Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/wWttPLnfG8y9UZJ1Z8RR1PR3PHQ.roa
File: wWttPLnfG8y9UZJ1Z8RR1PR3PHQ.roa (raw, json)
Hash identifier: Vt7etJPk3R56KSdEX7ay2/5nS5JdnZYCVRCji4HnNAc=
Subject key identifier: C1:6B:6D:3C:B9:DF:1B:CC:BD:51:92:75:67:C4:51:D4:F4:77:3C:74
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C4DDB8280BB74F101980F5DDF4AADA624
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/wWttPLnfG8y9UZJ1Z8RR1PR3PHQ.roa
Signing time: Sat 09 Dec 2023 09:14:40 +0000
ROA not before: Sat 09 Dec 2023 09:14:40 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:4d:db:82:80:bb:74:f1:01:98:0f:5d:df:4a:ad:a6:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 9 09:14:40 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c16b6d3cb9df1bccbd51927567c451d4f4773c74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:7f:ab:f0:31:11:91:7e:ad:b0:12:32:42:ab:
fb:54:6c:29:5f:3a:37:70:23:4d:4b:1c:aa:88:04:
2a:da:8b:98:b9:4c:5a:50:d2:d4:7a:79:7d:01:51:
d4:e5:be:06:c9:e1:cd:3d:ee:b9:64:a2:81:d4:ba:
98:aa:d7:2c:d8:56:03:c1:74:c1:17:83:7e:bd:bd:
99:56:f9:4e:10:65:0c:26:5d:a8:9c:22:d7:31:70:
c7:fb:4e:e8:6a:6b:a0:16:f2:82:aa:32:c2:52:4b:
8e:20:9e:d8:42:8a:0b:03:60:d6:fd:ac:35:6c:d3:
c6:e5:00:a9:ca:20:da:09:d3:91:a0:26:21:5c:f9:
39:81:24:f9:f1:08:e8:f3:15:6b:9e:b2:53:96:8a:
21:cd:e6:0c:f1:60:0e:b5:44:67:bd:28:5e:9c:de:
f3:c0:97:56:0e:73:37:31:8f:e7:e5:db:a1:41:fb:
3b:3d:97:15:9c:ea:28:93:25:27:af:67:a9:e4:85:
4a:b8:01:f8:60:34:cf:ae:14:be:c3:a8:64:61:b5:
3f:38:40:7d:31:29:c7:98:ef:bc:e7:9a:df:68:ec:
84:7e:c6:d3:94:4e:e7:da:67:81:6f:23:bc:dc:e8:
76:c9:ab:1d:bc:10:f3:58:37:a3:ce:bb:fe:b5:1b:
08:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:6B:6D:3C:B9:DF:1B:CC:BD:51:92:75:67:C4:51:D4:F4:77:3C:74
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/wWttPLnfG8y9UZJ1Z8RR1PR3PHQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
40:10:46:9e:d3:65:d4:68:35:28:d6:11:49:cc:00:16:e8:e4:
60:b1:cd:c3:7e:1d:38:18:e4:d6:e8:df:88:2e:10:c8:3d:2f:
b9:e0:a3:06:69:61:f8:04:4a:b2:a5:46:35:78:2b:82:34:d4:
9e:04:c4:4e:f8:83:d4:fb:25:74:6a:eb:91:e7:5a:ca:6a:2f:
db:e2:c0:b5:aa:53:b5:ed:50:5a:ea:f4:27:95:97:69:9a:3a:
d7:17:a2:f1:97:6a:0c:31:ac:7a:21:71:0a:54:60:aa:aa:dc:
ee:db:aa:6f:ee:6f:e7:23:00:03:1f:6f:73:3c:2b:b8:11:77:
e6:3b:3b:0b:74:6d:26:50:d2:c4:cc:93:c4:8c:40:c3:b8:c0:
ed:7c:7d:62:c0:b8:51:7f:4f:4e:25:69:10:8f:a6:c7:60:cb:
ca:62:a9:ad:07:ec:d1:33:37:b1:15:d0:87:3c:1e:95:2d:dc:
84:41:10:b8:4e:a2:6f:9c:13:01:9a:52:bb:44:95:ce:40:a4:
58:69:ba:1e:a5:21:2c:24:1b:fb:89:d0:dd:82:0b:5f:c9:ef:
25:a0:5f:6b:1e:28:6d:dc:ac:b0:6c:6c:2a:68:b0:ba:e0:93:
ff:4c:e1:4d:50:4d:cf:ce:5b:d6:b4:8d:66:fe:d7:c1:ed:0d:
b2:0c:d6:73
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYxN24KAu3TxAZgPXd9KraYkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMjA5MDkxNDQwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMTZiNmQzY2I5ZGYxYmNjYmQ1MTkyNzU2N2M0NTFkNGY0NzczYzc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3n+r8DERkX6tsBIyQqv7VGwpXzo3
cCNNSxyqiAQq2ouYuUxaUNLUenl9AVHU5b4GyeHNPe65ZKKB1LqYqtcs2FYDwXTB
F4N+vb2ZVvlOEGUMJl2onCLXMXDH+07oamugFvKCqjLCUkuOIJ7YQooLA2DW/aw1
bNPG5QCpyiDaCdORoCYhXPk5gST58Qjo8xVrnrJTloohzeYM8WAOtURnvShenN7z
wJdWDnM3MY/n5duhQfs7PZcVnOookyUnr2ep5IVKuAH4YDTPrhS+w6hkYbU/OEB9
MSnHmO+855rfaOyEfsbTlE7n2meBbyO83Oh2yasdvBDzWDejzrv+tRsIsQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFMFrbTy53xvMvVGSdWfEUdT0dzx0MB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvd1d0dFBMbmZHOHk5VVpKMVo4UlIxUFIzUEhRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAEAQRp7TZdRoNSjWEUnM
ABbo5GCxzcN+HTgY5Nbo34guEMg9L7ngowZpYfgESrKlRjV4K4I01J4ExE74g9T7
JXRq65HnWspqL9viwLWqU7XtUFrq9CeVl2maOtcXovGXagwxrHohcQpUYKqq3O7b
qm/ub+cjAAMfb3M8K7gRd+Y7Owt0bSZQ0sTMk8SMQMO4wO18fWLAuFF/T04laRCP
psdgy8piqa0H7NEzN7EV0Ic8HpUt3IRBELhOom+cEwGaUrtElc5ApFhpuh6lISwk
G/uJ0N2CC1/J7yWgX2seKG3crLBsbCposLrgk/9M4U1QTc/OW9a0jWb+18HtDbIM
1nM=
-----END CERTIFICATE-----
Generated at Sun May 11 00:51:46 2025 by rpki-client