Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/w_ZXJkgJWOd2lJ-f3zLHR9IKJbs.roa
File: w_ZXJkgJWOd2lJ-f3zLHR9IKJbs.roa (raw, json)
Hash identifier: //CQvaYTo3n5y/4/jSolw6qyjeZyOi28ybXCbkrvp9U=
Subject key identifier: C3:F6:57:26:48:09:58:E7:76:94:9F:9F:DF:32:C7:47:D2:0A:25:BB
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C740AFCCB450463A5466E51CC00AAD32F
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/w_ZXJkgJWOd2lJ-f3zLHR9IKJbs.roa
Signing time: Sat 16 Dec 2023 19:12:06 +0000
ROA not before: Sat 16 Dec 2023 19:12:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:74:0a:fc:cb:45:04:63:a5:46:6e:51:cc:00:aa:d3:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 16 19:12:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c3f65726480958e776949f9fdf32c747d20a25bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:b9:73:c9:9b:d3:9b:dc:f4:b7:e8:35:df:fe:
f9:61:ea:e4:37:ac:66:81:5c:98:cd:12:5a:89:b6:
79:f5:9a:68:00:9e:7b:64:3e:ec:0d:92:79:29:86:
d8:24:a2:de:a1:97:67:4d:3f:b8:5e:6b:88:f8:a3:
59:4a:dd:6e:71:62:6b:62:67:e3:62:d2:81:7c:4b:
98:74:ed:5e:27:59:c8:11:c1:fa:b8:76:6e:48:86:
80:ed:98:fc:ee:e0:83:4f:9a:19:44:5c:d7:f7:31:
c3:2d:0f:5e:88:df:5c:2a:6d:b9:01:56:82:a8:ab:
8b:78:c2:03:27:30:ba:a5:3f:27:0d:ef:92:59:c5:
19:73:bc:ef:2c:73:48:c3:13:ab:d9:b8:0c:f6:b1:
c7:db:a3:28:49:45:5c:f2:26:41:a2:a5:ea:ec:9b:
b6:bb:5b:1a:c7:ab:84:c8:1b:e6:1d:03:15:84:00:
bb:04:3d:3a:62:1a:18:8e:e3:dd:ec:7f:ab:52:4c:
5e:ac:5b:a6:2a:c5:b9:cc:ff:27:4e:fe:0c:4c:62:
83:79:72:d4:ec:3b:75:bb:e9:fd:c4:e9:61:00:7d:
0a:37:5b:8a:1f:f9:f5:68:1c:f3:a9:b2:63:1c:a9:
e2:4e:a1:04:4f:96:c1:e2:18:2e:54:90:5a:69:34:
97:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:F6:57:26:48:09:58:E7:76:94:9F:9F:DF:32:C7:47:D2:0A:25:BB
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/w_ZXJkgJWOd2lJ-f3zLHR9IKJbs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
60:c7:38:74:65:87:f8:a7:7f:93:f5:79:fa:0b:14:a4:d7:04:
df:18:19:d7:92:22:89:09:fd:02:da:89:d6:b6:a4:b5:28:21:
90:d7:de:9b:d2:eb:64:70:4c:99:11:05:67:2a:8f:dd:36:1d:
6e:fb:42:92:7a:28:22:50:be:a6:94:17:42:fd:e8:05:3b:46:
7b:22:b8:69:3e:ca:c3:3d:32:84:06:51:96:fb:ed:0c:a7:8d:
69:57:22:7b:19:00:38:db:97:2d:41:d2:a1:be:48:c8:a0:f8:
25:99:66:10:65:77:9e:57:6a:58:9f:1d:f4:c7:3f:96:3b:82:
92:91:cd:53:cb:46:30:78:89:be:f7:cc:f0:73:8b:22:23:88:
83:59:1d:f4:b2:cf:70:17:24:95:89:38:78:1c:60:85:a5:fd:
a2:b0:8d:f1:35:23:2a:f9:6f:ef:4c:b2:7a:00:d6:9d:3f:4a:
de:57:18:38:a4:ec:cd:55:bf:e6:c7:4f:9d:f3:c7:2e:f0:96:
62:f6:a8:b8:74:6c:f4:58:0e:00:e1:96:b2:7e:61:ac:3e:18:
ca:4b:cb:c0:9f:6c:7c:0e:5e:7e:a4:48:e0:e2:ee:6f:a2:1b:
36:1d:b8:e8:5d:38:35:fd:4f:8f:2e:51:50:b8:f0:bf:18:ae:
b8:a9:a6:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 19:55:25 2025 by rpki-client