Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/w_8cICxNtCkgWVMDawaKAOhmGBw.roa
File: w_8cICxNtCkgWVMDawaKAOhmGBw.roa (raw, json)
Hash identifier: S1RM5WIQhL6scHUn7pEg8VgIIu4lJ8WZq72ZyMEdOLU=
Subject key identifier: C3:FF:1C:20:2C:4D:B4:29:20:59:53:03:6B:06:8A:00:E8:66:18:1C
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B5ECE259E53840883A5D36AD2CDD69625
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/w_8cICxNtCkgWVMDawaKAOhmGBw.roa
Signing time: Mon 23 Oct 2023 23:10:50 +0000
ROA not before: Mon 23 Oct 2023 23:10:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:5ec8:21ad/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:5e:ce:25:9e:53:84:08:83:a5:d3:6a:d2:cd:d6:96:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 23 23:10:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c3ff1c202c4db429205953036b068a00e866181c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a3:66:21:ed:e4:6f:91:f2:a6:07:53:1b:25:
04:09:b4:4b:80:12:19:22:85:e0:ae:de:52:16:fe:
f0:f1:06:dd:24:f7:d1:94:4b:8f:75:0d:51:0a:91:
ce:15:dc:7f:65:77:e5:20:46:d9:46:54:59:ee:02:
83:ed:4b:fc:f6:b6:a8:38:07:fd:23:80:6e:54:45:
95:13:69:66:74:da:10:d0:7d:aa:98:0b:4d:a2:ae:
5d:32:52:d7:38:92:d8:e6:86:f7:98:f2:58:36:c8:
bf:95:80:08:ad:b2:9c:c2:3d:f4:69:4e:4a:98:1c:
db:29:73:88:81:94:59:e4:cd:3d:34:d5:f5:09:58:
5e:19:13:7e:11:09:b0:56:f2:e5:ea:0d:1c:0c:47:
dc:7a:95:cf:9c:db:43:eb:f3:cc:d7:6d:68:8c:0a:
05:43:36:4b:d0:fc:4c:7f:79:b0:c5:98:fc:4f:c7:
91:8d:d5:4a:c7:0f:a1:dc:bb:1a:e6:64:4e:c5:15:
7b:3f:c5:57:6e:24:46:96:15:d7:c0:ea:16:4e:bb:
0e:b9:ad:ab:b9:0f:e5:3d:9a:6c:4a:2b:04:e3:84:
f9:20:7a:ad:de:95:d3:03:d8:86:36:7e:4f:17:79:
5a:c1:82:6f:27:fd:fd:07:57:9a:78:aa:ac:da:a5:
1e:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:FF:1C:20:2C:4D:B4:29:20:59:53:03:6B:06:8A:00:E8:66:18:1C
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/w_8cICxNtCkgWVMDawaKAOhmGBw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7b:02:08:72:7d:64:af:87:93:cc:12:76:88:74:11:5c:2e:f3:
a6:0d:04:f4:32:fe:91:f3:04:94:7b:aa:5b:18:e0:1e:91:20:
67:63:22:d2:b8:67:df:06:dd:91:6b:28:79:eb:6e:66:07:7a:
33:e5:8a:7a:80:f7:57:d3:5f:4c:9a:02:07:78:30:f7:a8:b3:
8f:48:9e:47:83:e3:93:da:b8:12:bf:e6:a3:b4:4d:dd:17:4e:
59:10:80:c4:c3:78:64:a0:e0:59:b7:b3:c1:c7:c0:0c:ee:9e:
46:21:77:7a:35:2d:c5:1f:39:b6:34:3c:bb:e9:23:74:5e:5e:
54:0b:25:fd:66:09:95:97:40:dc:0f:8f:64:e5:8b:74:ff:64:
94:36:5b:d1:4e:55:16:54:79:e7:d4:34:b0:69:e9:56:bd:17:
af:32:54:0a:53:47:e6:e2:d4:dd:2b:eb:1f:29:31:9b:d0:9d:
0f:64:32:50:63:c7:25:9c:7b:4d:67:46:25:1a:1d:f4:54:c4:
23:cc:b8:72:b7:35:33:6d:98:19:26:e7:51:e9:ff:4a:51:1d:
0d:bd:21:20:b2:97:aa:3a:45:16:ba:92:b3:fa:2e:19:5c:86:
17:a3:9c:c0:88:b6:65:3d:d4:31:63:15:c1:6d:90:3a:d6:20:
20:4f:ab:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 12:30:20 2025 by rpki-client