Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/W-hWL1n9eHdGuTQCMy1UaBI_sFI.roa
File: W-hWL1n9eHdGuTQCMy1UaBI_sFI.roa (raw, json)
Hash identifier: ZTxmJ5CxfZxOyZtUhQZbe0vWPdSTTadMIog8ts7ThGk=
Subject key identifier: 5B:E8:56:2F:59:FD:78:77:46:B9:34:02:33:2D:54:68:12:3F:B0:52
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186B8F4DDE17A412F14EB1AD73FA8ADB86C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/W-hWL1n9eHdGuTQCMy1UaBI_sFI.roa
Signing time: Mon 06 Mar 2023 22:05:00 +0000
ROA not before: Mon 06 Mar 2023 22:05:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:b8f4:27a3/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:b8:f4:dd:e1:7a:41:2f:14:eb:1a:d7:3f:a8:ad:b8:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 6 22:05:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5be8562f59fd787746b93402332d5468123fb052
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:36:6f:3e:a9:fe:a4:d0:a8:71:10:ac:9d:fb:
03:76:d3:48:3d:ff:8e:0a:75:e0:2f:f9:9b:26:7c:
28:66:0b:a7:f0:d5:24:b6:2b:40:db:fe:90:67:bd:
e2:31:b4:54:ba:9a:00:f3:90:ba:68:33:ae:2a:de:
75:8a:1b:3f:34:23:89:1e:3a:c6:03:70:80:fe:88:
fb:95:4d:5b:27:e8:fa:95:01:35:af:79:e3:0b:49:
6d:49:40:dd:b8:80:e6:a9:c7:94:8e:9d:bc:26:b7:
99:f6:64:2f:90:e7:3f:f3:2f:71:a2:53:b4:8a:d3:
c8:ca:fd:61:08:05:e7:6f:6d:0d:b5:bb:89:38:a7:
bb:44:f9:57:d5:34:5d:32:ee:9d:27:6b:b3:82:2e:
5d:98:3e:f7:ca:b5:82:56:73:f7:d0:e7:40:a3:3c:
eb:65:57:0b:ca:32:aa:eb:f6:80:5e:0b:76:72:b4:
2a:2f:56:a2:02:76:5b:1d:60:82:90:ad:32:71:0c:
59:f6:37:6e:4a:4b:77:fb:53:8a:43:2b:31:c6:04:
95:15:64:c1:c6:4d:5a:97:5f:3b:ee:85:38:0f:a8:
3a:bc:e8:76:cc:51:91:0e:a7:86:c3:c1:b8:45:56:
21:91:8f:fe:72:93:31:9a:72:d4:81:b0:03:0c:c8:
ab:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:E8:56:2F:59:FD:78:77:46:B9:34:02:33:2D:54:68:12:3F:B0:52
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/W-hWL1n9eHdGuTQCMy1UaBI_sFI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2f:cf:39:3e:8c:a2:c2:e4:c7:a7:4a:d5:25:2d:21:8d:f9:f0:
2d:b8:b0:72:23:7a:2a:a7:b8:a1:ba:9b:18:01:d4:26:06:b7:
db:7e:5a:d6:75:57:33:4e:b4:49:4a:07:23:e6:5c:22:21:1a:
b4:8c:97:77:c6:5a:96:d4:c8:20:a1:e5:10:51:69:4c:35:f4:
de:59:71:f9:ba:eb:e6:d2:09:fc:3f:b4:2e:21:c5:1e:b9:8d:
e6:04:b8:fd:6c:be:50:9e:52:f7:bb:2f:ff:a1:85:28:ac:34:
84:da:df:3f:0e:4f:98:c1:7a:6b:b6:4e:c1:0d:ac:7b:a5:9e:
3c:ce:1e:6f:b7:28:a5:14:4f:35:33:cb:d6:b8:2f:0d:fc:16:
e5:c7:4e:c3:7c:53:d9:ef:69:bf:0a:ff:06:61:bb:b1:5d:76:
58:a4:86:45:12:23:d4:28:af:11:6f:11:c3:d8:7e:61:d7:f3:
e0:6c:a7:53:5b:5d:cb:38:e7:28:91:a9:a4:11:51:fa:43:79:
8e:dd:7f:98:c2:70:f5:ff:35:50:ed:5e:58:2a:d8:77:eb:b8:
aa:4d:09:62:c5:36:c7:ac:20:6d:dd:cc:23:46:d5:af:0a:3a:
83:92:3c:8c:72:3e:2a:64:b4:2a:13:09:b0:14:08:e5:ae:cb:
b8:7e:ad:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 23:47:52 2025 by rpki-client