Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/wtNsnaAzE9afXFHIW_C4-u9u0n8.roa
File: wtNsnaAzE9afXFHIW_C4-u9u0n8.roa (raw, json)
Hash identifier: X3DJO5eLVHZogdfNUVqu4TL0QfSEZ5o7OG/ERhAOAwE=
Subject key identifier: C2:D3:6C:9D:A0:33:13:D6:9F:5C:51:C8:5B:F0:B8:FA:EF:6E:D2:7F
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C78216F4807CBC377375892DC27FC6794
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/wtNsnaAzE9afXFHIW_C4-u9u0n8.roa
Signing time: Sun 17 Dec 2023 14:15:06 +0000
ROA not before: Sun 17 Dec 2023 14:15:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:78:21:6f:48:07:cb:c3:77:37:58:92:dc:27:fc:67:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 17 14:15:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c2d36c9da03313d69f5c51c85bf0b8faef6ed27f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:2e:d3:7f:fa:90:f9:86:fa:94:b2:0a:6b:d5:
c1:d1:b9:9f:80:f1:c7:47:3c:2c:29:2d:a4:62:5e:
06:9f:5a:45:2b:1a:69:e4:b1:c0:60:e4:ce:ce:55:
54:39:50:07:da:21:bc:1f:76:0d:c6:f3:57:a8:42:
d3:5f:b3:66:e9:7d:be:05:aa:bc:90:6b:c4:58:1e:
b2:9f:69:c8:c1:f5:3a:d9:a0:61:5a:4d:9c:c4:65:
b8:a5:6a:26:3b:e9:63:83:72:96:30:f1:68:eb:30:
0b:62:45:68:0e:41:c6:60:df:0e:07:da:80:b7:6e:
6c:1d:6c:d0:75:a8:11:77:c6:39:c3:a3:f6:eb:27:
29:08:03:bc:ff:e4:9b:6c:45:c4:98:17:63:1f:54:
db:61:3c:ec:81:66:63:f5:60:42:b3:2d:d0:bf:10:
b6:26:30:ab:ef:d1:60:a3:33:8e:c6:22:07:aa:45:
5c:c3:bc:62:d4:c9:09:8b:a8:8e:27:86:b4:6d:6c:
fa:68:20:72:7c:65:23:98:70:af:08:97:0f:75:f8:
e8:91:c8:86:ae:07:7d:c7:a5:42:f2:87:a0:52:6b:
5f:a4:40:3d:50:a7:16:74:e6:c6:19:a8:af:45:f2:
c6:4a:46:58:96:cd:b2:c1:1c:31:6c:ea:59:a1:3f:
23:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:D3:6C:9D:A0:33:13:D6:9F:5C:51:C8:5B:F0:B8:FA:EF:6E:D2:7F
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/wtNsnaAzE9afXFHIW_C4-u9u0n8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
19:93:e5:6e:ff:34:52:f9:4e:3b:be:ae:80:57:a4:b9:67:d0:
b6:3f:de:26:92:00:23:c6:44:e0:5c:7e:69:72:62:e5:b1:03:
02:60:c5:f1:03:0e:94:b9:6b:e9:29:2e:2c:2d:c2:f8:8a:de:
15:77:f1:75:41:4a:3a:2f:28:10:87:22:15:f7:25:9e:aa:d8:
17:2f:61:9e:48:e4:56:3e:15:20:5a:af:29:dc:4b:07:73:da:
ad:2d:66:04:e4:a5:64:84:1b:f0:8a:cf:ca:b5:2f:5f:74:26:
66:04:4b:59:2f:ff:80:24:fb:f6:c8:a6:12:c6:e8:e0:cf:54:
d7:c5:bf:63:61:fd:0c:57:19:e8:a9:e5:71:21:6b:4e:b6:24:
de:9a:9a:00:45:ba:28:53:b2:d7:ab:b3:bc:51:9b:6b:1e:90:
dc:04:67:8f:9b:7b:7b:9b:4f:4d:ee:be:6a:54:77:3f:f6:b6:
e2:82:22:91:e4:d2:75:c8:5d:b2:3f:02:ed:5a:dd:f9:a2:1b:
18:20:04:19:89:6f:ca:88:d0:42:4b:92:be:99:43:af:cf:bb:
ea:b3:9d:6f:cc:7a:c4:da:1a:dc:f3:e9:28:3a:bd:0b:64:77:
ea:3a:7e:09:1e:70:3b:cc:15:19:f5:3a:a0:5c:8c:9b:92:32:
13:95:3b:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 12:28:30 2025 by rpki-client