Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/WecAXjVhb1PiRAFeGkHoltPoasU.roa
File: WecAXjVhb1PiRAFeGkHoltPoasU.roa (raw, json)
Hash identifier: TshNhi5vr+439DhOI0JCMHCdBW++87n5wXSaxZXuMsY=
Subject key identifier: 59:E7:00:5E:35:61:6F:53:E2:44:01:5E:1A:41:E8:96:D3:E8:6A:C5
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E141D315CDE1D3181DB8CF298FFE49BDD
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/WecAXjVhb1PiRAFeGkHoltPoasU.roa
Signing time: Wed 06 Mar 2024 14:14:01 +0000
ROA not before: Wed 06 Mar 2024 14:14:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:14:1d:31:5c:de:1d:31:81:db:8c:f2:98:ff:e4:9b:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 6 14:14:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=59e7005e35616f53e244015e1a41e896d3e86ac5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:ce:14:af:f5:ea:4c:93:49:08:2e:f3:93:eb:
6e:89:f0:d9:b3:31:7b:e1:a3:db:c5:b5:f0:c8:df:
fd:32:1b:81:93:2b:3d:a4:f4:04:0f:2b:d3:c3:43:
5b:b1:cf:e6:20:21:ab:15:db:3f:5a:85:66:b9:73:
c4:6a:72:b8:6e:47:98:72:bb:0a:7d:3a:48:5c:e8:
b0:d3:a3:54:02:d1:73:24:4a:d4:9f:11:8c:a8:67:
ec:50:e8:03:1d:64:c2:4c:ea:6a:a4:2e:18:0d:33:
6e:0f:df:49:9a:ee:05:69:d6:20:53:b1:95:12:ac:
28:b0:bb:73:ca:b8:0a:68:32:f8:cb:f7:ad:9b:5a:
57:85:e0:80:e7:40:e3:a3:83:4b:f7:cd:7e:ae:7b:
c1:c8:db:78:39:78:a2:fe:ee:41:f2:60:51:80:ab:
f1:c3:64:72:53:6b:65:44:c5:bd:cf:4c:3f:22:64:
11:f9:6d:53:6b:51:58:8f:e5:71:a2:80:98:93:60:
92:d1:c7:07:5d:52:24:7d:d0:1b:ea:86:53:42:c0:
14:f9:28:5c:3a:18:5a:a4:2e:ea:11:c6:d8:a8:0f:
56:a5:5c:bc:e4:97:26:f9:ff:fc:0b:de:cf:5f:94:
f2:0c:84:8c:1a:82:15:8f:62:49:48:aa:10:01:ea:
d7:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:E7:00:5E:35:61:6F:53:E2:44:01:5E:1A:41:E8:96:D3:E8:6A:C5
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/WecAXjVhb1PiRAFeGkHoltPoasU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3d:b0:c6:1a:87:05:b5:ec:22:1f:fc:84:8c:81:ab:e1:ae:87:
31:c4:da:9e:3b:2f:78:55:32:8f:bd:25:8b:e1:96:f1:37:a6:
d8:5c:2a:03:8d:5a:da:e6:0d:48:81:c0:43:c7:68:5f:21:ec:
bc:30:e7:6c:c5:96:f8:2f:52:26:12:a5:62:8e:12:f9:cf:c2:
ce:11:2e:a4:98:3e:da:da:db:f2:67:cf:d9:ed:27:09:21:61:
bf:d2:a8:81:e4:7b:17:52:a2:2c:3d:f6:d4:c5:0e:75:95:ab:
00:cf:69:bb:59:c3:fb:b6:49:f6:7f:33:6f:39:93:9d:ea:73:
16:60:7a:4f:89:1d:da:99:99:38:a8:34:28:c6:f0:d8:ee:8e:
53:31:f1:ef:31:fe:8c:d8:92:15:ae:b8:a3:a4:ed:ce:ac:71:
0f:d8:f1:86:a1:57:d6:05:f7:c5:03:07:f3:65:22:6e:67:da:
79:c8:ce:39:99:c9:2f:58:5d:5e:39:ba:84:d8:f6:12:7f:b1:
40:3a:97:cf:83:80:56:af:c3:de:df:b2:4e:59:6e:6b:3a:c2:
a3:30:03:f9:31:4a:f3:91:17:87:38:f2:63:12:84:ce:0d:f2:
f3:51:af:c2:20:b2:4b:74:f1:a1:f0:83:89:5e:c8:6e:4c:ff:
50:00:43:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 21:56:34 2025 by rpki-client