Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/whrqbgNjCZSTOMGxUGVIeHU5arc.roa
File: whrqbgNjCZSTOMGxUGVIeHU5arc.roa (raw, json)
Hash identifier: OYTPnRrSOAWKs1jd/d/eflOSUwjz2hRlhz/jCboEYII=
Subject key identifier: C2:1A:EA:6E:03:63:09:94:93:38:C1:B1:50:65:48:78:75:39:6A:B7
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B9E15E1195F72CCA3D0E279A3E269A65A
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/whrqbgNjCZSTOMGxUGVIeHU5arc.roa
Signing time: Sun 05 Nov 2023 06:05:15 +0000
ROA not before: Sun 05 Nov 2023 06:05:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:9e15:3bba/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:9e:15:e1:19:5f:72:cc:a3:d0:e2:79:a3:e2:69:a6:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 5 06:05:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c21aea6e036309949338c1b15065487875396ab7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:15:95:b5:e2:86:26:81:80:eb:46:26:70:19:
bf:ec:70:de:bf:ad:39:b8:1f:a8:af:24:ca:50:59:
c2:b4:64:99:6d:e5:87:87:e3:de:20:25:7f:41:52:
96:0e:49:7c:7a:1a:7b:39:fb:b2:75:b5:f6:3c:a1:
c7:51:d1:95:dd:ac:c9:0d:ca:3d:37:e3:51:d7:b7:
c6:ea:c2:db:ba:e2:c2:f4:5b:d4:c7:89:0e:27:94:
b0:8b:4b:09:a7:6f:40:bf:98:fd:56:1d:b1:b5:66:
77:d0:ec:22:85:e8:70:b7:39:d1:b0:2e:db:76:7e:
b5:0a:64:e1:73:c8:bc:0d:62:e4:96:11:46:e6:62:
ab:9e:ac:63:d4:f7:6f:9d:c3:49:84:05:b6:91:db:
dd:04:bb:95:fc:62:a9:ff:53:e6:a9:5a:30:8e:b3:
a2:66:8b:29:43:5b:c4:e1:56:ea:71:b9:f6:d4:a2:
0e:69:5b:3c:90:6e:f8:27:ca:80:71:50:d0:f5:2e:
4e:6f:06:9d:9a:c5:7f:b0:f2:28:6e:13:80:b9:2c:
82:33:13:75:d0:f8:c3:61:66:82:83:b3:31:21:12:
85:59:ab:3d:eb:ba:d7:aa:26:6e:21:6b:62:e1:d1:
cf:9b:d1:5d:87:8c:a5:8f:ba:16:e8:3c:fe:0a:80:
6c:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:1A:EA:6E:03:63:09:94:93:38:C1:B1:50:65:48:78:75:39:6A:B7
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/whrqbgNjCZSTOMGxUGVIeHU5arc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5a:3d:e4:36:51:af:73:e6:ea:62:4e:4d:8f:0a:d4:51:7c:8c:
6d:bc:f9:a4:8d:81:bf:59:85:c8:fd:84:f4:9e:2f:41:59:c9:
69:cb:f2:8e:9f:2e:75:75:48:e4:f2:1a:5a:f3:f7:6c:82:6a:
8c:76:75:52:7a:f3:e7:97:b4:48:57:45:64:49:59:3a:49:6e:
95:f2:fe:a8:83:d4:3b:e1:8b:5c:ca:a3:03:61:d5:d0:a8:50:
22:6f:d5:42:41:66:18:68:c6:7e:2e:92:c0:79:0e:48:b0:c9:
4d:7b:be:f5:3f:6b:d6:2e:9e:79:a5:b8:af:76:40:4c:b0:24:
26:b0:6f:11:96:d3:3f:db:1f:50:b1:2a:e3:0b:1d:ae:65:14:
d7:89:c0:94:b7:b9:ee:96:da:e2:d4:38:a9:03:4e:ef:89:ad:
dc:84:bf:a5:93:65:dc:9c:01:9b:68:db:ae:c2:ed:70:4b:69:
9b:06:b5:5a:b5:ab:fd:7d:89:50:aa:f0:d2:ee:27:40:e1:c7:
64:55:57:07:d9:9d:26:01:62:57:75:17:ac:ee:64:b7:46:69:
27:65:59:64:d5:a6:77:15:ef:73:65:85:1c:fd:0f:dc:d7:e2:
b4:48:af:10:f3:9f:f5:92:b3:c5:01:ef:7b:98:29:82:57:a2:
f7:60:07:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 01:16:58 2025 by rpki-client