Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/W3UeLpOJJjb4nILiO06GRBJYFPE.roa
File: W3UeLpOJJjb4nILiO06GRBJYFPE.roa (raw, json)
Hash identifier: ITCo9FI5Sfw6uPpfbFFJIcIzCniEcU4JffWjwfAqVE0=
Subject key identifier: 5B:75:1E:2E:93:89:26:36:F8:9C:82:E2:3B:4E:86:44:12:58:14:F1
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187484B1B7E9EC1BBCB881ACE36157B094B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/W3UeLpOJJjb4nILiO06GRBJYFPE.roa
Signing time: Mon 03 Apr 2023 18:04:54 +0000
ROA not before: Mon 03 Apr 2023 18:04:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:187:484a:76f5/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:48:4b:1b:7e:9e:c1:bb:cb:88:1a:ce:36:15:7b:09:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 3 18:04:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5b751e2e93892636f89c82e23b4e8644125814f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:78:ad:e1:f4:eb:07:62:5f:54:32:26:5b:d2:
61:4d:e6:b5:a7:bb:f9:33:de:d7:37:df:e0:b8:58:
99:9e:c6:5e:ca:1f:8d:f5:56:5a:57:41:d9:1e:4f:
44:98:0c:7e:36:a0:79:2a:f1:31:1b:a0:bd:36:5d:
33:f3:a4:77:aa:06:66:9e:0b:22:09:29:e2:c5:7c:
81:44:ba:a0:45:e4:2a:6a:2a:23:82:ae:68:b4:35:
27:6e:38:37:eb:4e:db:ae:6b:3c:14:6d:5e:5f:d7:
17:ab:85:f4:74:e1:93:4b:0f:29:8c:33:4a:71:cd:
8e:2d:43:f5:a9:6c:87:01:db:91:e5:e7:35:65:bb:
3e:fd:e5:30:a4:0e:9f:01:2f:ad:ee:e7:8e:6e:9d:
7f:05:44:a7:f2:06:32:f8:b1:7b:22:25:4f:f3:5f:
32:01:ea:0c:7e:70:10:35:cf:ba:7c:f0:25:41:6e:
42:b1:5b:58:6a:fd:d3:ef:6b:60:bb:2d:a2:07:16:
67:75:e9:19:80:05:c2:2a:5b:93:19:f4:f3:77:2b:
8a:8b:f0:4e:6b:35:0f:36:a8:9c:86:7b:f3:3a:67:
17:c0:56:51:94:20:27:98:d4:22:ea:4b:93:f3:fd:
fb:20:3c:ec:cb:8a:70:1d:d5:0f:06:5b:0f:cc:05:
f4:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:75:1E:2E:93:89:26:36:F8:9C:82:E2:3B:4E:86:44:12:58:14:F1
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/W3UeLpOJJjb4nILiO06GRBJYFPE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5c:d4:5a:0e:89:7f:54:40:3b:da:a0:8b:b3:a5:8e:ad:59:40:
5e:dc:32:a2:a1:24:2d:dd:27:be:e6:69:c7:bf:c9:3a:f3:10:
7e:19:8d:28:b2:08:76:69:99:87:1a:2a:cb:87:17:ef:04:b7:
b2:6f:7d:71:15:c7:7a:6f:d4:86:ca:b5:3f:fe:06:fb:c5:14:
f5:68:69:e1:57:2f:02:9a:eb:da:04:c4:be:a1:b2:9a:df:36:
aa:37:f9:10:d9:83:b6:30:fe:5f:e9:29:ae:30:95:21:bb:4b:
ab:fa:2c:3c:fb:50:44:4c:c6:55:69:94:44:f3:c6:ab:29:3c:
93:19:f2:3a:8a:a3:f4:8b:8a:da:da:86:53:b4:44:65:da:76:
ca:37:db:4c:5a:10:30:f4:0f:bb:94:36:55:5e:19:74:70:6b:
39:3b:62:0c:3a:98:0d:48:f9:61:2c:94:ff:20:22:60:30:60:
60:d8:1c:93:6d:dc:f5:48:70:6e:95:71:55:6c:d8:2e:55:35:
8f:b4:f2:2c:4e:e8:f5:03:99:89:76:0d:54:88:23:1d:43:11:
65:7d:53:a5:ca:3b:2f:94:82:c3:2c:56:29:7e:83:b9:0b:64:
5a:45:e9:29:f1:c5:4b:bb:98:21:cd:83:f3:f5:5e:7c:6c:0a:
73:b8:16:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 00:08:12 2025 by rpki-client