Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/2Wg9ND0N4Xs8r5BRGE88Jomm6_w.roa
File: 2Wg9ND0N4Xs8r5BRGE88Jomm6_w.roa (raw, json)
Hash identifier: /mGniYCFW7WyRICMBPiCGoS0yFKqLBBDU3PoWHbCNpk=
Subject key identifier: D9:68:3D:34:3D:0D:E1:7B:3C:AF:90:51:18:4F:3C:26:89:A6:EB:FC
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018770DE480927EB147DA28E2AD1591D9389
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/2Wg9ND0N4Xs8r5BRGE88Jomm6_w.roa
Signing time: Tue 11 Apr 2023 15:10:28 +0000
ROA not before: Tue 11 Apr 2023 15:10:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:70:de:48:09:27:eb:14:7d:a2:8e:2a:d1:59:1d:93:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 11 15:10:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d9683d343d0de17b3caf9051184f3c2689a6ebfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e3:78:50:35:78:c1:2f:9e:1e:f6:16:e4:b0:
9a:75:7c:f2:07:6b:c6:66:38:41:5d:3c:74:61:63:
f5:5f:61:9a:4d:28:7d:80:fc:3f:e1:5b:59:00:41:
3a:7e:b4:5b:1b:5c:6e:72:d1:fa:96:6d:fb:96:3c:
d2:c6:c2:89:a8:5e:f1:b4:94:cc:07:97:7a:c5:6f:
31:92:68:e1:fc:1c:6e:f5:1c:61:43:32:8a:51:48:
e0:2b:8d:f9:a5:55:d6:7f:19:f4:28:99:fa:aa:c5:
ed:87:fb:f7:f1:dd:63:26:e0:5c:3a:fa:c5:1d:74:
6a:ea:c4:44:43:08:e3:e5:9f:d1:54:17:48:3a:96:
7c:98:b2:eb:70:4f:21:59:bb:32:3f:98:c0:1f:5e:
e1:71:95:40:c3:2a:64:2c:08:c4:67:ca:58:35:2e:
9e:f7:ce:1f:7b:ce:f1:18:1b:94:2a:34:ff:02:7f:
66:95:a4:92:d0:8d:4e:ad:63:7d:29:9f:65:7c:1d:
7a:e9:61:59:77:84:bf:e5:c5:5c:23:6e:a5:7a:ab:
62:9f:62:6f:c3:30:99:00:2a:e5:f6:2a:18:9f:9b:
fb:e9:d6:8b:d0:d1:12:c7:2a:28:db:07:2e:44:6c:
4d:1f:fa:47:5f:08:04:8b:81:38:08:4a:ed:bb:d8:
b4:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:68:3D:34:3D:0D:E1:7B:3C:AF:90:51:18:4F:3C:26:89:A6:EB:FC
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/2Wg9ND0N4Xs8r5BRGE88Jomm6_w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3c:23:06:d8:00:51:46:0a:b1:aa:98:93:21:f6:fa:98:40:55:
68:db:6d:7c:e5:4b:f2:c4:20:c5:57:f1:33:93:0d:c3:9d:a8:
4e:f8:cb:ca:fe:7c:bb:3e:ed:8f:e6:92:bc:12:9c:64:07:0d:
dc:23:fd:38:3b:f4:71:eb:80:a6:29:39:88:11:39:11:d3:d6:
2d:34:97:25:35:59:b4:ec:af:cd:7e:88:db:7e:a8:23:c5:bc:
80:c7:e8:1d:d1:6c:ca:e1:d0:67:29:81:72:d6:f1:47:ce:11:
f3:ec:cf:27:39:ee:50:5a:0f:0d:74:b4:44:f1:f1:ca:7e:01:
4b:63:1f:e4:13:14:bd:6f:de:b7:7d:d5:f4:b8:67:b5:b6:c6:
b3:92:47:17:8a:31:89:a2:33:fb:f4:ff:85:ac:38:0a:95:85:
7f:af:5e:32:5d:82:9f:fa:ca:0b:0e:ec:db:fe:8b:72:1d:bc:
dd:a8:2a:64:40:b6:64:8e:55:66:50:b2:b6:4a:dc:f3:3c:23:
13:25:b5:77:20:80:f6:9c:9a:20:49:03:2b:bc:ff:d7:a1:bb:
4c:4b:26:e8:e2:a2:63:95:cd:c2:e7:32:55:4a:6c:c9:17:51:
b6:4b:f2:f2:5e:06:68:a1:c0:a2:ef:a6:84:dd:39:15:9b:c8:
07:ae:5e:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 01:15:29 2025 by rpki-client