Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/WKY4fqlMWYRfTyHAXp6dqqrUEiA.roa
File: WKY4fqlMWYRfTyHAXp6dqqrUEiA.roa (raw, json)
Hash identifier: t7FBBzKF3Rb/OSq2L4PapZNojEeN6l+lq9i8Wji8WaM=
Subject key identifier: 58:A6:38:7E:A9:4C:59:84:5F:4F:21:C0:5E:9E:9D:AA:AA:D4:12:20
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B043B6741E4640FE8797052F854B55117
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/WKY4fqlMWYRfTyHAXp6dqqrUEiA.roa
Signing time: Fri 06 Oct 2023 09:04:43 +0000
ROA not before: Fri 06 Oct 2023 09:04:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18b:43a:caf9/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:04:3b:67:41:e4:64:0f:e8:79:70:52:f8:54:b5:51:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 6 09:04:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=58a6387ea94c59845f4f21c05e9e9daaaad41220
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ca:67:14:6b:d3:03:9c:f8:de:0d:31:21:ef:
61:65:b3:3e:24:74:fb:66:a5:7d:c6:ba:c9:db:90:
c8:e3:b7:61:68:ea:dc:54:1b:ac:a6:33:86:9a:3b:
9f:cc:55:e6:1e:f2:28:f3:57:b3:d2:d9:93:6c:4d:
c4:01:2f:cb:c6:ba:01:4f:09:cb:32:90:e8:81:6e:
0e:5b:c4:08:29:10:8d:92:ce:98:77:eb:ad:84:92:
e1:d2:97:62:a3:04:73:99:61:3d:e0:d7:55:e4:b6:
34:26:ab:f3:13:52:a8:12:d3:22:bf:9f:1f:ca:59:
7e:ea:ed:b9:ac:41:6d:99:9b:e8:28:81:2f:4d:02:
e9:2b:18:43:c2:5d:6d:e4:9b:f8:6a:f2:ad:bd:1b:
d0:98:8f:4a:dd:15:b6:0c:85:38:0e:ba:6e:44:05:
4e:6f:7e:56:c7:fe:85:b5:ca:44:bb:db:52:e1:b5:
65:16:42:3d:11:52:3b:24:6c:9a:51:23:da:47:3a:
39:25:97:aa:f7:af:73:6f:c5:c7:d5:a6:52:d4:07:
94:29:c0:94:2a:c9:18:47:9c:58:1b:0f:89:ca:8e:
64:b0:9c:89:0c:7c:36:36:f4:9b:1e:11:4f:61:5f:
ad:b3:26:40:c6:d9:c6:be:31:8a:60:28:bd:56:5c:
45:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:A6:38:7E:A9:4C:59:84:5F:4F:21:C0:5E:9E:9D:AA:AA:D4:12:20
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/WKY4fqlMWYRfTyHAXp6dqqrUEiA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
27:d8:26:3c:95:71:8c:ad:23:6b:2f:10:ea:b6:09:17:95:19:
4e:ac:6d:d3:62:4b:2f:f1:c9:43:5c:16:10:4b:73:3e:32:de:
14:6d:c3:36:25:ac:27:c6:72:1e:95:45:07:62:0a:8c:06:8b:
86:85:f4:21:d6:38:a6:5b:61:e8:d6:6f:a9:6f:ee:ce:43:9f:
cb:39:0a:39:d1:6b:45:d4:c3:6f:da:08:0f:2d:ef:58:97:c7:
9f:fb:fd:05:2f:18:49:7f:25:52:ad:9f:79:38:df:5f:73:39:
00:96:02:f4:8e:73:13:ab:f3:00:aa:5a:83:73:d8:db:45:4a:
33:fa:72:fd:a3:8f:a1:0a:62:9b:10:e9:7d:eb:ef:71:47:51:
7f:c8:4d:d9:ef:f0:1e:7d:44:c9:85:6c:c5:d4:27:fc:32:b5:
3b:c2:74:3a:44:c7:37:8a:aa:f8:29:47:a6:39:3f:4d:16:77:
59:3a:ed:ae:1b:09:9c:4a:99:f5:43:9e:89:6c:79:92:0e:a7:
0c:e2:6a:05:15:c6:2a:cb:87:f5:8e:3a:8c:e8:3c:ff:47:76:
02:13:49:bf:3a:9b:c1:bf:cc:af:eb:4c:1b:0c:42:ae:73:8f:
d1:ba:0c:80:58:d2:42:9a:91:c3:cc:58:02:1d:ef:2e:f4:d9:
dd:26:77:b8
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYsEO2dB5GQP6HlwUvhUtVEXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMDA2MDkwNDQzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1OGE2Mzg3ZWE5NGM1OTg0NWY0ZjIxYzA1ZTllOWRhYWFhZDQxMjIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArMpnFGvTA5z43g0xIe9hZbM+JHT7
ZqV9xrrJ25DI47dhaOrcVBuspjOGmjufzFXmHvIo81ez0tmTbE3EAS/LxroBTwnL
MpDogW4OW8QIKRCNks6Yd+uthJLh0pdiowRzmWE94NdV5LY0JqvzE1KoEtMiv58f
yll+6u25rEFtmZvoKIEvTQLpKxhDwl1t5Jv4avKtvRvQmI9K3RW2DIU4DrpuRAVO
b35Wx/6FtcpEu9tS4bVlFkI9EVI7JGyaUSPaRzo5JZeq969zb8XH1aZS1AeUKcCU
KskYR5xYGw+Jyo5ksJyJDHw2NvSbHhFPYV+tsyZAxtnGvjGKYCi9VlxFkQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFFimOH6pTFmEX08hwF6enaqq1BIgMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvV0tZNGZxbE1XWVJmVHlIQVhwNmRxcXJVRWlBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBACfYJjyVcYytI2svEOq2
CReVGU6sbdNiSy/xyUNcFhBLcz4y3hRtwzYlrCfGch6VRQdiCowGi4aF9CHWOKZb
YejWb6lv7s5Dn8s5CjnRa0XUw2/aCA8t71iXx5/7/QUvGEl/JVKtn3k4319zOQCW
AvSOcxOr8wCqWoNz2NtFSjP6cv2jj6EKYpsQ6X3r73FHUX/ITdnv8B59RMmFbMXU
J/wytTvCdDpExzeKqvgpR6Y5P00Wd1k67a4bCZxKmfVDnolseZIOpwziagUVxirL
h/WOOozoPP9HdgITSb86m8G/zK/rTBsMQq5zj9G6DIBY0kKakcPMWAId7y702d0m
d7g=
-----END CERTIFICATE-----
Generated at Sun May 11 15:49:59 2025 by rpki-client