Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/wt_DK7hMMIXIRfhVpUgNlk7IcUM.roa
File: wt_DK7hMMIXIRfhVpUgNlk7IcUM.roa (raw, json)
Hash identifier: +C1oYgd0trMiobEEbIPy8fbP5UahdPAIfswt8g/niAQ=
Subject key identifier: C2:DF:C3:2B:B8:4C:30:85:C8:45:F8:55:A5:48:0D:96:4E:C8:71:43
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018DFEDCEF1ECE700CBCEA2018A41A12E65A
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/wt_DK7hMMIXIRfhVpUgNlk7IcUM.roa
Signing time: Sat 02 Mar 2024 11:11:48 +0000
ROA not before: Sat 02 Mar 2024 11:11:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:fe:dc:ef:1e:ce:70:0c:bc:ea:20:18:a4:1a:12:e6:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 2 11:11:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c2dfc32bb84c3085c845f855a5480d964ec87143
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:1c:11:61:56:16:1a:c9:7c:b4:7c:a8:20:6c:
40:21:9b:29:26:83:c6:0d:1b:b1:8a:34:f8:19:47:
d6:98:3e:27:d8:64:56:4b:f1:72:a3:ef:f4:a9:7e:
f9:60:9b:ad:77:80:08:f0:97:d8:8f:60:06:c9:0b:
c6:64:48:31:0e:63:fd:2e:a1:24:8b:26:32:4d:c9:
f4:dc:79:50:7b:76:ff:34:3b:6b:18:e8:d4:6d:2d:
e8:ec:94:dc:5c:67:6a:e1:e5:83:3d:f9:a2:26:c5:
3e:02:e7:cc:fb:d3:67:2d:6c:96:02:8d:71:74:c9:
58:20:c2:18:79:89:e1:94:15:7e:a1:46:5e:98:be:
75:ec:39:67:71:8b:60:b7:26:d1:b0:30:69:8f:71:
c4:4b:e2:99:31:33:96:fc:49:c2:ab:f1:11:c5:a5:
99:5e:b5:10:54:01:6a:71:06:06:06:78:c8:c4:8d:
92:4d:6e:91:ea:3c:5c:a0:8f:75:66:7e:ce:72:ea:
ea:d9:3d:99:c0:a4:4d:7a:00:72:b9:30:e2:0e:c0:
22:39:8a:ab:5d:88:6c:70:ab:95:e6:4d:9b:d0:a1:
5b:14:ee:44:21:9a:24:22:99:f9:c1:ac:20:dc:a9:
07:e9:4a:07:23:5c:2c:de:75:e9:83:dc:4b:72:54:
d1:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:DF:C3:2B:B8:4C:30:85:C8:45:F8:55:A5:48:0D:96:4E:C8:71:43
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/wt_DK7hMMIXIRfhVpUgNlk7IcUM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5e:88:42:09:77:32:52:b0:0b:eb:c2:c3:02:58:eb:60:7e:b7:
1e:df:c7:da:49:7c:e4:c0:b4:26:20:12:fb:3e:bd:c4:c4:85:
f0:1f:44:45:f7:70:9d:09:bb:9c:78:ad:0d:9f:23:a0:5d:62:
44:33:7b:16:80:0e:f0:5e:73:4b:3c:e5:6f:95:98:76:cc:a1:
96:db:87:f3:78:56:be:42:07:a8:67:7f:84:41:8c:0c:33:59:
4e:87:4f:86:27:34:6e:bc:a3:38:d5:9b:79:ae:fc:5b:55:9c:
ad:cd:1d:32:ec:fd:c0:43:76:2e:50:09:43:6b:ee:dc:bf:a5:
a7:23:b9:58:09:c4:b1:71:b0:7b:7d:67:b1:73:2f:af:74:2d:
4e:68:97:19:1e:1f:81:85:21:bd:e5:50:e5:c9:15:96:fc:47:
ce:b8:1e:d2:b4:a1:d0:95:fd:b4:43:50:8e:80:79:82:4f:54:
96:fd:b2:e5:86:fb:bb:35:86:49:cb:4c:ee:22:3f:82:9f:c7:
d5:47:c2:a5:7c:97:9e:71:81:e9:a6:42:55:38:00:8c:59:a7:
20:e1:8a:ff:f4:dd:76:f9:52:29:5b:e6:b2:3c:41:5f:2a:c2:
49:72:f0:a6:66:e1:40:16:f0:72:56:02:64:85:fa:13:cb:27:
38:19:2d:63
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY3+3O8eznAMvOogGKQaEuZaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjQwMzAyMTExMTQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMmRmYzMyYmI4NGMzMDg1Yzg0NWY4NTVhNTQ4MGQ5NjRlYzg3MTQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuBwRYVYWGsl8tHyoIGxAIZspJoPG
DRuxijT4GUfWmD4n2GRWS/Fyo+/0qX75YJutd4AI8JfYj2AGyQvGZEgxDmP9LqEk
iyYyTcn03HlQe3b/NDtrGOjUbS3o7JTcXGdq4eWDPfmiJsU+AufM+9NnLWyWAo1x
dMlYIMIYeYnhlBV+oUZemL517DlncYtgtybRsDBpj3HES+KZMTOW/EnCq/ERxaWZ
XrUQVAFqcQYGBnjIxI2STW6R6jxcoI91Zn7Ocurq2T2ZwKRNegByuTDiDsAiOYqr
XYhscKuV5k2b0KFbFO5EIZokIpn5wawg3KkH6UoHI1ws3nXpg9xLclTR9wIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFMLfwyu4TDCFyEX4VaVIDZZOyHFDMB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEvd3RfREs3aE1NSVhJUmZoVnBVZ05sazdJY1VNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAF6IQgl3MlKwC+vCwwJY
62B+tx7fx9pJfOTAtCYgEvs+vcTEhfAfREX3cJ0Ju5x4rQ2fI6BdYkQzexaADvBe
c0s85W+VmHbMoZbbh/N4Vr5CB6hnf4RBjAwzWU6HT4YnNG68ozjVm3mu/FtVnK3N
HTLs/cBDdi5QCUNr7ty/pacjuVgJxLFxsHt9Z7FzL690LU5olxkeH4GFIb3lUOXJ
FZb8R864HtK0odCV/bRDUI6AeYJPVJb9suWG+7s1hknLTO4iP4Kfx9VHwqV8l55x
gemmQlU4AIxZpyDhiv/03Xb5Uilb5rI8QV8qwkly8KZm4UAW8HJWAmSF+hPLJzgZ
LWM=
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:37:34 2025 by rpki-client