Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/WNHLnPIDKlJzmKwe6LT8FIJZOYM.roa
File: WNHLnPIDKlJzmKwe6LT8FIJZOYM.roa (raw, json)
Hash identifier: QKBm0ZkbSqLcOcnwiZ02xuFj86CZMmdEvPIyX4bClsE=
Subject key identifier: 58:D1:CB:9C:F2:03:2A:52:73:98:AC:1E:E8:B4:FC:14:82:59:39:83
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C03683C995C6D813A0628368C9D2D597E
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/WNHLnPIDKlJzmKwe6LT8FIJZOYM.roa
Signing time: Fri 24 Nov 2023 22:16:52 +0000
ROA not before: Fri 24 Nov 2023 22:16:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:03:68:3c:99:5c:6d:81:3a:06:28:36:8c:9d:2d:59:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 24 22:16:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=58d1cb9cf2032a527398ac1ee8b4fc1482593983
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:67:9b:91:ef:4e:79:5d:50:c1:56:70:4e:94:
61:9c:ea:68:ed:cd:1d:b9:76:d2:58:84:2e:7a:4f:
97:5f:70:d6:36:f6:a8:b5:7b:bc:4c:ae:18:f7:20:
73:15:2b:b0:48:8b:34:64:a9:04:a3:ca:f6:40:ff:
b1:ad:cc:e1:5d:7c:78:e5:e0:b7:6e:2a:8c:de:ab:
16:ae:ed:0a:ee:e9:b3:52:1e:52:16:1d:09:60:2b:
70:58:87:5c:56:bf:40:8b:8d:ff:a3:71:b9:ec:18:
3d:09:4a:1f:29:fe:64:09:17:78:bf:56:a9:97:60:
c3:13:d6:e5:8c:3d:7c:0c:02:f6:bf:de:46:27:79:
75:fc:bd:28:1a:b9:ff:08:3e:c0:c5:1c:ce:4f:e3:
20:b0:fc:4b:35:b4:0c:69:8c:65:f4:da:05:2f:38:
e3:f5:2f:98:d1:24:3d:57:c0:79:98:84:ed:a5:6c:
63:de:15:0d:73:98:2c:d3:1c:c4:d6:47:14:ca:6d:
f4:61:25:25:1f:f9:e7:7f:9d:1e:60:8a:a1:7a:2d:
cc:1f:43:f3:59:0a:af:84:4b:c0:77:36:78:48:a3:
63:31:f7:97:58:ba:fd:6e:ff:0c:64:3d:31:b1:fd:
fb:37:e5:9b:31:69:17:48:75:5d:59:d0:80:13:63:
63:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:D1:CB:9C:F2:03:2A:52:73:98:AC:1E:E8:B4:FC:14:82:59:39:83
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/WNHLnPIDKlJzmKwe6LT8FIJZOYM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
84:39:29:65:77:7b:52:fe:1b:29:4b:58:b9:1a:05:78:97:aa:
eb:ef:e6:25:7f:ac:ef:5d:97:95:1c:d0:72:d8:3b:33:63:8d:
67:2d:45:4e:76:2c:eb:d7:7c:f7:1d:fc:8e:fd:b8:3f:2b:cc:
dc:c9:1f:05:1d:40:f1:0f:25:64:27:72:e4:fe:5d:76:7a:a9:
46:f3:b5:ca:b6:09:8b:65:a7:45:9a:29:7c:02:e5:6a:7d:fa:
64:5e:65:fc:d3:14:d8:9a:d7:8f:de:fd:92:96:1e:9c:c0:d3:
66:8b:0a:3a:a9:60:98:7b:46:e2:60:a6:06:83:36:4e:0a:c6:
05:d1:90:6e:95:ad:e1:40:f4:4b:b9:62:9d:4f:3b:53:11:ea:
0d:e1:31:07:b2:25:b2:b2:f1:a9:87:70:57:8e:e6:68:91:cc:
2f:88:5e:2e:6d:e6:ad:d2:f8:12:87:f5:55:8f:b5:c7:78:1e:
5c:a5:bf:a5:35:f6:d8:ff:d5:83:25:f5:5e:49:e2:4e:08:89:
73:33:55:04:bd:7d:c3:6e:32:8a:87:9f:2f:b2:27:eb:ba:0a:
a9:2a:e6:bc:57:42:dc:c8:b2:a1:f8:b9:a9:8f:c8:6d:ee:ee:
52:65:bf:76:b8:29:08:d6:81:2e:a8:9e:51:88:23:8e:52:c1:
2b:f2:2a:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 19:47:46 2025 by rpki-client