Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-W_wtjwOtuiCT4WV4wuduQu4oBQ.roa
File: 1-W_wtjwOtuiCT4WV4wuduQu4oBQ.roa (raw, json)
Hash identifier: s+SSQsh+onFr/9pHWObsXk8Rkz33hGMCsciKqW8PiFw=
Subject key identifier: F9:6F:F0:B6:3C:0E:B6:E8:82:4F:85:95:E3:0B:9D:B9:0B:B8:A0:14
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018715DE0F74DF1371C0904993D31EA50D11
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-W_wtjwOtuiCT4WV4wuduQu4oBQ.roa
Signing time: Fri 24 Mar 2023 23:04:47 +0000
ROA not before: Fri 24 Mar 2023 23:04:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:15dd:99eb/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:15:de:0f:74:df:13:71:c0:90:49:93:d3:1e:a5:0d:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 24 23:04:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f96ff0b63c0eb6e8824f8595e30b9db90bb8a014
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:29:98:43:f3:55:66:8a:fc:9e:28:ef:54:be:
94:b1:f8:be:5f:c0:af:ad:72:a3:e5:8c:a6:dd:b5:
72:24:10:ed:2e:ce:2c:e1:8d:8a:45:50:1a:26:33:
76:ca:07:0a:0c:a3:c3:4c:f5:80:c2:bb:05:de:4a:
07:b4:7c:54:4f:11:73:20:6e:9e:ff:e7:f3:22:a8:
f8:f9:84:ad:5b:e2:ea:5b:9b:63:f4:35:5a:57:3d:
98:84:f2:c4:a0:9d:18:90:64:2e:4d:ed:42:26:23:
15:44:0a:c4:09:f0:7e:c0:2c:65:34:a4:c6:6d:67:
ca:8e:32:93:af:32:2e:9c:1c:85:86:a4:5c:1f:30:
94:be:11:ca:b5:f5:de:99:3c:65:66:31:33:70:7e:
c5:d3:14:7d:41:2b:56:51:60:45:81:87:df:06:a7:
9b:b0:73:eb:30:95:33:34:28:43:d5:d8:00:ba:f0:
a7:fc:86:39:4c:26:c3:52:e3:8b:c0:38:71:f3:ce:
58:41:de:08:cd:1f:0d:c4:dd:2f:76:1f:1e:bb:a6:
2d:c4:0b:28:46:ba:14:bf:e0:bc:52:e0:3b:8e:5b:
b2:e4:62:09:88:d9:69:c3:80:15:ca:e6:9d:02:42:
d1:d7:1f:20:20:46:f0:05:ae:f5:1a:4b:0e:30:3b:
fd:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:6F:F0:B6:3C:0E:B6:E8:82:4F:85:95:E3:0B:9D:B9:0B:B8:A0:14
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-W_wtjwOtuiCT4WV4wuduQu4oBQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
90:23:51:f1:01:73:01:ea:cf:31:c8:d5:3a:e8:2a:e1:28:fb:
98:78:4c:ed:3e:3d:9c:74:e6:41:57:95:8d:36:c4:fe:be:e3:
68:f0:16:3e:b4:39:b5:c7:5b:a2:11:af:39:89:f7:b4:64:23:
de:e9:94:2a:2b:15:29:fb:02:49:02:56:c5:29:be:41:27:f7:
86:72:3f:29:59:bf:81:d0:90:1e:c4:b5:f8:af:f6:93:cb:70:
04:88:d6:db:c8:3f:0f:14:26:94:7a:dc:f2:d4:64:99:b7:3c:
8b:b4:f2:7e:1d:3d:48:da:09:fc:52:11:50:f0:6b:35:c4:2f:
da:a7:88:2b:a5:d4:b8:c8:cc:84:74:03:6b:48:29:6f:a0:e0:
a3:9d:97:af:f8:b3:86:67:01:24:d0:a0:f8:61:20:7e:1d:4b:
aa:5b:20:f9:a5:8b:b3:06:7c:43:3e:db:d3:b6:ab:f8:92:07:
8e:49:2b:da:87:18:b2:4a:91:3f:47:73:bf:9f:69:da:33:b4:
75:17:c0:60:ad:02:84:25:07:42:34:c0:3a:3c:4a:da:0c:c2:
8b:7a:2b:3d:20:f3:b5:60:cd:f1:17:80:5e:64:ab:5b:d5:31:
24:59:a8:b5:97:36:1f:9e:09:3e:26:3d:c3:ea:10:bd:3c:25:
f7:9b:60:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 12:30:55 2025 by rpki-client