Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Wo7cx-z0XX3zlhLET-BX_yQKjvI.roa
File: Wo7cx-z0XX3zlhLET-BX_yQKjvI.roa (raw, json)
Hash identifier: j9SNUe3eMUkTLvp4chFfyXPYZ2f47mgOfTcD2s6xmRw=
Subject key identifier: 5A:8E:DC:C7:EC:F4:5D:7D:F3:96:12:C4:4F:E0:57:FF:24:0A:8E:F2
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B27A34E29D449939A9B89B8195ECB8FB1
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Wo7cx-z0XX3zlhLET-BX_yQKjvI.roa
Signing time: Fri 13 Oct 2023 06:04:55 +0000
ROA not before: Fri 13 Oct 2023 06:04:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:27a2:b45c/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:27:a3:4e:29:d4:49:93:9a:9b:89:b8:19:5e:cb:8f:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 13 06:04:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5a8edcc7ecf45d7df39612c44fe057ff240a8ef2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:16:3e:3b:d5:29:1d:3c:21:46:30:ca:47:fc:
b6:ba:31:d0:65:35:de:1d:af:8c:9f:2d:15:7c:da:
fa:c5:bb:0d:8c:cc:57:bf:81:5a:ce:17:53:d9:90:
24:2c:ba:3a:7f:ec:6b:7a:68:8e:b9:4e:74:8c:41:
0e:ce:9b:b7:48:03:7b:22:16:d7:2a:a6:44:f0:5c:
45:5f:32:f2:62:a8:0f:7b:62:a8:44:f2:74:da:03:
45:a7:3b:fc:0b:97:ee:d2:f0:c3:26:8b:ff:c3:0f:
d7:48:33:ef:4a:0f:c7:4d:c5:68:2c:0c:19:2a:a8:
39:d1:a4:8e:46:0c:ba:96:f7:e4:2c:2b:a9:2e:34:
bb:4b:f3:e0:b3:6b:54:81:86:87:6a:96:35:cd:7b:
43:b3:e6:8a:66:7b:63:4a:d9:b4:0e:a1:05:9c:b4:
39:69:f4:ca:4a:f7:26:ea:75:7f:ae:da:2c:66:a1:
f0:2a:29:d3:72:4a:a6:d6:bb:99:a8:a7:8c:c2:02:
2a:27:06:c4:bd:80:4b:f4:f1:9e:17:e3:fc:39:a0:
cd:73:e6:68:5a:ae:d4:75:78:c0:ab:38:c6:ac:9f:
69:02:dd:fb:68:9e:92:4f:e5:5e:05:d0:3e:bb:1e:
d2:68:ee:c4:1f:1b:3e:14:25:bc:20:e5:79:f9:13:
58:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:8E:DC:C7:EC:F4:5D:7D:F3:96:12:C4:4F:E0:57:FF:24:0A:8E:F2
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Wo7cx-z0XX3zlhLET-BX_yQKjvI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0c:de:be:51:11:cc:64:9f:8f:52:f9:75:c8:9d:08:a2:ac:71:
84:54:bd:28:76:d7:72:0c:00:1e:1b:e3:a9:c7:c4:01:85:a2:
0a:96:17:00:4d:52:ce:cc:36:7f:ea:c0:9b:38:3a:2b:3c:1d:
0c:88:00:05:c5:59:2c:c5:d2:a9:8d:87:dc:ab:f6:a5:8e:3c:
85:fd:2e:c8:c5:0a:e8:5e:20:3e:80:5d:ae:c2:1b:d3:09:e6:
3f:8a:11:6d:9e:e8:a5:fe:a2:40:2a:ff:6b:a2:ce:fd:f7:f9:
ca:ab:56:20:ea:7b:ec:92:87:8a:2b:44:29:d5:7f:f0:5f:a9:
89:d1:cf:f4:e6:69:0e:44:41:f8:b9:00:46:48:ab:03:d2:45:
e9:ba:07:34:b1:e2:bc:9a:9b:72:c0:07:c6:d9:92:bf:b4:e8:
83:53:35:54:c1:e3:da:0a:93:05:d3:0f:48:c3:fb:87:0f:84:
4e:69:34:a6:6e:8f:10:86:60:32:d0:10:6b:fa:db:03:7e:03:
d9:79:67:78:d3:85:ec:e7:d3:0f:3c:ec:b9:e1:74:24:e8:98:
30:98:2f:46:a9:ab:69:a7:71:62:c5:af:9f:b3:0b:a7:39:25:
ee:bc:2a:6e:e3:7a:3c:9c:43:50:b7:1c:3a:45:cb:56:2a:28:
77:fc:30:f1
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYsno04p1EmTmpuJuBley4+xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMDEzMDYwNDU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YThlZGNjN2VjZjQ1ZDdkZjM5NjEyYzQ0ZmUwNTdmZjI0MGE4ZWYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzBY+O9UpHTwhRjDKR/y2ujHQZTXe
Ha+Mny0VfNr6xbsNjMxXv4FazhdT2ZAkLLo6f+xremiOuU50jEEOzpu3SAN7IhbX
KqZE8FxFXzLyYqgPe2KoRPJ02gNFpzv8C5fu0vDDJov/ww/XSDPvSg/HTcVoLAwZ
Kqg50aSORgy6lvfkLCupLjS7S/Pgs2tUgYaHapY1zXtDs+aKZntjStm0DqEFnLQ5
afTKSvcm6nV/rtosZqHwKinTckqm1ruZqKeMwgIqJwbEvYBL9PGeF+P8OaDNc+Zo
Wq7UdXjAqzjGrJ9pAt37aJ6ST+VeBdA+ux7SaO7EHxs+FCW8IOV5+RNYjwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFFqO3Mfs9F1985YSxE/gV/8kCo7yMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvV283Y3gtejBYWDN6bGhMRVQtQlhfeVFLanZJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAAzevlERzGSfj1L5dcid
CKKscYRUvSh213IMAB4b46nHxAGFogqWFwBNUs7MNn/qwJs4Ois8HQyIAAXFWSzF
0qmNh9yr9qWOPIX9LsjFCuheID6AXa7CG9MJ5j+KEW2e6KX+okAq/2uizv33+cqr
ViDqe+ySh4orRCnVf/BfqYnRz/TmaQ5EQfi5AEZIqwPSRem6BzSx4ryam3LAB8bZ
kr+06INTNVTB49oKkwXTD0jD+4cPhE5pNKZujxCGYDLQEGv62wN+A9l5Z3jThezn
0w887LnhdCTomDCYL0apq2mncWLFr5+zC6c5Je68Km7jejycQ1C3HDpFy1YqKHf8
MPE=
-----END CERTIFICATE-----
Generated at Wed Jun 18 11:44:49 2025 by rpki-client