Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/wcjUie8PUNsLOSDGjdbTe0t3Nxo.roa
File: wcjUie8PUNsLOSDGjdbTe0t3Nxo.roa (raw, json)
Hash identifier: LM9Fu6gfDviVC9CWYLCbCebTI8gvwsF/JjwM8WXWGFM=
Subject key identifier: C1:C8:D4:89:EF:0F:50:DB:0B:39:20:C6:8D:D6:D3:7B:4B:77:37:1A
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B6CFD853F871A115A9AAE694B04A7A506
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/wcjUie8PUNsLOSDGjdbTe0t3Nxo.roa
Signing time: Thu 26 Oct 2023 17:17:15 +0000
ROA not before: Thu 26 Oct 2023 17:17:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:6c:fd:85:3f:87:1a:11:5a:9a:ae:69:4b:04:a7:a5:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 26 17:17:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c1c8d489ef0f50db0b3920c68dd6d37b4b77371a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:57:dd:87:91:82:5e:d9:86:02:a1:9f:d2:6d:
f2:73:a8:9a:07:78:f9:bc:93:a8:ae:c8:44:80:ea:
cc:41:7c:47:e3:a8:d6:8b:30:e2:7c:bf:5a:85:0c:
a2:5b:8d:ed:ff:3e:b5:bd:1e:6b:f9:6e:87:63:d5:
2a:da:bb:de:90:19:38:9b:9e:f8:78:e5:dc:db:35:
b3:c7:29:a6:b4:9e:b6:07:57:ae:b6:6d:05:d7:70:
89:23:28:96:cf:ff:df:e6:c1:e7:2d:cc:bd:c9:19:
cf:3f:97:ee:87:08:f5:66:a0:fa:25:cd:76:d6:68:
4a:b8:e3:74:55:42:2e:47:ef:e1:2f:27:ff:01:de:
d8:8e:54:82:b7:ae:20:dc:24:59:2a:87:81:78:64:
55:ef:35:49:22:4a:c3:70:2a:23:d8:1f:00:f3:d4:
47:cc:2b:8b:21:d6:f1:65:78:64:cf:90:41:de:72:
a5:ca:0c:fe:58:48:1a:90:f8:01:75:d3:60:02:5e:
aa:b1:78:b1:b9:9c:27:43:4f:0b:9c:ac:3c:59:d7:
ef:d8:f4:19:89:b5:9b:06:de:d2:4a:9b:b1:e9:46:
86:0f:df:5c:04:ea:83:1b:3a:5f:2f:58:72:11:a1:
54:12:11:df:ed:5b:4c:f8:07:71:6b:66:eb:4d:cb:
54:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:C8:D4:89:EF:0F:50:DB:0B:39:20:C6:8D:D6:D3:7B:4B:77:37:1A
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/wcjUie8PUNsLOSDGjdbTe0t3Nxo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2c:07:a7:3f:4a:0b:b5:7e:15:69:7b:d1:5b:89:cf:f6:4f:c1:
5e:15:49:b1:6d:33:d0:58:52:27:21:bc:cf:03:8e:9c:69:de:
c6:5a:ec:74:21:84:92:cc:0b:37:d6:b6:02:b8:bb:c4:02:22:
c4:95:89:64:f4:79:cd:9c:73:0f:56:a4:3f:cc:13:cf:f2:e4:
7d:93:13:fa:7a:38:0c:91:16:67:37:3c:1e:7b:3f:d6:f9:1f:
ac:96:0a:eb:43:87:4f:93:3a:40:fa:de:f6:83:2e:b6:4d:d9:
bd:70:9b:39:37:0e:d1:73:3d:85:af:e3:a9:76:14:72:ab:7d:
74:e6:26:dc:11:8b:4a:06:6a:26:91:47:45:51:b8:95:26:00:
d9:4f:bf:6a:fe:70:78:5f:1d:f8:12:a6:5e:5d:f0:68:37:6c:
af:af:51:4b:ae:5c:ff:99:d3:d7:fc:f0:7d:71:61:48:66:52:
83:49:b8:b4:94:92:05:8a:14:fb:0e:dc:85:db:ce:ce:07:ac:
2a:61:4b:b9:1e:7a:63:21:bb:93:9f:20:19:68:ea:75:11:ac:
3f:51:f2:cd:80:5d:2b:ea:7d:c7:f2:74:d4:ed:97:6d:76:34:
10:f8:9c:14:6c:9a:64:d9:49:21:f5:9a:22:13:ce:a9:11:10:
48:e2:ae:bf
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYts/YU/hxoRWpquaUsEp6UGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMDI2MTcxNzE1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMWM4ZDQ4OWVmMGY1MGRiMGIzOTIwYzY4ZGQ2ZDM3YjRiNzczNzFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwlfdh5GCXtmGAqGf0m3yc6iaB3j5
vJOorshEgOrMQXxH46jWizDifL9ahQyiW43t/z61vR5r+W6HY9Uq2rvekBk4m574
eOXc2zWzxymmtJ62B1eutm0F13CJIyiWz//f5sHnLcy9yRnPP5fuhwj1ZqD6Jc12
1mhKuON0VUIuR+/hLyf/Ad7YjlSCt64g3CRZKoeBeGRV7zVJIkrDcCoj2B8A89RH
zCuLIdbxZXhkz5BB3nKlygz+WEgakPgBddNgAl6qsXixuZwnQ08LnKw8Wdfv2PQZ
ibWbBt7SSpux6UaGD99cBOqDGzpfL1hyEaFUEhHf7VtM+Adxa2brTctUDwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFMHI1InvD1DbCzkgxo3W03tLdzcaMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvd2NqVWllOFBVTnNMT1NER2pkYlRlMHQzTnhvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBACwHpz9KC7V+FWl70VuJ
z/ZPwV4VSbFtM9BYUichvM8Djpxp3sZa7HQhhJLMCzfWtgK4u8QCIsSViWT0ec2c
cw9WpD/ME8/y5H2TE/p6OAyRFmc3PB57P9b5H6yWCutDh0+TOkD63vaDLrZN2b1w
mzk3DtFzPYWv46l2FHKrfXTmJtwRi0oGaiaRR0VRuJUmANlPv2r+cHhfHfgSpl5d
8Gg3bK+vUUuuXP+Z09f88H1xYUhmUoNJuLSUkgWKFPsO3IXbzs4HrCphS7keemMh
u5OfIBlo6nURrD9R8s2AXSvqfcfydNTtl212NBD4nBRsmmTZSSH1miITzqkREEji
rr8=
-----END CERTIFICATE-----
Generated at Sat May 10 12:22:47 2025 by rpki-client