Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/WLJ1wDg3AGddGUL0vlAFzpFyLCs.roa
File: WLJ1wDg3AGddGUL0vlAFzpFyLCs.roa (raw, json)
Hash identifier: uFlUk5qjJEOVwj6srkJbGYKuVfzWYmL6NRcvcfAqBdw=
Subject key identifier: 58:B2:75:C0:38:37:00:67:5D:19:42:F4:BE:50:05:CE:91:72:2C:2B
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C62AB5AF78A3B4FD04720DC43E0E80133
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/WLJ1wDg3AGddGUL0vlAFzpFyLCs.roa
Signing time: Wed 13 Dec 2023 10:14:06 +0000
ROA not before: Wed 13 Dec 2023 10:14:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:62:ab:5a:f7:8a:3b:4f:d0:47:20:dc:43:e0:e8:01:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 13 10:14:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=58b275c0383700675d1942f4be5005ce91722c2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:cf:ce:c0:ed:3e:c2:82:10:cd:e2:9d:75:4d:
ac:ca:ff:5a:77:7a:4e:4c:cb:80:f8:a2:05:04:da:
d4:92:fc:05:ae:3a:c9:d4:19:2b:a3:df:60:76:05:
df:b9:82:5f:33:d2:1a:63:55:a6:01:e5:c0:f3:01:
62:eb:f7:b4:bb:c6:89:cb:8e:72:d9:38:b2:81:cc:
22:a6:4c:80:4d:2f:b3:49:fb:30:dd:58:6c:72:da:
30:6c:a9:85:0b:10:0e:c0:81:cb:ca:76:57:35:79:
43:97:59:f1:c2:1f:24:f5:fc:31:49:de:8b:6d:2c:
33:e8:4d:52:35:e5:82:27:7c:3e:a8:fb:61:b3:20:
c3:40:21:df:ff:cf:e0:34:5a:50:5d:71:7d:0f:dd:
d4:77:75:89:6a:d3:fe:69:c6:da:4a:db:b2:e9:60:
4b:4c:a9:14:a9:bb:94:fe:db:2e:99:7f:0d:ee:ff:
84:59:f6:9d:13:25:1b:f2:22:0b:de:9e:50:83:5f:
ae:49:29:b4:88:a1:a7:64:0c:93:50:c0:c6:60:a2:
37:65:7c:f8:b1:0e:79:39:fb:9e:3b:9c:c7:d3:9b:
51:1b:a0:3a:02:e8:93:64:14:73:90:e4:5f:17:26:
3c:40:5f:b8:e1:77:82:df:40:4f:df:5d:c8:f4:da:
5b:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:B2:75:C0:38:37:00:67:5D:19:42:F4:BE:50:05:CE:91:72:2C:2B
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/WLJ1wDg3AGddGUL0vlAFzpFyLCs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a8:d5:cf:1a:23:af:df:84:83:04:3b:12:53:56:c5:67:c1:d4:
d4:50:66:a5:8a:4a:ad:a1:de:c1:a5:04:a9:de:ba:a0:e2:38:
2d:6b:3e:4c:49:d9:4b:49:35:8c:cd:b7:07:28:07:eb:95:5b:
a7:f4:55:d5:16:09:a2:dc:38:22:0a:a8:03:ea:9c:fc:44:fe:
c4:f1:15:8d:3d:26:54:97:58:11:a5:b6:f3:79:92:b1:68:2e:
4d:de:90:7c:dc:47:c5:e3:58:4a:b8:13:08:1d:b8:39:4c:3d:
30:74:24:63:96:64:77:2f:8c:bd:b0:b7:64:e7:1e:61:44:16:
ea:b0:0f:85:e0:9f:2c:b9:fa:13:d0:a0:c4:55:33:fd:a6:2b:
04:9f:fc:73:30:29:87:e6:6b:9e:d4:84:a3:14:5c:fb:1e:2f:
54:4b:82:e7:ec:45:f4:a5:67:77:d6:5b:b8:db:c7:6e:56:ea:
97:44:26:fc:b8:90:3a:06:9c:31:b7:e6:49:d8:d9:a1:ad:50:
c9:de:b4:0c:af:62:e0:bc:18:1b:64:42:4d:d5:57:a1:6b:47:
56:db:d2:3b:f5:49:13:79:47:cb:cb:62:d4:33:a7:65:2f:c7:
16:82:cc:fa:86:7f:93:23:5f:cd:43:12:3b:d8:7c:2a:bf:30:
43:81:74:7d
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYxiq1r3ijtP0Ecg3EPg6AEzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMjEzMTAxNDA2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1OGIyNzVjMDM4MzcwMDY3NWQxOTQyZjRiZTUwMDVjZTkxNzIyYzJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhs/OwO0+woIQzeKddU2syv9ad3pO
TMuA+KIFBNrUkvwFrjrJ1Bkro99gdgXfuYJfM9IaY1WmAeXA8wFi6/e0u8aJy45y
2TiygcwipkyATS+zSfsw3VhsctowbKmFCxAOwIHLynZXNXlDl1nxwh8k9fwxSd6L
bSwz6E1SNeWCJ3w+qPthsyDDQCHf/8/gNFpQXXF9D93Ud3WJatP+acbaStuy6WBL
TKkUqbuU/tsumX8N7v+EWfadEyUb8iIL3p5Qg1+uSSm0iKGnZAyTUMDGYKI3ZXz4
sQ55OfueO5zH05tRG6A6AuiTZBRzkORfFyY8QF+44XeC30BP313I9NpbAwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFFiydcA4NwBnXRlC9L5QBc6RciwrMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvV0xKMXdEZzNBR2RkR1VMMHZsQUZ6cEZ5TENzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAKjVzxojr9+EgwQ7ElNW
xWfB1NRQZqWKSq2h3sGlBKneuqDiOC1rPkxJ2UtJNYzNtwcoB+uVW6f0VdUWCaLc
OCIKqAPqnPxE/sTxFY09JlSXWBGltvN5krFoLk3ekHzcR8XjWEq4EwgduDlMPTB0
JGOWZHcvjL2wt2TnHmFEFuqwD4Xgnyy5+hPQoMRVM/2mKwSf/HMwKYfma57UhKMU
XPseL1RLgufsRfSlZ3fWW7jbx25W6pdEJvy4kDoGnDG35knY2aGtUMnetAyvYuC8
GBtkQk3VV6FrR1bb0jv1SRN5R8vLYtQzp2UvxxaCzPqGf5MjX81DEjvYfCq/MEOB
dH0=
-----END CERTIFICATE-----
Generated at Sun Apr 20 21:01:00 2025 by rpki-client