Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Wp-pxUOq72F_YXUVZwSm2gJ_fEo.roa
File: Wp-pxUOq72F_YXUVZwSm2gJ_fEo.roa (raw, json)
Hash identifier: AwoCuCVMK1BXmnhr4rP3GPH4f5ipbi2Pbsopf/kfn0s=
Subject key identifier: 5A:9F:A9:C5:43:AA:EF:61:7F:61:75:15:67:04:A6:DA:02:7F:7C:4A
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C33790B712891CB187FCE3513C8851AEB
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Wp-pxUOq72F_YXUVZwSm2gJ_fEo.roa
Signing time: Mon 04 Dec 2023 06:16:59 +0000
ROA not before: Mon 04 Dec 2023 06:16:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:33:79:0b:71:28:91:cb:18:7f:ce:35:13:c8:85:1a:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 4 06:16:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5a9fa9c543aaef617f6175156704a6da027f7c4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:53:2b:d6:15:36:3d:96:e1:48:71:65:9c:2d:
de:4a:eb:90:1d:3b:25:f7:e0:cd:df:5b:85:e9:d7:
d6:33:e9:0b:52:6f:12:b8:d0:59:99:8a:1e:31:0d:
94:42:2f:68:f3:90:57:f1:70:80:12:ca:8a:0d:14:
96:12:f0:0a:71:2e:63:f7:77:77:64:9d:f1:5d:26:
20:35:5f:52:7f:87:af:98:72:00:68:a4:fd:4a:c7:
b2:12:70:9c:59:44:d0:a8:bb:35:08:67:a9:e2:0e:
95:23:90:b2:83:8b:f1:19:8a:d4:97:cd:84:ec:cb:
e3:0b:23:5b:ef:49:8a:92:73:1c:18:48:28:9f:c1:
cc:86:34:08:bd:c9:c3:73:96:3f:d4:d4:9f:ed:ce:
1f:16:e7:42:90:fa:48:84:b1:be:67:83:9c:91:a2:
48:33:76:b8:b4:4b:ef:66:6f:fd:40:ee:32:b5:ff:
40:83:39:45:2b:b3:c4:e7:d9:76:69:33:97:f9:7d:
3b:5b:a4:79:e8:1a:93:6c:bc:b9:45:63:fa:12:12:
ae:c2:ce:64:96:4b:ff:34:92:58:4f:8b:d6:8f:e6:
76:31:a6:1d:18:65:d9:1d:51:1a:61:a1:c2:f6:56:
f3:d6:80:7b:52:f5:2e:34:f5:75:70:5f:4a:76:66:
5f:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:9F:A9:C5:43:AA:EF:61:7F:61:75:15:67:04:A6:DA:02:7F:7C:4A
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Wp-pxUOq72F_YXUVZwSm2gJ_fEo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
51:41:65:76:77:3d:8c:da:63:21:ad:59:c2:0c:36:41:83:4c:
94:72:d6:b2:67:9c:d0:b6:1c:8c:ef:d4:2c:c4:26:56:cb:40:
67:04:2d:27:93:52:1a:f0:2f:69:49:60:24:02:9a:c0:20:e6:
61:35:8f:b0:ff:14:8a:bd:b8:ae:d0:07:35:14:32:58:69:99:
c4:9b:98:f3:b7:7f:4e:36:82:8d:e0:d6:73:a9:ca:76:7a:3b:
2c:aa:20:f1:1d:98:31:2d:5b:ca:33:60:fa:3e:30:27:9b:2d:
cc:6a:f3:ea:94:81:13:af:e8:de:38:43:95:ec:fc:6f:55:c0:
17:07:5a:ad:6b:e8:97:bc:e2:b2:3d:c4:59:be:06:39:1d:50:
6a:e3:7d:11:b4:df:9c:c4:3e:f3:41:86:f5:07:78:95:26:3d:
0a:55:6a:1c:fb:ac:d9:00:22:43:bf:6e:12:53:b7:80:6c:65:
45:65:be:7a:11:ce:f0:7c:25:a8:09:0c:29:65:f8:10:d9:2b:
d6:1b:bf:1c:35:af:fc:c6:ba:05:a5:49:7b:f6:5b:85:2d:ba:
59:c0:84:05:eb:46:75:72:df:84:3c:11:bd:bc:f1:97:f4:5c:
0f:e7:99:24:4c:f0:eb:f2:09:34:39:04:45:f6:53:b1:f2:ec:
0e:f4:63:0c
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYwzeQtxKJHLGH/ONRPIhRrrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMjA0MDYxNjU5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YTlmYTljNTQzYWFlZjYxN2Y2MTc1MTU2NzA0YTZkYTAyN2Y3YzRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr1Mr1hU2PZbhSHFlnC3eSuuQHTsl
9+DN31uF6dfWM+kLUm8SuNBZmYoeMQ2UQi9o85BX8XCAEsqKDRSWEvAKcS5j93d3
ZJ3xXSYgNV9Sf4evmHIAaKT9SseyEnCcWUTQqLs1CGep4g6VI5Cyg4vxGYrUl82E
7MvjCyNb70mKknMcGEgon8HMhjQIvcnDc5Y/1NSf7c4fFudCkPpIhLG+Z4OckaJI
M3a4tEvvZm/9QO4ytf9AgzlFK7PE59l2aTOX+X07W6R56BqTbLy5RWP6EhKuws5k
lkv/NJJYT4vWj+Z2MaYdGGXZHVEaYaHC9lbz1oB7UvUuNPV1cF9KdmZfPQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFFqfqcVDqu9hf2F1FWcEptoCf3xKMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvV3AtcHhVT3E3MkZfWVhVVlp3U20yZ0pfZkVvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAFFBZXZ3PYzaYyGtWcIM
NkGDTJRy1rJnnNC2HIzv1CzEJlbLQGcELSeTUhrwL2lJYCQCmsAg5mE1j7D/FIq9
uK7QBzUUMlhpmcSbmPO3f042go3g1nOpynZ6OyyqIPEdmDEtW8ozYPo+MCebLcxq
8+qUgROv6N44Q5Xs/G9VwBcHWq1r6Je84rI9xFm+BjkdUGrjfRG035zEPvNBhvUH
eJUmPQpVahz7rNkAIkO/bhJTt4BsZUVlvnoRzvB8JagJDCll+BDZK9Ybvxw1r/zG
ugWlSXv2W4UtulnAhAXrRnVy34Q8Eb288Zf0XA/nmSRM8OvyCTQ5BEX2U7Hy7A70
Yww=
-----END CERTIFICATE-----
Generated at Tue Apr 22 01:04:45 2025 by rpki-client