Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/w6JDZVANMAoXLYf1btJ5UtOg8YM.roa
File: w6JDZVANMAoXLYf1btJ5UtOg8YM.roa (raw, json)
Hash identifier: 2vYKPtUrAA5ZEbZuDw4UInz6CZXSZdm8+jY8GFqR+dQ=
Subject key identifier: C3:A2:43:65:50:0D:30:0A:17:2D:87:F5:6E:D2:79:52:D3:A0:F1:83
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C02810F0B1778AD553D25D53535FDCC77
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/w6JDZVANMAoXLYf1btJ5UtOg8YM.roa
Signing time: Fri 24 Nov 2023 18:04:21 +0000
ROA not before: Fri 24 Nov 2023 18:04:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18c:280:a86f/128 maxlen: 128
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:02:81:0f:0b:17:78:ad:55:3d:25:d5:35:35:fd:cc:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 24 18:04:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c3a24365500d300a172d87f56ed27952d3a0f183
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:fd:9a:31:b1:1b:2a:a8:76:81:64:52:b3:63:
a1:1e:70:ee:35:33:94:e8:06:89:e6:d9:87:44:e3:
9a:60:d1:5a:00:99:a1:55:0c:3e:ed:0d:a4:10:4b:
22:18:35:d7:92:14:e2:87:74:ea:f9:6a:85:ca:06:
4e:eb:dc:66:eb:4d:4d:ae:c5:86:f0:f8:b4:df:01:
ca:64:87:c8:55:f6:8c:ec:c6:d9:74:4a:16:fe:db:
28:85:57:3e:4a:43:16:3b:dc:2b:86:ab:d4:aa:03:
6d:a1:35:db:a1:3e:13:85:79:00:30:d5:3a:4a:52:
be:11:03:35:52:48:9e:7c:89:e4:88:c2:0e:80:d9:
01:f8:f8:1a:5c:b9:3e:19:17:b2:53:29:c4:cd:05:
23:a3:01:33:cd:f9:91:be:08:66:fb:63:41:5f:7e:
10:68:62:ed:6d:ae:86:22:fd:d9:e9:d9:5a:20:3b:
21:8e:57:8a:3d:97:9e:17:0f:7e:35:d6:1e:78:e5:
2b:4a:eb:13:0f:69:11:67:2f:b6:a8:7d:da:74:1a:
8f:9a:13:3a:91:7b:25:41:11:81:18:ab:33:76:24:
72:6f:7b:00:56:36:c6:9f:4b:be:75:56:01:eb:02:
48:fe:fb:0f:51:a1:e2:8b:dd:c2:df:c8:77:c1:c6:
13:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:A2:43:65:50:0D:30:0A:17:2D:87:F5:6E:D2:79:52:D3:A0:F1:83
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/w6JDZVANMAoXLYf1btJ5UtOg8YM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
c1:c0:9d:c9:52:06:cf:fe:30:69:df:3b:d3:8d:07:92:c5:31:
66:3f:04:28:d5:99:bf:f2:6f:dd:cd:6f:59:d4:b4:a2:1b:1d:
f1:a1:52:2c:32:c8:98:65:fe:95:92:9c:04:c1:fb:36:53:ac:
7a:d6:68:49:e9:2c:fa:34:00:3a:64:d8:6d:0a:a2:08:f7:c9:
22:d8:ec:10:e3:34:65:e2:b6:d6:88:0b:75:91:b8:a5:bd:0b:
a8:09:ba:51:1c:79:ba:76:c9:d5:23:90:b1:ee:32:8b:d7:e9:
7f:e2:83:c0:d3:b5:08:14:0f:18:93:fe:dd:83:03:bb:b8:33:
dd:dc:a9:f6:da:1d:c9:c2:f2:0e:76:2e:72:9a:34:5e:59:30:
fb:81:8c:5a:04:ef:44:d1:6b:0b:a9:da:3c:9e:56:78:d0:80:
41:7a:1c:b2:b3:29:33:80:59:0d:6d:fb:dc:ff:d7:7c:31:6b:
16:1d:e0:74:50:b5:61:9d:54:39:11:b1:b0:d0:87:24:cc:d5:
a2:eb:77:42:b4:27:5a:00:85:54:4f:8d:a9:93:bd:6f:3c:31:
ad:5a:ae:a4:88:3d:f4:c7:ff:ad:c0:3a:ab:76:82:6e:c5:31:
eb:b7:5a:a4:8a:08:1c:ba:a9:71:76:0a:62:04:24:80:68:17:
03:07:b1:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 15:27:04 2025 by rpki-client