Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/WRNZi-LXtqwPzggE5U8oLAZWbyY.roa
File: WRNZi-LXtqwPzggE5U8oLAZWbyY.roa (raw, json)
Hash identifier: cpoTdvKQ2/xnrExVsKkZbHiSb0FpFOEOadtgvGz+VO4=
Subject key identifier: 59:13:59:8B:E2:D7:B6:AC:0F:CE:08:04:E5:4F:28:2C:06:56:6F:26
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BF232408E7510507D0185C8D1400BE4CD
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/WRNZi-LXtqwPzggE5U8oLAZWbyY.roa
Signing time: Tue 21 Nov 2023 14:04:21 +0000
ROA not before: Tue 21 Nov 2023 14:04:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:f232:3767/128 maxlen: 128
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:f2:32:40:8e:75:10:50:7d:01:85:c8:d1:40:0b:e4:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 21 14:04:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5913598be2d7b6ac0fce0804e54f282c06566f26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c9:19:37:73:ad:ee:be:d8:9b:8c:26:e5:e0:
02:48:5e:ab:cd:a3:b9:da:bc:b7:b7:20:71:f7:6f:
64:aa:30:45:5b:05:81:de:9d:a2:f8:34:e0:62:8e:
28:cb:16:74:8b:4d:81:21:5c:f2:95:d3:ef:1d:a7:
bb:ba:ff:a0:06:4d:5e:8e:c9:42:10:2d:17:66:64:
4c:a3:cd:be:f6:fa:b5:dd:ab:51:f3:0f:5d:47:82:
7a:53:90:24:6b:a8:49:1c:a3:8d:72:2f:5d:80:69:
de:34:9d:ef:6a:33:2b:b3:7f:5f:3b:87:d0:2b:0d:
5e:03:eb:42:a0:98:a9:57:91:06:3d:36:f2:f3:5c:
3a:0f:f1:57:1e:06:35:1b:99:8f:b0:da:9f:60:54:
a9:fa:c7:6a:81:5e:4f:96:e6:1f:e3:72:fb:56:af:
3b:df:c7:d7:b0:5a:bc:c0:77:2b:68:29:3d:1c:50:
ca:ec:d8:67:54:7d:6d:72:bc:d0:84:bd:92:03:41:
9d:89:8d:bd:b7:51:62:42:28:5b:97:7e:a3:23:55:
41:0b:b2:0d:87:7b:4c:2d:ac:ae:8d:b7:95:bc:04:
c0:b4:ca:58:6b:0a:c3:37:1f:f5:c0:a2:a4:f6:7d:
1c:40:6c:38:e9:45:dd:4a:8f:e6:78:35:6a:bf:2b:
66:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:13:59:8B:E2:D7:B6:AC:0F:CE:08:04:E5:4F:28:2C:06:56:6F:26
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/WRNZi-LXtqwPzggE5U8oLAZWbyY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6e:57:9a:6d:bb:e3:37:ce:15:19:1d:64:19:b5:4c:4d:52:bc:
01:05:2c:5e:e4:a1:88:9f:88:bc:14:b2:15:14:a1:f2:58:46:
53:03:b7:b6:67:84:00:df:8b:00:0f:d3:10:10:9b:d8:20:31:
cf:66:24:75:33:5b:a2:3c:2c:c0:5a:02:fc:0c:8a:ba:80:28:
de:d5:f0:dd:2e:a4:3e:73:31:95:36:d9:2d:8e:f5:60:14:b7:
e4:5f:b6:76:71:4a:ef:14:ae:ab:01:1d:b2:94:16:40:66:a6:
ac:ee:a9:6a:1a:43:0a:7b:95:b1:ac:bd:4c:82:b3:43:22:80:
1b:11:6a:5c:25:6c:05:ea:c5:e3:10:ab:c0:b1:58:35:31:80:
f0:64:67:7f:ea:02:c1:81:38:9c:a9:0d:da:c2:3d:4b:1a:b5:
07:07:b2:79:0c:43:13:59:8a:4a:20:34:ff:00:50:f5:87:4c:
da:5d:03:64:d6:81:9d:ee:3c:68:30:0f:ea:90:be:54:cf:9c:
f5:eb:1c:d7:0b:3c:d3:20:0c:ff:fe:aa:a6:7c:fc:aa:b4:8a:
0d:08:39:b7:7c:d8:4c:82:ca:b4:ab:e8:9b:1f:3d:e2:36:4a:
a9:41:6e:c3:07:b0:c2:87:09:d9:84:65:f9:5b:29:39:10:1c:
1b:2b:db:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 02:59:30 2025 by rpki-client