Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/wlhmSCK00_1oVB1XqHe678uZJIQ.roa
File: wlhmSCK00_1oVB1XqHe678uZJIQ.roa (raw, json)
Hash identifier: ykGCDnBzwJt+ocNAZoj69YA9kyi/mkm6ypCMkQszbew=
Subject key identifier: C2:58:66:48:22:B4:D3:FD:68:54:1D:57:A8:77:BA:EF:CB:99:24:84
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B5D8A71DFB627E04D2E3D297FA6448ED4
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/wlhmSCK00_1oVB1XqHe678uZJIQ.roa
Signing time: Mon 23 Oct 2023 17:17:16 +0000
ROA not before: Mon 23 Oct 2023 17:17:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:5d:8a:71:df:b6:27:e0:4d:2e:3d:29:7f:a6:44:8e:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 23 17:17:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c258664822b4d3fd68541d57a877baefcb992484
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:8c:41:34:58:99:32:70:f6:fe:b8:c6:44:93:
8a:5b:fa:49:75:b2:ca:00:62:7f:7d:36:c7:97:2a:
6d:2d:51:cf:1e:5d:44:83:4b:aa:d8:b2:bf:2d:0e:
16:85:a2:c4:61:c1:58:56:c4:33:89:d2:cd:20:fb:
88:ed:9a:4e:cb:50:5b:71:6e:12:2b:c7:3b:25:bb:
94:95:77:3c:97:73:37:45:ef:81:fc:2a:6f:ca:1d:
77:1b:e8:77:19:9a:b9:83:82:d8:00:f1:8b:97:98:
3e:ef:a5:46:ea:05:e4:27:ec:a6:6f:65:3e:5e:4b:
78:67:12:43:6c:52:0f:56:d4:19:48:3e:b3:46:42:
27:7d:43:76:39:c0:22:b5:c9:7c:17:f5:96:ce:79:
1a:30:3a:6c:34:ac:5f:20:aa:6e:40:43:95:fb:36:
ff:ac:14:49:5e:aa:52:6b:24:34:e4:d9:56:53:b7:
36:b5:0a:88:a4:65:32:8e:c0:f6:2e:bc:7f:c2:71:
02:0b:48:cf:47:40:8e:f1:c7:50:48:b0:91:b1:6f:
4f:41:98:e5:95:80:77:39:99:c7:7f:13:84:76:97:
51:34:de:4f:4e:b8:0d:13:42:be:79:e4:4d:60:0b:
f2:d6:e9:a2:dd:ed:f5:93:2f:e8:6c:48:7c:54:d8:
e8:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:58:66:48:22:B4:D3:FD:68:54:1D:57:A8:77:BA:EF:CB:99:24:84
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/wlhmSCK00_1oVB1XqHe678uZJIQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
00:04:ba:a3:66:bd:ab:30:ae:9e:67:fc:da:f7:55:ac:25:49:
3a:e6:63:50:24:38:bf:49:db:91:b6:ab:9f:71:c3:d2:a2:8c:
9f:a7:34:fa:a6:2c:5c:8a:5c:72:c2:e6:ae:ce:39:78:03:28:
5b:81:02:bc:d1:04:6b:bb:2d:79:4f:2a:24:03:5b:c1:bc:bf:
e0:00:68:97:ef:77:8f:c9:85:1e:f1:07:ad:1f:61:d3:d7:3b:
50:cc:c2:74:6a:b8:71:c0:ab:7a:1b:87:48:7f:a1:f4:7c:8a:
7f:ca:14:a5:cf:6b:77:7d:9e:4a:2e:27:8c:be:ea:2c:07:78:
6f:c4:e8:40:05:e6:4c:05:63:31:83:62:5e:7f:12:3d:70:89:
d9:c5:d1:98:2b:1d:62:54:2c:0c:1b:4f:c3:3e:97:ef:a1:3f:
4a:d4:70:82:b2:8f:07:ea:11:67:af:cd:09:42:ee:b8:21:27:
44:99:7c:75:c9:8c:73:75:86:a9:ac:d6:27:b0:49:45:39:9b:
d3:28:9f:2a:55:d6:63:bc:6f:6e:b5:00:6b:16:d5:cf:31:a7:
a7:2c:f5:bd:67:05:7d:63:79:b8:02:44:5d:30:43:47:4c:17:
72:75:81:80:2a:f0:94:47:7a:d2:96:7d:f0:16:5e:8b:2d:00:
85:32:c0:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 21:38:44 2025 by rpki-client