Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/L_WX4idBrnkecuQf46ZLW2FRMRo.roa
File: L_WX4idBrnkecuQf46ZLW2FRMRo.roa (raw, json)
Hash identifier: OpuEAfTJQSKvPFRO9N4dV/7hCsPBsAnlS/o1/Ez3NzU=
Subject key identifier: 2F:F5:97:E2:27:41:AE:79:1E:72:E4:1F:E3:A6:4B:5B:61:51:31:1A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01866DA99C8A840B11ECB91BD436E4C9A477
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/L_WX4idBrnkecuQf46ZLW2FRMRo.roa
Signing time: Mon 20 Feb 2023 07:11:17 +0000
ROA not before: Mon 20 Feb 2023 07:11:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:6d:a9:9c:8a:84:0b:11:ec:b9:1b:d4:36:e4:c9:a4:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 20 07:11:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2ff597e22741ae791e72e41fe3a64b5b6151311a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:a7:ec:89:2a:7d:7f:08:02:61:36:34:0b:41:
e3:db:eb:18:0b:85:a2:04:bb:ba:50:d5:b6:42:b2:
23:90:e0:fc:70:59:2e:21:de:71:21:8f:72:71:95:
4d:7d:a8:71:e4:49:a1:96:e2:7d:89:e3:07:c9:2b:
25:f9:90:ba:fd:1b:a4:1c:06:7c:0e:fd:f5:3a:30:
90:fe:95:65:d2:71:d8:44:85:cc:b3:4e:93:56:97:
ca:55:e6:bc:5d:a0:a7:3b:51:c7:d3:be:97:32:ec:
96:eb:ae:b9:48:8b:97:2f:ce:dc:21:ca:94:80:7b:
f9:23:0c:1f:80:2d:23:96:e3:12:d7:c8:31:07:b5:
75:1e:5f:39:b5:28:e4:cd:cf:6e:61:56:2f:ce:8a:
62:02:1c:65:c9:33:d7:77:c9:41:2c:9b:ec:91:90:
cf:90:de:bd:88:5b:e1:1c:9e:0d:1a:97:4d:93:42:
8f:dd:1f:a1:e7:de:31:a1:e9:4c:f0:43:30:81:f0:
5a:bc:5b:cf:be:c2:b3:61:79:94:c3:aa:8f:05:02:
63:0b:27:54:13:d8:a7:cf:e0:88:ec:65:a2:f4:3d:
7b:ca:9e:0c:30:b7:22:4d:46:de:c5:c4:20:17:eb:
0f:99:67:db:82:c0:50:31:8c:c7:b9:55:7c:a6:0b:
75:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:F5:97:E2:27:41:AE:79:1E:72:E4:1F:E3:A6:4B:5B:61:51:31:1A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/L_WX4idBrnkecuQf46ZLW2FRMRo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
10:f3:de:b1:22:51:04:84:c9:ef:b2:72:07:94:3c:f4:07:cd:
3e:0c:49:1a:ee:4b:08:1c:c5:e1:e6:71:33:7d:5d:db:29:f8:
26:3d:f3:6f:83:fe:2f:34:d3:2f:4f:b3:81:18:96:e1:c1:bd:
6c:34:fd:58:c5:bd:ea:58:31:cb:60:4c:fa:65:c0:5d:d6:30:
64:43:c8:f6:20:13:0f:44:78:d0:87:e4:3d:1c:d6:01:b3:03:
80:ae:36:49:8c:bd:e2:aa:e4:c8:ea:01:d9:a9:65:a5:9e:86:
82:2c:0f:7a:46:ae:0f:37:6a:1c:1c:dc:34:43:44:73:34:47:
c5:cb:f3:73:9e:b7:c4:ad:49:f8:e3:d0:f6:29:09:33:98:87:
78:e3:04:ef:13:03:9b:cc:8f:71:f8:8c:1d:1e:30:6d:34:3b:
9a:b3:74:75:71:ab:cc:61:53:bf:a3:64:0c:90:b9:f9:46:54:
bb:7b:05:cd:0e:b8:88:e6:c6:af:ee:a7:62:38:ae:45:b5:33:
94:05:ff:57:f3:81:f7:c1:7f:dc:79:37:f6:c7:79:15:a3:6d:
08:47:9f:b1:78:56:3e:b6:51:98:de:6e:fe:e8:93:df:4a:03:
09:1e:75:02:8f:2e:4a:77:26:17:cf:b3:4c:d6:b5:00:98:ee:
e0:4e:10:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:55:14 2025 by rpki-client