Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/WVZ_xu00FuuD9H_-VqK5kX6QwRE.roa
File: WVZ_xu00FuuD9H_-VqK5kX6QwRE.roa (raw, json)
Hash identifier: Zq+HW8Hq8senT1NP3obJeSFZ1uyViagm5bV1Cb1OyGo=
Subject key identifier: 59:56:7F:C6:ED:34:16:EB:83:F4:7F:FE:56:A2:B9:91:7E:90:C1:11
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BF3F52342950FA86722F90E9BBB6D5A4A
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/WVZ_xu00FuuD9H_-VqK5kX6QwRE.roa
Signing time: Tue 21 Nov 2023 22:16:50 +0000
ROA not before: Tue 21 Nov 2023 22:16:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:f3:f5:23:42:95:0f:a8:67:22:f9:0e:9b:bb:6d:5a:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 21 22:16:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=59567fc6ed3416eb83f47ffe56a2b9917e90c111
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:22:ec:91:60:49:52:f3:7e:5f:2b:03:75:1e:
60:a0:2a:35:9b:70:ce:10:70:5e:59:2a:0b:78:48:
99:b9:7a:5f:cf:96:e2:ea:64:4b:a8:b0:0e:30:f7:
91:eb:0e:c1:f0:67:28:f5:5e:81:68:2d:de:d1:2e:
12:6c:7b:8e:75:d4:87:dd:95:a6:d3:a5:2a:28:3e:
30:33:24:42:36:ad:32:18:37:3d:6c:2d:c1:92:43:
46:f4:94:ed:50:5a:dc:20:7d:e3:02:6c:3d:d2:a7:
1f:be:f9:13:db:b0:25:a2:97:77:03:0b:f9:4e:ce:
0c:19:7c:ae:a9:7f:6c:13:67:49:ac:b8:12:52:fb:
b0:d1:5b:83:4e:f4:d6:1f:2c:26:e1:6c:63:15:a8:
71:e3:4d:76:03:e2:64:2f:c4:ee:ca:54:cd:60:59:
be:61:6f:95:a2:b9:e4:4f:54:41:9d:ad:ac:bc:6e:
2d:cb:f3:54:14:55:bb:c6:58:40:a2:3a:ee:0d:53:
e9:9b:09:2d:5f:a0:fd:9d:07:46:48:ba:25:1e:5f:
f2:84:ae:fb:f9:64:10:d7:00:50:7b:a0:bf:78:92:
02:89:98:97:5e:fb:ed:58:1d:45:50:01:94:37:72:
db:e1:ce:4f:d7:a6:26:0e:87:d4:44:dc:61:ac:51:
70:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:56:7F:C6:ED:34:16:EB:83:F4:7F:FE:56:A2:B9:91:7E:90:C1:11
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/WVZ_xu00FuuD9H_-VqK5kX6QwRE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
c8:e0:7e:7e:8c:6a:47:27:57:c9:ec:69:d1:06:f2:36:6d:48:
82:d9:89:f5:82:3b:85:94:97:2f:7f:ec:6c:15:49:1d:67:dc:
2a:c6:9f:8f:76:31:ba:86:e7:52:fd:a7:aa:45:36:e4:3d:3f:
b1:e8:12:ff:9e:f0:d2:17:02:96:bc:f2:f8:a8:a5:c2:e9:90:
ce:90:ab:fb:62:82:e9:2c:f4:f5:57:e7:4f:00:c9:2b:7a:af:
49:76:ce:ec:67:5c:2c:f9:c2:ce:23:47:e6:11:f1:e0:b5:71:
52:08:64:1b:03:02:39:3a:1f:2a:9d:99:fb:8b:f4:68:60:c6:
d4:4f:68:ee:11:ba:93:20:d1:dc:cc:cc:70:af:2d:a6:1e:7f:
d8:cd:74:8c:97:e6:3e:9d:94:12:02:1e:82:e8:ec:6c:3f:b9:
55:8e:c5:ef:04:6b:a7:c1:7f:6e:b0:64:de:89:ae:77:b0:6f:
e9:11:7d:56:e0:63:2d:2e:ec:fa:67:eb:93:f5:62:c4:55:3f:
6a:16:02:8d:ec:e6:2a:90:63:bd:6e:b4:fb:6a:3b:e8:17:6b:
99:3b:7a:85:da:1a:68:dd:ee:ff:4d:1a:3c:ef:82:e2:48:09:
ea:2c:50:7c:7d:c4:34:0e:9a:87:8f:6e:4d:c7:92:a8:ab:fe:
d1:4f:22:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:36:50 2025 by rpki-client