Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/WZ_fk5lx7yavPLFcg-WV2XjfxF0.roa
File: WZ_fk5lx7yavPLFcg-WV2XjfxF0.roa (raw, json)
Hash identifier: iBCCAmX9H+njA2EJFbXQTnLc1bnI8Y0Ioo5jY8gkf+4=
Subject key identifier: 59:9F:DF:93:99:71:EF:26:AF:3C:B1:5C:83:E5:95:D9:78:DF:C4:5D
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B2D07EB68F7049E300FD97572091952C8
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/WZ_fk5lx7yavPLFcg-WV2XjfxF0.roa
Signing time: Sat 14 Oct 2023 07:12:55 +0000
ROA not before: Sat 14 Oct 2023 07:12:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:2d:07:eb:68:f7:04:9e:30:0f:d9:75:72:09:19:52:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 14 07:12:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=599fdf939971ef26af3cb15c83e595d978dfc45d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:d1:0a:c5:9e:64:33:91:be:d0:89:3d:07:c7:
97:4d:27:47:83:66:a8:da:41:42:b2:0f:70:f0:36:
1a:3f:b1:20:6c:81:e5:c4:ba:74:8f:22:c2:7e:45:
71:22:54:a2:07:95:16:a1:da:13:54:46:7b:c0:b4:
ac:39:f4:9e:d8:2a:4f:8d:0d:aa:d9:0e:53:c1:9e:
a1:13:5e:a4:34:18:34:ca:5c:70:81:0e:a6:65:dc:
d9:db:0f:10:12:1e:96:00:03:a5:4f:0b:cd:ca:95:
c7:04:2c:aa:78:66:93:73:1e:cc:8e:49:1f:55:32:
f6:5d:99:55:3c:a6:0c:5f:9d:8e:87:2f:4e:94:37:
ef:62:22:d4:c3:78:71:42:ea:0c:df:1a:92:0f:f6:
12:5e:07:11:19:c3:ff:c8:3a:a1:6c:eb:75:c4:71:
6f:0d:ee:27:86:0c:64:5f:b7:47:02:5d:9b:bf:73:
1d:30:61:60:2c:49:b0:d5:f9:6f:3d:d4:c3:75:b3:
71:b5:3d:00:4a:e0:b8:0d:3d:e2:7f:fe:5e:72:0b:
f5:1f:74:aa:1b:20:f5:80:2c:77:58:cb:c0:c2:2e:
4b:c5:1c:61:06:d7:9a:1e:8f:6c:3a:b1:dc:20:4d:
7b:02:ea:e9:91:36:76:33:fe:63:d8:a0:9e:cd:d3:
f4:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:9F:DF:93:99:71:EF:26:AF:3C:B1:5C:83:E5:95:D9:78:DF:C4:5D
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/WZ_fk5lx7yavPLFcg-WV2XjfxF0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
c1:a5:09:5e:61:d9:ec:3b:4f:69:af:96:b3:bd:8f:76:95:cb:
f1:05:a3:8e:5e:11:a6:1e:17:45:21:8b:24:58:5d:08:e9:68:
b6:25:d8:70:ae:d9:b5:a9:bf:0d:2b:fd:ae:43:cf:77:27:1e:
69:88:23:69:a7:ca:38:bb:91:67:16:89:27:b4:bb:ed:89:e7:
ce:fa:08:a1:47:f5:f9:db:2f:88:7e:48:41:1c:cb:19:90:bf:
08:9a:e1:0c:90:ee:6a:ba:06:45:81:2e:fd:4c:9f:b2:88:9f:
b3:6f:32:4a:f4:1e:10:6d:84:c4:83:c4:5e:e5:a1:1c:d9:ee:
c9:b0:5a:ca:be:8a:4f:16:fa:33:9b:c2:2b:45:d3:bc:80:c7:
93:81:e5:e8:fc:38:9f:a6:08:99:fa:5e:94:a8:e9:8f:53:92:
d7:85:e2:21:7e:af:3e:d3:d8:e3:c5:c1:6a:29:30:4b:5e:8a:
a0:ee:ec:26:55:ac:34:b5:01:43:15:4a:9a:cc:3a:7f:d8:67:
54:25:de:29:46:d6:fa:0f:1c:40:c2:a2:79:c6:ee:8f:5c:1a:
d7:eb:8f:09:51:2f:cb:99:a0:8f:cb:02:a3:08:39:8a:ba:9c:
f5:80:71:1c:85:d6:91:b0:8f:dc:d4:0c:b2:cd:b6:89:48:96:
6c:25:3c:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 11:10:09 2025 by rpki-client