Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Wnhg2X8WBMcMsMgJMMhpfeScnyM.roa
File: Wnhg2X8WBMcMsMgJMMhpfeScnyM.roa (raw, json)
Hash identifier: yqHb2tYufGNeapYRIv9hE+9VVy7hDHSLfeRDYLisM24=
Subject key identifier: 5A:78:60:D9:7F:16:04:C7:0C:B0:C8:09:30:C8:69:7D:E4:9C:9F:23
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C333DDD806998A035D67BC59F7952458D
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Wnhg2X8WBMcMsMgJMMhpfeScnyM.roa
Signing time: Mon 04 Dec 2023 05:12:21 +0000
ROA not before: Mon 04 Dec 2023 05:12:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:33:3d:dd:80:69:98:a0:35:d6:7b:c5:9f:79:52:45:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 4 05:12:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5a7860d97f1604c70cb0c80930c8697de49c9f23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ac:c8:9f:d2:bf:a5:58:e4:40:52:cb:6d:68:
bb:2d:82:d6:68:85:80:06:ab:4e:41:c5:e3:8b:cf:
c2:1c:1f:1a:72:88:20:19:2a:fd:c4:69:c2:47:71:
87:bc:b7:25:83:e0:d8:b7:d8:1d:b0:81:eb:b1:2a:
bf:16:aa:ce:c9:c2:6b:9c:4e:21:54:31:72:63:34:
b0:95:9e:62:12:6d:29:ab:8f:60:60:47:83:4b:ea:
8b:d8:23:39:f2:e8:77:14:ea:37:0b:e6:1d:64:60:
4b:3e:dd:67:78:05:bb:0c:b0:af:92:6a:73:56:01:
9e:03:fc:f8:a5:96:b2:26:1f:b2:5a:50:f1:30:f3:
3e:13:ff:53:ae:70:22:b1:15:84:c8:8b:bb:b0:00:
8b:b1:e8:2a:d1:18:4a:dd:9c:af:60:a3:f0:97:57:
b6:a6:b1:16:55:e7:7b:16:d1:89:21:7e:cd:17:c6:
57:c5:4e:1b:e8:b6:70:04:36:a3:4b:0d:4f:90:57:
a0:66:18:6e:58:80:2d:e8:92:bb:e1:9b:c3:6e:07:
ca:aa:c9:9e:24:c0:a6:36:46:79:55:8b:28:00:c1:
12:49:85:bb:9a:c6:bb:dc:2c:19:f5:d4:81:14:e2:
8d:1f:ec:a4:81:c6:59:42:8a:6c:87:78:46:9e:7e:
58:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:78:60:D9:7F:16:04:C7:0C:B0:C8:09:30:C8:69:7D:E4:9C:9F:23
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Wnhg2X8WBMcMsMgJMMhpfeScnyM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3c:01:f4:29:0c:f7:ff:0b:15:d8:ec:81:7b:bb:ab:c3:3a:1d:
bc:9f:67:e9:e6:29:f3:82:64:8e:de:c1:ae:d0:07:8f:3a:49:
30:c8:71:24:ec:42:c1:62:0e:2c:2e:88:28:23:09:fe:0c:6c:
ac:c9:95:a2:96:f5:88:e9:55:84:1d:ad:63:9e:9a:42:d5:eb:
27:a3:c8:65:d2:b1:87:e1:91:55:85:57:bc:a4:33:86:48:6f:
d2:e1:44:2f:7d:47:df:57:af:45:ab:fb:59:98:cd:83:3e:ff:
99:03:d5:cd:72:10:c5:eb:5a:92:65:b8:2c:08:7b:98:42:6f:
eb:d9:3a:c1:aa:b7:ee:5a:3e:a4:fe:52:cf:ce:be:02:20:4d:
93:f4:2b:f9:cc:f6:a4:d4:2d:62:4b:06:cb:21:5c:83:be:03:
f4:6b:30:63:9a:a4:3f:59:0c:ed:ec:86:3f:07:2b:e6:96:8f:
0e:96:35:d1:db:95:e8:7c:6f:d9:7a:70:38:48:e6:74:d5:07:
51:11:2d:d5:cd:44:e4:1b:33:37:d9:f8:bc:d5:e4:1f:54:c3:
72:36:a1:6f:68:4a:6c:4f:75:a7:a6:35:8c:e9:2b:ae:44:52:
77:7f:cd:76:18:92:48:0f:5f:a1:99:6c:90:aa:63:d9:f7:bd:
fa:6d:69:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 09:22:13 2025 by rpki-client