Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/03WJFcKrhhBCCTRj63J40QwCVFU.roa
File: 03WJFcKrhhBCCTRj63J40QwCVFU.roa (raw, json)
Hash identifier: HuCpK5ut0nE9GiSaRTAyzxQXtCopnBSeQ5HGDE43fis=
Subject key identifier: D3:75:89:15:C2:AB:86:10:42:09:34:63:EB:72:78:D1:0C:02:54:55
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0182D9369628B51EF927250B1E19E7B5AAF3
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/03WJFcKrhhBCCTRj63J40QwCVFU.roa
Signing time: Fri 26 Aug 2022 08:13:29 +0000
ROA not before: Fri 26 Aug 2022 08:13:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:d9:36:96:28:b5:1e:f9:27:25:0b:1e:19:e7:b5:aa:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 26 08:13:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d3758915c2ab861042093463eb7278d10c025455
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:41:4a:8f:28:b3:bd:dc:7c:a3:ff:22:7d:97:
a0:1f:e1:86:6b:b2:73:9f:c2:09:62:00:18:5f:2a:
25:61:ca:e6:a6:2b:46:b0:70:04:36:fa:78:bf:81:
09:4e:e2:ea:65:63:63:b2:d5:a8:f1:f0:b5:4e:26:
4e:6f:58:42:2f:7d:61:3d:10:38:6d:5b:99:dd:a6:
e1:45:13:9e:4d:60:9d:72:b6:37:0e:85:6d:12:81:
1e:bf:93:e8:9d:1a:c3:30:b7:4c:2d:8b:fb:5c:84:
aa:68:b2:14:c2:5f:3a:4e:1c:20:75:60:1f:5c:d1:
74:0f:ba:34:b1:5b:82:ea:df:97:ee:09:db:95:1a:
e5:e8:bb:4d:88:85:48:1f:ed:55:cd:50:f5:0d:f8:
43:05:4e:4c:89:8f:19:bf:ec:cf:af:28:5e:35:11:
27:5d:da:19:97:d1:52:3d:72:d7:67:40:10:f5:25:
8f:85:1c:76:9a:ac:82:e2:7f:08:30:ee:92:cf:ab:
9d:46:3f:db:a6:7d:3d:da:ab:dd:74:dd:71:70:89:
1d:9e:62:6e:e9:40:3f:1b:12:b8:0c:1b:cf:35:5a:
f7:bc:2c:cc:ac:cc:6d:62:76:de:dc:bc:b1:76:0c:
1c:57:fe:4b:4e:cf:0a:4a:23:28:bb:ee:f5:a2:43:
b8:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:75:89:15:C2:AB:86:10:42:09:34:63:EB:72:78:D1:0C:02:54:55
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/03WJFcKrhhBCCTRj63J40QwCVFU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
50:77:80:ed:a8:fc:f0:69:b2:22:6d:57:26:46:59:9c:10:b7:
f2:45:54:a4:66:53:71:fa:da:af:8e:ca:d6:b8:0d:93:17:cd:
de:f3:ce:14:a2:6f:0e:39:22:f1:61:22:e1:03:87:2a:4f:d9:
a8:8e:de:1b:d0:bb:d7:ef:5c:e4:5b:af:fd:cc:08:95:ac:98:
db:06:53:2f:34:58:92:8b:c2:7a:48:a8:da:a2:78:cc:0e:98:
77:4b:54:e7:d7:2c:48:2e:9d:19:2c:0d:78:bd:43:c0:bd:36:
12:79:b6:88:17:8c:28:07:12:36:8e:44:9d:96:a1:1c:76:93:
00:74:53:0f:a3:9b:71:52:04:1c:81:80:d4:36:1e:94:db:77:
8e:e5:9a:87:73:83:53:58:fc:68:0f:f1:42:b7:87:2f:6b:fb:
c0:26:cb:fb:a4:1f:ed:b1:5a:f2:0d:97:92:35:ed:37:2d:6b:
af:75:a7:22:19:56:81:90:71:2a:aa:53:2c:35:1e:32:bd:2b:
b7:2d:66:f0:b6:ff:a7:5d:54:a0:9b:55:8d:ea:6c:9a:94:19:
2c:8b:41:3d:21:93:d9:13:fa:f0:03:65:61:2d:94:87:fb:86:
97:7b:4d:4f:8b:c7:69:bb:62:39:cc:2c:60:33:cf:5a:0b:10:
88:00:40:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 06:04:51 2025 by rpki-client