Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Wfyt_OHj__N7BxiJaBdp7cjdBzM.roa
File: Wfyt_OHj__N7BxiJaBdp7cjdBzM.roa (raw, json)
Hash identifier: 8rgUzfzQZsfJ+ucRzU7m8h9RHiYsbT+MV8XNysxEcPE=
Subject key identifier: 59:FC:AD:FC:E1:E3:FF:F3:7B:07:18:89:68:17:69:ED:C8:DD:07:33
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C0DA9812B1E69DE6224BBB465183876AC
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Wfyt_OHj__N7BxiJaBdp7cjdBzM.roa
Signing time: Sun 26 Nov 2023 22:04:21 +0000
ROA not before: Sun 26 Nov 2023 22:04:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18c:da9:717a/128 maxlen: 128
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:0d:a9:81:2b:1e:69:de:62:24:bb:b4:65:18:38:76:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 26 22:04:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=59fcadfce1e3fff37b071889681769edc8dd0733
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a9:02:42:1d:3a:b5:ef:e3:af:a8:83:1c:08:
62:68:65:95:60:9a:ea:d4:47:7d:a6:af:9d:4a:32:
59:19:9b:e5:c6:e8:65:59:6a:6d:25:0b:2f:99:27:
b2:0b:e4:c2:72:88:29:4a:4a:c7:25:6c:cb:29:6f:
91:e6:e1:35:9f:1f:f7:b4:3a:a4:36:a9:ad:72:5a:
97:c2:0f:63:29:f4:fb:68:31:29:1c:cc:eb:02:92:
ac:7f:87:90:d6:06:cb:3e:1a:26:5c:1e:4d:22:94:
81:cc:f5:52:72:2b:af:54:3b:09:ef:73:3b:8b:f2:
52:cb:e8:dd:e9:d9:c4:aa:87:69:7a:ce:2b:d8:82:
8f:d7:fa:1b:9d:6c:d2:72:83:99:40:d9:f8:48:40:
dd:42:d7:b7:74:e8:75:cf:42:f3:03:82:7f:50:36:
2c:6f:9b:c9:fd:14:0d:e8:61:62:0a:4e:9e:6b:81:
97:d0:03:5f:cf:c8:43:c0:4b:ea:e1:f9:4e:8b:03:
b3:8e:5e:da:cb:10:45:1b:35:db:c5:56:6d:22:13:
26:03:02:95:5f:cb:0d:f5:49:1e:0a:63:47:93:0a:
b5:3f:63:95:eb:98:d6:d6:9f:94:37:3a:53:b1:d2:
c6:e8:aa:88:d4:db:19:1b:66:fa:d8:bd:20:9a:a5:
de:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:FC:AD:FC:E1:E3:FF:F3:7B:07:18:89:68:17:69:ED:C8:DD:07:33
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Wfyt_OHj__N7BxiJaBdp7cjdBzM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
68:6f:f0:57:ca:2d:7e:a9:24:3c:bf:e4:11:84:7e:86:1c:41:
80:00:2d:41:a6:ac:db:32:34:d7:11:25:a9:ee:a8:60:2e:ae:
dc:35:a4:ed:64:cb:66:c8:5a:2a:99:24:47:18:e1:19:d5:fa:
65:e3:ac:28:b5:e5:74:6a:22:28:d0:a6:41:92:9e:01:65:9f:
70:da:5d:d5:60:6c:fc:4f:22:13:2d:7d:fd:06:bd:f4:16:5e:
18:65:5f:61:fc:df:7d:01:64:4c:05:dc:73:c0:f1:5e:b0:dd:
3d:c0:52:03:1c:09:51:1e:05:da:d1:85:ae:9d:b6:82:f4:68:
3f:f4:1d:18:1d:b0:d6:57:b3:02:55:4a:49:da:f5:97:c6:f7:
55:70:17:ac:b2:f9:cf:76:69:60:69:a2:98:dd:c6:b2:fa:43:
1a:45:54:2e:e1:c2:fa:67:5b:87:bb:b1:ad:6a:8a:79:d7:ae:
97:e6:a0:f0:94:20:6b:38:df:a3:cc:9e:38:4b:71:d4:e4:24:
9f:cb:d3:5c:9a:dc:e4:29:35:c6:3e:e1:25:45:03:81:26:8c:
41:27:4d:66:c9:59:d3:d8:7d:70:10:0f:b2:46:34:01:e6:57:
91:0b:d9:df:c4:6d:02:7c:03:a3:72:9a:5b:03:24:62:e1:ff:
dd:fc:e0:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 21:53:13 2025 by rpki-client