:ce:11:e3:42:c5:f5:8f:6a:4c:cb:d0:0d:1b:
4e:53:1a:5f:46:af:cf:ba:f2:25:fd:f4:cd:26:63:
5b:13:f2:89:7e:e9:43:4c:8a:e1:24:8c:b4:b4:e3:
2f:1a:86:31:ac:05:c6:48:83:10:10:8c:ea:11:1f:
ef:4b:1a:ec:c3:0d:81:2e:6d:6f:87:12:94:b6:a2:
29:54:dc:c9:f4:02:39:e3:e2:05:ea:49:dc:8b:96:
3c:77:1e:19:bb:76:6a:63:07:e3:17:a7:9f:7f:1d:
f9:e1:00:e9:64:73:2f:69:70:f8:57:62:4d:95:ed:
e8:68:48:d2:d2:e0:65:ee:96:09:b7:26:87:8d:7e:
cb:1b:93:dc:1a:de:7e:1e:ab:d9:e0:11:8e:95:a7:
f3:84:14:0e:da:dc:51:ec:7b:05:dd:96:36:07:c7:
8f:37:0f:cb:bf:fa:5d:14:e6:00:73:6d:32:a8:2f:
18:3f:02:30:f1:ac:16:e9:21:9d:6d:1f:b2:06:32:
75:f0:31:9d:b0:39:03:05:c2:d6:4c:b8:fb:56:75:
bf:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:41:DF:F0:56:B9:8D:66:91:23:B2:00:A3:C6:F8:0A:CE:59:96:EE
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/wUHf8Fa5jWaRI7IAo8b4Cs5Zlu4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
39:dd:86:c2:47:94:47:ff:97:6c:c8:90:6b:d9:3d:da:cf:54:
35:05:9b:58:01:ea:cb:34:4c:29:59:05:b8:16:e1:3c:da:83:
ea:eb:ba:57:cd:17:4a:05:18:f2:11:f6:27:5f:28:e3:65:c1:
a0:46:3b:94:9d:82:ee:06:65:5d:be:40:3a:1a:1b:7b:26:2c:
38:c3:5e:23:de:58:c2:e9:94:68:5d:82:dc:30:c9:88:cb:57:
6c:f3:4b:cb:b8:3e:68:99:6b:cc:e4:76:7b:54:e9:99:f5:de:
0c:32:61:73:e7:d5:90:d0:28:6f:85:37:c6:07:97:be:66:f0:
62:19:8b:62:06:e8:e7:5d:25:fd:5b:d3:c6:d3:d4:a9:87:d8:
b1:0c:2f:78:5e:dd:9f:04:6b:b2:fb:dc:9f:b0:05:f2:8a:4f:
70:86:86:dc:e4:b6:6f:4c:24:ab:5f:31:e7:0a:73:70:67:69:
f5:86:f7:3d:f6:2e:a4:63:f0:70:d5:00:c5:69:56:94:26:13:
20:01:13:4a:35:ae:98:7a:60:05:94:3a:8e:9a:f1:f5:77:cd:
1e:e4:82:02:a9:bb:a0:0b:88:8e:bf:80:75:29:94:4a:d3:17:
7d:1f:b1:44:94:f0:78:5f:cc:00:ca:a8:3e:bb:2c:ec:5e:d7:
b1:d5:50:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 16:54:57 2025 by rpki-client