Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/wdsugTFXswMKtYLyN3Vphb8MD14.roa
File: wdsugTFXswMKtYLyN3Vphb8MD14.roa (raw, json)
Hash identifier: TU2zeDKSlhqREz7PwXkPoOj3E07gpCkcqcFfcq3vXUc=
Subject key identifier: C1:DB:2E:81:31:57:B3:03:0A:B5:82:F2:37:75:69:85:BF:0C:0F:5E
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B5827AA0D78D7F302E67F01F2950FE99F
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/wdsugTFXswMKtYLyN3Vphb8MD14.roa
Signing time: Sun 22 Oct 2023 16:11:16 +0000
ROA not before: Sun 22 Oct 2023 16:11:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:58:27:aa:0d:78:d7:f3:02:e6:7f:01:f2:95:0f:e9:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 22 16:11:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c1db2e813157b3030ab582f237756985bf0c0f5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:33:9b:cc:9f:4c:c4:13:d8:05:1c:1c:d4:ea:
e0:ad:42:0d:53:8a:45:07:b0:22:05:34:43:1b:0e:
6c:f7:29:8d:30:dd:ea:3c:65:49:01:96:90:d1:66:
15:5c:e4:75:ec:19:b9:d6:ae:ae:5f:75:dc:44:54:
75:75:88:25:b3:1a:b4:81:c2:b8:9b:00:14:b0:61:
27:c4:25:03:45:f8:e4:66:ff:82:b4:b5:6e:d4:9f:
1b:59:07:ba:64:8a:de:1a:5e:48:2e:7e:2e:34:af:
78:de:3b:57:52:a7:fd:e7:83:69:b4:d0:7b:ff:20:
3b:ff:2d:b9:87:9c:5a:e4:e5:4f:7b:8f:7b:ee:29:
d3:8b:e3:14:82:86:00:51:ed:80:a2:09:a4:eb:47:
a9:da:42:05:ab:11:6d:d5:c9:4f:c8:87:a8:2d:41:
11:52:e6:ad:f7:66:a0:25:49:93:b3:08:95:7f:68:
45:77:f1:2d:3a:9b:29:74:de:30:1c:bb:6e:f2:c5:
87:89:c2:cd:38:cb:82:21:53:f3:a1:4f:10:1b:aa:
0a:84:b8:93:d9:83:68:da:be:b9:fd:d3:de:5c:c8:
37:ce:27:d2:99:41:ed:65:c4:c1:5d:19:84:61:75:
77:0d:b3:36:0e:30:34:0d:16:df:b5:62:9f:b9:de:
8e:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:DB:2E:81:31:57:B3:03:0A:B5:82:F2:37:75:69:85:BF:0C:0F:5E
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/wdsugTFXswMKtYLyN3Vphb8MD14.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4a:d7:4b:cc:cc:60:67:b5:36:fe:25:55:41:8e:02:28:71:42:
68:dd:cb:79:25:a0:88:94:2a:95:09:29:de:39:ef:92:c0:c2:
a4:c2:91:2a:bf:ab:fe:1f:37:72:87:96:59:c6:0a:97:88:78:
b9:e3:cb:a0:4b:c3:ac:cf:2b:7e:17:59:dc:2b:aa:73:81:a4:
b6:aa:c8:ec:9e:a5:af:4d:15:86:30:22:d2:fb:74:bd:f1:28:
e4:18:f8:15:60:42:d4:90:66:a5:01:ea:5a:4b:c4:1f:a0:b9:
d6:6e:8b:63:1c:7c:d1:47:77:09:4d:08:65:18:30:80:a5:ff:
a6:36:13:33:f6:2d:8f:c5:94:3b:8f:e5:19:6b:52:b9:e8:c4:
3a:2d:c6:dd:8d:6a:b7:2e:5b:40:66:47:ff:7c:4d:13:52:bd:
7b:ff:5d:bd:c6:7d:98:11:61:68:cf:1f:87:b4:98:22:16:59:
21:83:4a:0c:ec:96:09:df:c6:cf:0a:79:93:10:79:94:d0:32:
2d:4d:34:37:f6:f4:a6:88:3c:61:82:2a:cf:56:02:0b:57:6a:
66:e8:4a:fd:dd:e9:12:ee:a7:06:a5:49:59:62:e0:25:1a:7e:
c5:66:d0:89:44:f4:b7:35:2e:9b:54:38:10:7c:aa:ec:43:2b:
38:07:68:95
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYtYJ6oNeNfzAuZ/AfKVD+mfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMDIyMTYxMTE2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMWRiMmU4MTMxNTdiMzAzMGFiNTgyZjIzNzc1Njk4NWJmMGMwZjVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkjObzJ9MxBPYBRwc1OrgrUINU4pF
B7AiBTRDGw5s9ymNMN3qPGVJAZaQ0WYVXOR17Bm51q6uX3XcRFR1dYglsxq0gcK4
mwAUsGEnxCUDRfjkZv+CtLVu1J8bWQe6ZIreGl5ILn4uNK943jtXUqf954NptNB7
/yA7/y25h5xa5OVPe4977inTi+MUgoYAUe2Aogmk60ep2kIFqxFt1clPyIeoLUER
Uuat92agJUmTswiVf2hFd/EtOpspdN4wHLtu8sWHicLNOMuCIVPzoU8QG6oKhLiT
2YNo2r65/dPeXMg3zifSmUHtZcTBXRmEYXV3DbM2DjA0DRbftWKfud6OqwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFMHbLoExV7MDCrWC8jd1aYW/DA9eMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvd2RzdWdURlhzd01LdFlMeU4zVnBoYjhNRDE0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAErXS8zMYGe1Nv4lVUGO
AihxQmjdy3kloIiUKpUJKd4575LAwqTCkSq/q/4fN3KHllnGCpeIeLnjy6BLw6zP
K34XWdwrqnOBpLaqyOyepa9NFYYwItL7dL3xKOQY+BVgQtSQZqUB6lpLxB+gudZu
i2McfNFHdwlNCGUYMICl/6Y2EzP2LY/FlDuP5RlrUrnoxDotxt2NarcuW0BmR/98
TRNSvXv/Xb3GfZgRYWjPH4e0mCIWWSGDSgzslgnfxs8KeZMQeZTQMi1NNDf29KaI
PGGCKs9WAgtXamboSv3d6RLupwalSVli4CUafsVm0IlE9Lc1LptUOBB8quxDKzgH
aJU=
-----END CERTIFICATE-----
Generated at Sun Apr 20 04:11:15 2025 by rpki-client