Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/WP7iGkAkzUcrOFA50-EVxphTGo4.roa
File: WP7iGkAkzUcrOFA50-EVxphTGo4.roa (raw, json)
Hash identifier: GBdvdmtmGqNb/c7V0X2vMJT/pNer/FuyLNxGOXF7kl4=
Subject key identifier: 58:FE:E2:1A:40:24:CD:47:2B:38:50:39:D3:E1:15:C6:98:53:1A:8E
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018DBA99DBE0EB3D48903A3C9440A180BDAB
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/WP7iGkAkzUcrOFA50-EVxphTGo4.roa
Signing time: Sun 18 Feb 2024 05:04:21 +0000
ROA not before: Sun 18 Feb 2024 05:04:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:4013:c01e/128 maxlen: 128
2001:67c:64:ffff:0:18d:ba99:b9d8/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:ba:99:db:e0:eb:3d:48:90:3a:3c:94:40:a1:80:bd:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Feb 18 05:04:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=58fee21a4024cd472b385039d3e115c698531a8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:68:c7:9d:b7:aa:92:40:ad:bf:2d:f1:05:85:
23:82:bb:95:ec:bc:90:b5:1f:88:96:dc:b3:0e:5b:
66:e4:b6:bc:5b:26:12:75:22:31:11:e6:80:90:ea:
1a:3f:50:f5:b2:b6:e9:13:64:90:43:71:7a:3d:2f:
12:9b:37:ab:90:4e:98:84:75:19:17:1c:7f:a5:18:
1d:9d:21:3b:88:6e:a5:32:d5:ff:5d:17:fa:85:8f:
5d:c4:72:93:82:10:41:b9:2b:e7:f7:e4:9d:70:76:
d3:4b:25:ee:da:46:9a:c6:da:50:f3:b1:03:ef:33:
cf:81:84:48:9d:30:3b:58:9d:34:e6:b3:60:6b:31:
4e:fc:d0:b1:a6:ec:29:c1:12:d2:65:a7:c2:c8:15:
12:ff:7f:3a:a7:df:0a:68:6b:8d:18:ac:b5:c8:55:
ec:f1:1a:3f:fd:6b:5d:1d:3f:fa:23:fd:df:c0:42:
f0:e5:11:ca:81:b3:c6:92:e0:ee:6a:1c:1e:08:55:
8f:d9:83:81:90:e1:4d:c0:b1:fb:d0:32:b3:9a:f6:
fe:da:b2:6e:e0:98:b8:b7:b9:b1:de:03:d7:ce:49:
b9:82:f1:7d:26:c0:3a:2f:84:ad:a6:69:1d:47:2e:
92:69:b8:64:10:0a:0f:2b:7c:cd:75:8e:36:db:c7:
ef:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:FE:E2:1A:40:24:CD:47:2B:38:50:39:D3:E1:15:C6:98:53:1A:8E
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/WP7iGkAkzUcrOFA50-EVxphTGo4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
16:10:48:92:5a:1c:92:03:97:b3:72:4c:07:4c:85:f0:5b:5c:
f9:eb:c8:0d:ce:ae:1d:e9:f5:d8:77:f1:7a:c3:0d:25:85:42:
d1:c9:b3:48:46:d0:ed:d7:f9:e2:0e:9e:8e:25:f9:e0:57:24:
56:3e:11:5c:c1:83:49:e8:61:9b:9a:91:f4:0e:84:bd:89:70:
01:13:52:40:1d:9e:01:7a:81:b3:7e:df:0a:2c:c0:15:97:08:
42:c7:5f:94:bc:1a:4f:a5:db:b3:fa:51:e4:f5:8d:52:5a:e4:
c2:81:c1:7f:f3:56:f3:5c:5f:41:c5:60:80:3c:b3:0b:05:f1:
bf:45:65:98:77:d1:a2:90:a0:3b:75:6f:77:47:ad:95:75:94:
59:fb:52:f3:4a:f8:8e:f7:76:82:ad:8c:e4:67:58:5b:7b:86:
e9:f6:22:57:f7:c2:7d:cf:ba:5d:8a:18:79:29:67:e6:d3:0f:
fb:58:cd:25:9d:71:8d:51:01:ab:1c:d7:f7:7c:bd:a4:a4:81:
6d:78:fc:4b:56:9d:d4:40:b0:58:30:61:08:71:51:31:65:92:
98:79:da:f0:bf:8f:0d:63:b4:10:67:ea:ce:56:7e:d2:33:9e:
37:2b:18:3b:44:2a:0d:7f:11:10:e4:e7:6e:2b:63:12:6f:e8:
1c:a8:af:2d
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY26mdvg6z1IkDo8lEChgL2rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjQwMjE4MDUwNDIxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1OGZlZTIxYTQwMjRjZDQ3MmIzODUwMzlkM2UxMTVjNjk4NTMxYThlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnGjHnbeqkkCtvy3xBYUjgruV7LyQ
tR+IltyzDltm5La8WyYSdSIxEeaAkOoaP1D1srbpE2SQQ3F6PS8SmzerkE6YhHUZ
Fxx/pRgdnSE7iG6lMtX/XRf6hY9dxHKTghBBuSvn9+SdcHbTSyXu2kaaxtpQ87ED
7zPPgYRInTA7WJ005rNgazFO/NCxpuwpwRLSZafCyBUS/386p98KaGuNGKy1yFXs
8Ro//WtdHT/6I/3fwELw5RHKgbPGkuDuahweCFWP2YOBkOFNwLH70DKzmvb+2rJu
4Ji4t7mx3gPXzkm5gvF9JsA6L4StpmkdRy6SabhkEAoPK3zNdY4228fv9QIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFFj+4hpAJM1HKzhQOdPhFcaYUxqOMB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEvV1A3aUdrQWt6VWNyT0ZBNTAtRVZ4cGhUR280LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBABYQSJJaHJIDl7NyTAdM
hfBbXPnryA3Orh3p9dh38XrDDSWFQtHJs0hG0O3X+eIOno4l+eBXJFY+EVzBg0no
YZuakfQOhL2JcAETUkAdngF6gbN+3woswBWXCELHX5S8Gk+l27P6UeT1jVJa5MKB
wX/zVvNcX0HFYIA8swsF8b9FZZh30aKQoDt1b3dHrZV1lFn7UvNK+I73doKtjORn
WFt7hun2Ilf3wn3Pul2KGHkpZ+bTD/tYzSWdcY1RAasc1/d8vaSkgW14/EtWndRA
sFgwYQhxUTFlkph52vC/jw1jtBBn6s5WftIznjcrGDtEKg1/ERDk524rYxJv6Byo
ry0=
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:34:05 2025 by rpki-client