Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/wQDRUNwsCfukNSgf3RILjN_BlAw.roa
File: wQDRUNwsCfukNSgf3RILjN_BlAw.roa (raw, json)
Hash identifier: 31riy+TCOyr+Cwf5FIfjcY5u0mqn7WbFj1isNPsJEhI=
Subject key identifier: C1:00:D1:50:DC:2C:09:FB:A4:35:28:1F:DD:12:0B:8C:DF:C1:94:0C
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C540B5F65BD971212EE83A0B858A1FD79
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/wQDRUNwsCfukNSgf3RILjN_BlAw.roa
Signing time: Sun 10 Dec 2023 14:04:40 +0000
ROA not before: Sun 10 Dec 2023 14:04:40 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64:ffff:0:18c:540b:33e/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:54:0b:5f:65:bd:97:12:12:ee:83:a0:b8:58:a1:fd:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 10 14:04:40 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c100d150dc2c09fba435281fdd120b8cdfc1940c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:79:ea:74:6b:ee:66:6a:b2:b8:2b:72:6c:c8:
64:aa:c3:35:66:0d:95:3b:53:4d:5d:cd:bf:1d:73:
9e:d3:44:50:6d:94:1f:25:fe:8a:9e:c7:77:56:16:
0f:cd:90:d7:7c:37:0d:4f:47:37:ee:52:4b:ef:2b:
25:9d:4c:03:3e:bc:f6:36:54:ad:cb:12:35:e0:a1:
a0:b2:27:47:9b:dd:69:05:45:1f:00:d5:6d:20:5c:
15:00:78:4d:13:d6:a5:c6:9d:08:9d:fa:8f:43:2f:
e3:48:49:ca:10:9a:a1:9a:87:c2:20:08:0e:21:9a:
8f:cc:b0:b3:95:73:51:2d:9e:53:8b:f2:24:5b:b3:
89:55:d4:cb:27:62:2d:91:11:b3:1a:b2:19:c0:c3:
37:7e:c0:fd:53:f9:a5:1b:a3:27:d7:42:10:2b:e2:
b4:15:19:6f:ab:06:16:f3:7d:33:64:73:f7:22:26:
d5:88:99:1c:27:b9:8d:13:d5:4d:aa:ed:fc:c9:e9:
39:a8:4e:ec:63:e9:4e:8a:b2:74:9e:18:73:8c:47:
74:8c:43:df:be:2d:b8:1b:d2:3a:bc:8b:bc:65:11:
e2:f0:cb:6d:13:bc:a7:01:51:03:3b:20:b0:35:23:
00:4d:0d:a3:f8:cc:cc:fa:78:62:b4:f3:61:7c:10:
8c:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:00:D1:50:DC:2C:09:FB:A4:35:28:1F:DD:12:0B:8C:DF:C1:94:0C
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/wQDRUNwsCfukNSgf3RILjN_BlAw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2c:48:ef:a5:7b:16:a6:c0:9b:d9:1b:8d:a0:ef:7b:95:1e:ae:
05:99:a3:54:37:60:99:5c:31:8d:9a:2b:87:35:99:82:3d:47:
7f:41:17:80:c3:35:53:26:8a:93:b7:72:9b:ec:78:7b:5d:41:
09:fb:a5:37:3d:50:32:78:bb:00:29:36:41:ef:65:5a:55:6d:
d6:15:e1:d0:b4:af:62:58:ab:3e:da:a8:fc:ff:97:31:7f:ea:
ed:4a:78:ae:c3:d3:54:6b:bd:70:ae:b0:5a:44:ed:a3:02:7d:
23:f1:2b:22:91:b9:37:4c:07:fd:83:98:b5:ee:5b:3b:41:29:
0d:46:a9:07:26:c5:a3:90:7b:a2:aa:28:e2:f8:42:8a:b3:81:
7a:46:9b:e1:64:c3:d7:ba:64:fc:2c:77:38:1a:bd:8b:c6:db:
69:e6:38:1e:2c:b4:54:88:a7:78:5b:b4:2e:49:94:43:3d:62:
b7:95:1b:d2:58:90:b1:9e:41:ae:2c:4b:1f:9c:e5:e2:1d:98:
57:9b:f1:c2:95:3c:fe:f1:61:96:7e:e2:b8:9d:da:ec:41:42:
10:fc:e4:0f:45:e3:e9:6f:ef:6a:f3:94:71:11:e8:14:b1:78:
98:bf:2b:bb:20:88:69:21:bd:65:27:c3:50:55:9b:27:1a:1b:
22:5c:45:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 19:30:12 2025 by rpki-client