Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/wmhJXH79P8vfvE3wceiX1HnM_S4.roa
File: wmhJXH79P8vfvE3wceiX1HnM_S4.roa (raw, json)
Hash identifier: I3yY3q7vI7VTGtkVKv02o4HAJo4JbS44ne5TSUvlaAE=
Subject key identifier: C2:68:49:5C:7E:FD:3F:CB:DF:BC:4D:F0:71:E8:97:D4:79:CC:FD:2E
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B6BB3EE50FA515E04F99D404AF5000975
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/wmhJXH79P8vfvE3wceiX1HnM_S4.roa
Signing time: Thu 26 Oct 2023 11:17:15 +0000
ROA not before: Thu 26 Oct 2023 11:17:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:6b:b3:ee:50:fa:51:5e:04:f9:9d:40:4a:f5:00:09:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 26 11:17:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c268495c7efd3fcbdfbc4df071e897d479ccfd2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:21:3e:07:34:49:7e:4c:c2:d1:eb:75:34:73:
13:fa:ec:14:4b:b4:b9:58:98:ac:1f:9d:ea:48:62:
d8:ce:9f:b0:66:a9:93:48:4e:c7:15:bb:2d:63:58:
1a:a9:77:d2:5f:d8:fa:0c:af:bb:5e:a5:71:23:2f:
36:89:ec:19:01:20:4c:2c:e1:75:3b:8d:17:41:58:
46:5d:27:03:3f:92:78:8a:b3:61:49:e7:9a:cd:5c:
c4:99:ad:c5:27:a9:43:54:22:07:d9:53:b1:73:ca:
70:58:ab:d1:f1:05:f1:00:24:25:7f:14:21:77:96:
5f:29:ad:05:ac:40:88:02:ed:0a:ee:87:0c:18:3f:
9c:cc:09:0d:50:21:35:45:d2:f7:f8:a7:a4:7e:af:
c4:99:33:a2:17:78:48:27:8b:fc:87:e1:3a:b4:22:
11:72:11:a0:1b:02:2a:6e:6a:eb:e9:8f:92:65:50:
4c:36:e7:f7:5c:1f:64:e7:9f:86:d6:a9:52:01:9c:
96:89:6e:9a:9f:52:87:32:d5:d4:fa:db:66:24:db:
71:9a:a0:03:16:07:2b:ab:27:6e:ed:ca:ae:79:51:
27:a0:07:3b:2a:e8:01:bb:0f:ed:34:6d:20:d3:f8:
99:8f:9b:c7:b6:5c:ab:50:a1:e5:4a:92:bb:97:86:
d7:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:68:49:5C:7E:FD:3F:CB:DF:BC:4D:F0:71:E8:97:D4:79:CC:FD:2E
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/wmhJXH79P8vfvE3wceiX1HnM_S4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
29:af:aa:c2:58:8a:72:74:30:1b:61:6b:aa:d5:1f:a8:e5:79:
e2:61:74:91:be:5c:22:96:2b:8a:9a:49:36:c5:8e:2f:35:38:
de:2c:41:e9:c1:88:21:d7:51:9e:21:97:40:59:e0:4a:29:f1:
26:92:c0:41:5b:f6:29:ad:4b:0b:2b:72:b2:71:a3:f7:c5:cf:
59:12:36:bf:aa:b3:10:d1:8e:99:5e:26:54:39:b5:a9:cb:e4:
ec:89:d2:28:ec:fb:41:ec:31:dd:a9:c8:ba:a2:2a:59:1e:7c:
50:41:8f:b0:71:7b:46:73:92:30:c5:f9:db:ba:be:fb:f5:f1:
35:28:92:86:29:6d:2e:22:e1:da:14:9b:88:cd:7f:28:dd:a2:
7e:dc:94:bf:e9:ba:dd:ee:30:38:7b:f8:50:ce:dc:43:cf:cd:
6c:be:07:9c:02:51:71:7b:66:bd:5b:11:ee:5f:27:22:05:b3:
ab:ec:06:f6:0a:6d:b8:9c:26:ca:ff:80:c7:86:94:a0:cc:9c:
3d:4e:3a:1c:7f:73:86:94:2a:4f:e5:b0:e2:d2:bb:d1:21:b9:
d7:03:eb:ce:8a:18:c5:b7:d2:fb:52:ab:b1:fd:d7:60:53:ed:
6b:a1:15:82:f9:1c:e0:e8:29:b3:a4:c5:47:c2:d4:0d:a9:3e:
f0:a8:6e:28
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYtrs+5Q+lFeBPmdQEr1AAl1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMDI2MTExNzE1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMjY4NDk1YzdlZmQzZmNiZGZiYzRkZjA3MWU4OTdkNDc5Y2NmZDJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwCE+BzRJfkzC0et1NHMT+uwUS7S5
WJisH53qSGLYzp+wZqmTSE7HFbstY1gaqXfSX9j6DK+7XqVxIy82iewZASBMLOF1
O40XQVhGXScDP5J4irNhSeeazVzEma3FJ6lDVCIH2VOxc8pwWKvR8QXxACQlfxQh
d5ZfKa0FrECIAu0K7ocMGD+czAkNUCE1RdL3+Kekfq/EmTOiF3hIJ4v8h+E6tCIR
chGgGwIqbmrr6Y+SZVBMNuf3XB9k55+G1qlSAZyWiW6an1KHMtXU+ttmJNtxmqAD
Fgcrqydu7cqueVEnoAc7KugBuw/tNG0g0/iZj5vHtlyrUKHlSpK7l4bX+QIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFMJoSVx+/T/L37xN8HHol9R5zP0uMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvd21oSlhINzlQOHZmdkUzd2NlaVgxSG5NX1M0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBACmvqsJYinJ0MBtha6rV
H6jleeJhdJG+XCKWK4qaSTbFji81ON4sQenBiCHXUZ4hl0BZ4Eop8SaSwEFb9imt
SwsrcrJxo/fFz1kSNr+qsxDRjpleJlQ5tanL5OyJ0ijs+0HsMd2pyLqiKlkefFBB
j7Bxe0ZzkjDF+du6vvv18TUokoYpbS4i4doUm4jNfyjdon7clL/put3uMDh7+FDO
3EPPzWy+B5wCUXF7Zr1bEe5fJyIFs6vsBvYKbbicJsr/gMeGlKDMnD1OOhx/c4aU
Kk/lsOLSu9EhudcD686KGMW30vtSq7H912BT7WuhFYL5HODoKbOkxUfC1A2pPvCo
big=
-----END CERTIFICATE-----
Generated at Tue Apr 22 22:36:40 2025 by rpki-client