Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/WT6HzG9udzuLMpzr-AEE6dzkZ6g.roa
File: WT6HzG9udzuLMpzr-AEE6dzkZ6g.roa (raw, json)
Hash identifier: OaASLpUtg5rZvWZ7PRRHDIS0EioBvWyx9bswv4P9M9Y=
Subject key identifier: 59:3E:87:CC:6F:6E:77:3B:8B:32:9C:EB:F8:01:04:E9:DC:E4:67:A8
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C85660B52986298ECA6493A431F133A4E
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/WT6HzG9udzuLMpzr-AEE6dzkZ6g.roa
Signing time: Wed 20 Dec 2023 04:05:06 +0000
ROA not before: Wed 20 Dec 2023 04:05:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64:ffff:0:18c:8565:5632/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:85:66:0b:52:98:62:98:ec:a6:49:3a:43:1f:13:3a:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 20 04:05:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=593e87cc6f6e773b8b329cebf80104e9dce467a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:17:53:c4:80:d0:16:9b:77:06:e9:3c:0d:8b:
39:a5:d1:22:ec:56:14:51:35:f1:20:bb:97:a6:9c:
1c:96:98:34:4e:54:a1:bd:26:13:52:60:16:ee:9c:
ca:80:2d:bf:30:55:c7:e4:db:6f:c0:8c:b6:05:9e:
ee:a4:0d:d4:00:3a:a3:4d:b8:33:e4:4b:84:ed:9e:
4b:9d:7e:e4:5e:b7:c8:3b:fa:86:1b:3d:03:bc:e0:
b1:2a:0b:97:74:f7:ce:62:26:ac:59:da:3b:39:77:
65:2e:0d:fb:13:bc:f8:79:b2:e9:f1:28:1f:a7:ad:
2a:aa:8f:30:c7:3b:36:57:39:d3:43:ef:15:01:46:
15:d0:62:59:ff:d8:a5:06:44:c9:59:80:e5:6f:f3:
42:87:3c:30:4e:33:2c:28:02:40:da:95:45:e1:0b:
4a:5b:3a:56:56:1c:ee:14:a8:b5:95:a3:8f:60:ff:
0e:43:82:f6:ce:b2:18:52:5d:b3:c3:3f:50:34:48:
3f:6c:93:63:61:2b:24:cf:1c:5d:08:90:b0:99:e3:
f1:d4:28:5f:8d:f4:c4:5b:22:b5:8d:5e:ec:11:7b:
5a:71:3c:c0:b5:44:23:8c:92:d3:d6:70:8d:fa:71:
cc:8c:7f:a7:d2:9f:5c:dc:48:3d:49:b8:f3:f1:13:
3e:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:3E:87:CC:6F:6E:77:3B:8B:32:9C:EB:F8:01:04:E9:DC:E4:67:A8
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/WT6HzG9udzuLMpzr-AEE6dzkZ6g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
d3:4b:d0:a2:8c:e4:b2:96:3c:66:2f:d1:29:60:d0:71:b8:a9:
69:6a:ac:6c:c1:2b:a2:fe:e3:dc:b6:ed:63:f3:ae:47:2c:ae:
7b:a4:db:7a:17:e9:07:5c:54:5e:22:d5:58:de:5b:6b:bb:27:
83:c7:77:d0:73:bd:0f:22:ee:e4:ca:51:46:62:cf:69:91:09:
a8:b6:b0:01:32:0f:30:7a:f2:69:bc:2e:03:6c:4c:22:9b:82:
87:26:a3:cf:65:8a:90:1e:d8:72:a1:af:6b:1d:67:a5:ab:b6:
ce:d4:03:10:50:51:33:3c:4c:ff:c6:bd:81:77:5e:a4:6b:12:
86:34:2f:14:f3:7c:46:59:d4:12:81:9e:9b:55:4d:68:e8:16:
2d:25:ef:13:12:98:86:22:44:fa:7e:78:b1:9d:62:1a:5a:8f:
6b:ff:f1:8a:fd:54:af:06:78:d9:1c:07:ba:20:0d:1e:e6:9c:
d8:fe:45:05:c9:48:b9:bb:e2:2f:d0:b1:f4:44:99:a8:29:67:
1b:69:ea:79:01:d6:08:1f:74:b6:d5:8d:26:25:eb:07:f7:e4:
92:e9:f7:fd:78:ac:bc:97:70:db:af:e6:cf:40:73:cd:ad:eb:
03:bb:6d:91:50:8d:d6:db:be:b9:18:53:a2:3e:88:bb:b8:36:
5d:75:67:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 19:09:21 2025 by rpki-client