Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/wlBsr_7OMA3gksGH8-nmoc43xDo.roa
File: wlBsr_7OMA3gksGH8-nmoc43xDo.roa (raw, json)
Hash identifier: 2XIktHy6gUMhDUdUif5FMdiCc48InP3lnhrT2LiovSE=
Subject key identifier: C2:50:6C:AF:FE:CE:30:0D:E0:92:C1:87:F3:E9:E6:A1:CE:37:C4:3A
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B9511D60A3DABC1FF0339578C8926F60E
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/wlBsr_7OMA3gksGH8-nmoc43xDo.roa
Signing time: Fri 03 Nov 2023 12:04:15 +0000
ROA not before: Fri 03 Nov 2023 12:04:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:9511:d29f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:95:11:d6:0a:3d:ab:c1:ff:03:39:57:8c:89:26:f6:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 3 12:04:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c2506caffece300de092c187f3e9e6a1ce37c43a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:13:bf:ee:42:64:ef:b2:0d:b0:25:e6:60:04:
cf:d8:14:3e:e6:e5:23:e8:00:4a:f1:07:17:52:df:
46:43:fc:63:1f:d0:ca:69:ce:e9:5a:67:97:06:51:
f4:a3:fc:74:eb:44:b4:06:ce:64:6d:75:42:a3:65:
64:1c:05:49:15:64:a6:be:a8:4e:38:9b:4c:dc:b4:
a3:e1:ce:b7:4b:d5:ee:17:4b:b2:62:d6:ea:3f:84:
3a:61:c9:47:27:75:b9:a1:7e:9e:c3:42:70:1d:1c:
06:99:12:c2:47:02:ee:39:e3:d6:6a:8d:65:2c:51:
e9:f6:97:df:5d:c2:a7:04:ab:0c:8b:7c:fe:15:40:
e1:83:68:05:04:0f:84:7a:b1:84:8f:34:88:de:88:
24:95:f2:71:2b:51:47:cf:14:92:64:a2:79:8a:41:
84:3a:eb:d6:23:8b:25:87:a6:e1:f1:a2:3d:dc:e8:
30:36:38:13:8a:be:ad:fc:e3:43:31:fe:d9:35:0e:
32:ff:08:e4:13:a7:3a:d0:33:4d:53:45:a5:e9:b4:
5b:3f:f8:88:b4:9b:7e:81:1f:e4:e1:10:3a:f1:56:
79:c8:bc:ba:53:39:cc:af:10:30:2e:1a:f9:a3:48:
5b:8f:c8:01:30:f5:d1:bb:6b:11:e2:ba:4f:d1:6b:
bd:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:50:6C:AF:FE:CE:30:0D:E0:92:C1:87:F3:E9:E6:A1:CE:37:C4:3A
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/wlBsr_7OMA3gksGH8-nmoc43xDo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
00:ee:fb:85:e0:c0:b8:07:58:7c:b8:df:9a:70:08:75:79:60:
c9:1a:6e:1c:b7:6c:7a:5a:89:4c:72:ea:60:8b:59:0b:09:a6:
cc:22:cb:cd:6f:b0:8c:1c:bb:96:36:e4:f4:6e:6d:37:f7:30:
8d:b5:db:b2:c1:ef:5a:3a:e7:fc:64:8b:f9:2c:8d:27:3e:3f:
88:c4:86:9a:82:97:c2:d9:c8:d3:7f:2c:19:c2:28:ec:31:d5:
a0:42:10:d1:dc:23:20:6e:6e:9e:7a:42:c8:28:0e:42:7c:3d:
16:b0:0e:7a:fe:41:ac:60:98:29:62:bb:4f:6c:e8:cd:a6:e1:
68:3a:73:6b:3e:ea:06:fc:dc:a1:83:2d:0b:bf:9d:12:d0:6d:
6c:85:77:a6:f0:74:30:43:57:26:39:e3:fd:cf:3f:a4:d3:7f:
ca:10:3e:c4:49:64:33:91:18:04:20:ef:e8:b4:59:f8:b7:69:
86:36:8d:59:9e:42:0e:8c:a9:1a:52:3f:16:a2:4f:2b:36:b0:
4d:b1:a8:3f:64:c0:ce:f0:a9:a5:38:7b:de:c3:9b:06:0e:46:
e3:11:6c:48:49:d6:2c:ca:d7:8e:62:63:43:28:22:6b:a2:50:
86:e9:45:24:99:9e:50:5f:19:ae:3e:6d:74:11:46:c0:31:ac:
0c:73:dd:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 06:16:45 2025 by rpki-client