Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/WgbGVMC__y2NQAfgUuF-xHF1Zj0.roa
File: WgbGVMC__y2NQAfgUuF-xHF1Zj0.roa (raw, json)
Hash identifier: ADgwbEt9KA478bNIH8zyEk9sFTkQDhdYTb56vSXr2xw=
Subject key identifier: 5A:06:C6:54:C0:BF:FF:2D:8D:40:07:E0:52:E1:7E:C4:71:75:66:3D
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B74E880C2B088682EB92C9B257564A7C3
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/WgbGVMC__y2NQAfgUuF-xHF1Zj0.roa
Signing time: Sat 28 Oct 2023 06:11:16 +0000
ROA not before: Sat 28 Oct 2023 06:11:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:74:e8:80:c2:b0:88:68:2e:b9:2c:9b:25:75:64:a7:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 28 06:11:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5a06c654c0bfff2d8d4007e052e17ec47175663d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:27:d0:5d:89:35:32:8e:c8:09:6b:28:44:3d:
b1:17:41:2f:8a:15:e1:58:a7:ee:f1:f0:e4:f5:0b:
a7:32:4d:5d:ab:71:19:09:a4:25:d8:ba:ec:90:b9:
be:17:d8:ec:22:59:e5:a8:1c:c0:df:06:fe:72:8c:
38:dd:5e:23:1b:bc:42:86:ad:3c:e7:25:62:b5:a2:
ac:e7:45:6c:a6:0f:63:2c:9d:9f:f2:1e:e9:be:f5:
65:5a:b6:69:6c:e4:b6:68:c6:48:b2:99:94:fe:74:
a9:17:16:2d:76:ef:66:9a:0c:aa:f8:2e:32:9f:e1:
32:64:f7:1d:0d:b9:f8:cb:1b:ff:01:18:e0:d3:ad:
d2:c6:70:91:c7:76:49:d8:b3:1b:0c:ce:45:64:4b:
ca:93:43:2e:11:c8:7e:26:7f:3a:03:dd:a7:f2:1e:
4d:c6:ff:0a:08:5d:c9:15:ca:a2:fa:98:b1:45:3c:
ee:fa:da:93:ce:0d:2a:e5:a1:04:79:50:ad:c6:3d:
f9:3a:d5:0b:36:27:65:9d:d2:55:91:48:85:86:3c:
7c:f3:a1:6e:58:07:75:61:b2:83:cb:b3:d4:78:42:
36:dc:de:95:4d:f1:9c:56:1a:cf:9e:eb:a3:76:f1:
8d:c8:72:35:9b:ce:c2:46:16:c4:af:d0:22:e1:63:
f6:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:06:C6:54:C0:BF:FF:2D:8D:40:07:E0:52:E1:7E:C4:71:75:66:3D
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/WgbGVMC__y2NQAfgUuF-xHF1Zj0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
52:ae:d1:74:9f:ac:b7:f6:17:21:c9:6a:d3:cc:37:18:6b:c7:
81:b3:f4:ea:35:bd:a1:a5:54:97:5b:22:5c:a2:0c:bb:ec:33:
9c:79:f4:bd:20:05:69:1f:c3:eb:84:28:81:dd:cd:3f:35:d7:
10:6a:16:28:52:01:ed:97:d5:9f:c5:91:be:18:3a:ae:4f:e7:
65:2f:2b:c5:31:c4:01:7b:07:ae:25:8e:ac:39:73:61:43:4d:
48:a5:02:d7:2a:1e:9d:07:81:df:eb:aa:00:86:ab:7e:5f:97:
8a:71:26:4f:98:66:a8:4c:80:c8:5a:eb:ec:30:fb:c8:cc:d3:
2d:f8:6e:a8:57:f9:bc:3d:fe:16:28:4c:92:70:1e:82:e8:8f:
f5:08:6a:cf:0f:49:dc:e9:2f:16:d1:0a:20:bf:f5:ba:9e:2f:
1f:00:3e:5b:6c:c8:d3:0f:98:4f:ba:8e:ee:6b:d3:64:b5:de:
9f:19:b7:3a:40:24:7d:67:e1:6d:a3:99:74:79:b0:5f:dc:d3:
44:ce:c7:58:dd:81:5d:b9:91:51:d4:91:82:5e:11:45:32:81:
47:ba:2b:b7:69:d6:97:3f:b4:01:b6:6f:89:64:83:11:c4:6f:
6d:50:da:6a:f9:ec:ce:dc:04:c8:76:90:b8:f6:91:fc:28:47:
ee:2b:e7:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:07:10 2025 by rpki-client