Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/W4FAeSfNrb3-8whAtC_SoyXiL4A.roa
File: W4FAeSfNrb3-8whAtC_SoyXiL4A.roa (raw, json)
Hash identifier: t2siFk43HFSS6dJguj8y3bc0PJHaU7nIiTBCAxvqCA0=
Subject key identifier: 5B:81:40:79:27:CD:AD:BD:FE:F3:08:40:B4:2F:D2:A3:25:E2:2F:80
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01899B20846B871805BCF463271906D05C0F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/W4FAeSfNrb3-8whAtC_SoyXiL4A.roa
Signing time: Fri 28 Jul 2023 06:12:26 +0000
ROA not before: Fri 28 Jul 2023 06:12:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:9b:20:84:6b:87:18:05:bc:f4:63:27:19:06:d0:5c:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 28 06:12:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5b81407927cdadbdfef30840b42fd2a325e22f80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:16:74:c9:99:82:e9:ee:87:69:73:d3:17:6c:
74:7c:13:a7:12:2a:bd:09:9b:8f:d8:45:27:bc:9c:
f2:d7:41:2d:c2:0f:7a:19:04:c3:da:87:b4:8d:67:
e7:e4:05:a9:94:85:90:e2:f2:82:72:7f:c6:c1:bc:
e9:ce:90:0f:3f:d7:fb:18:c8:b9:bc:4a:4f:72:ae:
08:b3:57:40:a2:07:ab:fb:6a:7c:8a:43:00:d3:8a:
96:2e:b4:7f:d1:64:58:14:83:b9:11:38:98:f0:cd:
9d:8c:dc:f5:0e:b3:79:9c:41:4a:24:65:32:a9:d6:
47:cc:b3:a8:57:d4:fd:17:2e:c3:f3:1f:88:69:bf:
0b:14:93:aa:8e:1c:b8:4f:9f:c2:9d:ec:d3:27:34:
82:e7:ef:1d:58:34:da:b9:07:20:95:0a:2e:5e:c1:
6c:18:b7:f7:a0:1b:c9:3f:83:a1:88:5d:97:06:36:
4d:d1:f6:97:c3:29:64:f3:cc:48:c8:57:dd:59:08:
09:f8:af:93:73:cb:bd:dd:09:39:71:6d:a5:e4:7d:
2f:14:b5:4a:6a:a7:93:eb:85:77:30:1e:45:4f:18:
c2:41:a1:64:ee:7a:18:5a:ea:3d:b9:dd:e0:49:5c:
ff:2c:73:fc:1f:9b:f0:93:78:08:ca:4a:d8:2c:a1:
da:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:81:40:79:27:CD:AD:BD:FE:F3:08:40:B4:2F:D2:A3:25:E2:2F:80
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/W4FAeSfNrb3-8whAtC_SoyXiL4A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
84:50:f5:60:6f:49:49:ad:7b:dd:69:48:64:f7:99:f7:f6:19:
8f:88:e1:47:80:a1:23:fe:ab:c5:2f:23:b1:08:7a:c3:3c:6b:
3f:f5:0a:d2:1f:89:90:20:fe:11:4c:61:0e:00:b9:82:be:7a:
cd:cd:9f:50:fe:31:cf:9d:0e:32:4e:8d:57:3f:bd:89:56:3f:
66:53:ed:d5:13:90:dd:68:31:1c:10:ef:a8:51:e2:f2:94:cc:
de:96:08:d8:69:22:6a:96:d2:0f:31:a0:00:c1:88:5d:df:fc:
08:79:2f:e6:ec:e2:02:60:7b:ee:4e:03:ac:ff:fe:aa:3a:a1:
6d:34:2c:5d:a5:e9:33:da:00:7e:b6:49:6e:3f:2f:b1:35:84:
8b:58:40:96:bf:24:24:d7:c5:67:b1:d9:0e:73:aa:f1:13:49:
c5:84:62:91:31:24:77:41:0b:88:21:7d:46:69:3f:94:e6:55:
21:6c:8f:02:88:6e:b1:b0:7a:98:0b:c6:8b:2c:fc:b3:c4:50:
97:6a:2b:51:74:ee:f2:89:22:28:84:c6:14:20:6e:bc:12:c6:
05:34:d6:03:52:ed:cd:64:bc:6e:bc:c7:62:19:42:f5:48:ac:
09:5f:7f:e8:71:d5:47:1d:8a:e7:61:d4:91:a7:38:72:87:84:
26:ea:0f:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:41:12 2025 by rpki-client