Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/WS14sl3m3NLCMoFf1Xob0ObTMd8.roa
File: WS14sl3m3NLCMoFf1Xob0ObTMd8.roa (raw, json)
Hash identifier: T4JJDdfnN9KTgbfqorijv+xQyow09gpR/POGrbIF2IU=
Subject key identifier: 59:2D:78:B2:5D:E6:DC:D2:C2:32:81:5F:D5:7A:1B:D0:E6:D3:31:DF
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C1C82C626370404E200A55CBB743C9A2D
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/WS14sl3m3NLCMoFf1Xob0ObTMd8.roa
Signing time: Wed 29 Nov 2023 19:16:21 +0000
ROA not before: Wed 29 Nov 2023 19:16:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:1c:82:c6:26:37:04:04:e2:00:a5:5c:bb:74:3c:9a:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 29 19:16:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=592d78b25de6dcd2c232815fd57a1bd0e6d331df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:9e:b6:1d:41:8c:52:4f:79:25:39:a4:94:3e:
09:a8:0e:9a:d2:56:cf:54:d8:ac:5c:79:fb:21:4a:
77:c2:3a:a6:a2:b6:a5:52:2a:51:26:4c:4b:e5:44:
05:c5:33:a4:57:84:15:fc:2e:40:b8:e9:d3:34:9e:
4e:d3:0f:68:48:f4:49:ee:2a:1d:03:de:8b:cb:3a:
43:03:2f:1c:74:3c:6f:31:57:ff:9d:e6:6f:29:a5:
59:49:e4:2f:38:77:79:b5:61:03:1c:eb:8e:9e:66:
04:2a:2e:c1:c6:88:6c:2d:3b:3a:5f:c7:77:ef:3b:
cf:9e:11:06:82:7c:57:3f:6f:c9:55:3b:f7:0c:ea:
8f:f1:e0:a8:99:50:b3:15:dc:6a:96:1b:91:09:1a:
de:81:c9:04:55:bc:d1:ad:d4:31:8e:12:9d:73:ff:
80:4c:7b:f8:97:2a:b2:d2:52:a6:cb:8c:4c:ff:47:
6f:14:e2:a1:f8:26:48:79:1e:64:ca:48:e7:72:ea:
8e:17:35:9b:28:e0:52:69:0d:66:91:7a:93:41:bf:
cd:33:c7:81:f7:bd:a1:3f:cc:46:5a:c3:6d:83:f0:
3d:8d:89:e2:84:ed:6b:62:d2:70:25:87:1d:79:69:
ac:a0:4f:58:c3:94:56:22:aa:f0:3e:e0:cc:e1:33:
63:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:2D:78:B2:5D:E6:DC:D2:C2:32:81:5F:D5:7A:1B:D0:E6:D3:31:DF
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/WS14sl3m3NLCMoFf1Xob0ObTMd8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
84:05:8b:bb:cd:9e:1e:d9:9d:1c:c1:66:62:b5:b0:c6:39:92:
f0:8d:72:dd:09:d2:a5:0b:1e:8d:02:50:ec:30:2f:b6:f6:da:
a6:49:1c:29:b7:9c:9a:88:65:6f:82:0a:38:7b:d6:99:86:62:
37:01:5d:1e:44:7a:bc:c9:25:4e:aa:36:75:67:bd:41:b9:b4:
3c:b0:db:b7:b3:8f:89:e1:50:3f:2a:d5:2d:90:9c:fe:c5:b0:
3a:a6:9b:9a:35:a7:5e:61:18:b9:20:97:c3:5b:b0:84:cb:9d:
92:c7:7a:bb:f7:96:91:b4:fb:51:f5:e0:56:89:f7:8c:49:22:
d8:2f:ce:ca:ef:67:03:18:f2:11:88:81:74:43:5e:27:b7:7b:
ba:c3:66:05:e5:df:b0:d2:d4:38:0c:8b:25:62:e3:cc:3f:ca:
f3:27:84:55:ae:21:ba:26:63:94:14:3c:a4:7e:f1:72:a5:3b:
78:6b:33:64:ea:e5:75:33:6d:88:1e:c6:a9:fc:5a:4b:e4:fe:
5c:46:22:21:8d:fa:a5:94:41:cd:9f:3b:49:86:f7:7c:9f:27:
5c:67:4c:a6:f4:bd:6e:1d:80:77:bb:25:b5:4b:7e:27:0f:65:
71:e7:70:cf:cc:df:49:4a:77:b7:df:37:17:dd:a2:59:73:98:
05:e4:73:90
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYwcgsYmNwQE4gClXLt0PJotMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMTI5MTkxNjIxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1OTJkNzhiMjVkZTZkY2QyYzIzMjgxNWZkNTdhMWJkMGU2ZDMzMWRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjZ62HUGMUk95JTmklD4JqA6a0lbP
VNisXHn7IUp3wjqmoralUipRJkxL5UQFxTOkV4QV/C5AuOnTNJ5O0w9oSPRJ7iod
A96LyzpDAy8cdDxvMVf/neZvKaVZSeQvOHd5tWEDHOuOnmYEKi7BxohsLTs6X8d3
7zvPnhEGgnxXP2/JVTv3DOqP8eComVCzFdxqlhuRCRregckEVbzRrdQxjhKdc/+A
THv4lyqy0lKmy4xM/0dvFOKh+CZIeR5kykjncuqOFzWbKOBSaQ1mkXqTQb/NM8eB
972hP8xGWsNtg/A9jYnihO1rYtJwJYcdeWmsoE9Yw5RWIqrwPuDM4TNj+wIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFFkteLJd5tzSwjKBX9V6G9Dm0zHfMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvV1MxNHNsM20zTkxDTW9GZjFYb2IwT2JUTWQ4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAIQFi7vNnh7ZnRzBZmK1
sMY5kvCNct0J0qULHo0CUOwwL7b22qZJHCm3nJqIZW+CCjh71pmGYjcBXR5EerzJ
JU6qNnVnvUG5tDyw27ezj4nhUD8q1S2QnP7FsDqmm5o1p15hGLkgl8NbsITLnZLH
erv3lpG0+1H14FaJ94xJItgvzsrvZwMY8hGIgXRDXie3e7rDZgXl37DS1DgMiyVi
48w/yvMnhFWuIbomY5QUPKR+8XKlO3hrM2Tq5XUzbYgexqn8Wkvk/lxGIiGN+qWU
Qc2fO0mG93yfJ1xnTKb0vW4dgHe7JbVLficPZXHncM/M30lKd7ffNxfdollzmAXk
c5A=
-----END CERTIFICATE-----
Generated at Sat Apr 19 05:42:47 2025 by rpki-client