Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/W4Obl1Mm-JUvouEaO5TLclns3NU.roa
File: W4Obl1Mm-JUvouEaO5TLclns3NU.roa (raw, json)
Hash identifier: LrJOzyyO9oPwdbGVvNEcttLOGMa6WqCoSXn83zB3X3A=
Subject key identifier: 5B:83:9B:97:53:26:F8:95:2F:A2:E1:1A:3B:94:CB:72:59:EC:DC:D5
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187E305DA41B40EADF11FD3D5510BB95A46
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/W4Obl1Mm-JUvouEaO5TLclns3NU.roa
Signing time: Wed 03 May 2023 19:10:24 +0000
ROA not before: Wed 03 May 2023 19:10:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:e3:05:da:41:b4:0e:ad:f1:1f:d3:d5:51:0b:b9:5a:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 3 19:10:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5b839b975326f8952fa2e11a3b94cb7259ecdcd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:64:40:3a:bc:3c:d5:d3:67:55:d8:58:55:d6:
56:15:b6:1b:fd:85:d5:08:e4:fc:6f:72:82:4e:d2:
2b:eb:5d:99:b2:aa:24:27:19:f7:96:6f:c0:a8:cf:
2b:16:49:b9:ee:51:59:15:98:8d:4e:27:4f:18:0b:
00:a5:ed:00:61:b0:03:11:d0:f3:77:6d:35:e6:8e:
1b:17:f0:fc:c7:60:99:ef:59:06:1e:2a:88:2f:62:
1f:88:bb:79:e1:9a:61:4c:c8:28:aa:2f:98:21:9a:
cb:2a:38:60:e8:18:f0:09:63:8f:b6:c9:f8:ce:2b:
78:fb:9e:c8:5a:02:e7:bf:68:ee:1e:c9:d9:c4:d3:
1d:3a:66:77:cd:9c:9b:1f:36:c6:10:7e:b0:32:05:
ff:aa:75:84:11:61:03:62:9a:1a:93:0c:b6:00:49:
bf:2b:96:12:f7:a7:98:61:70:5e:4d:e6:75:66:fd:
a6:77:57:4f:62:7a:b1:56:e7:dd:bc:42:78:63:91:
14:82:c9:a8:37:cd:81:dd:a2:05:4d:4e:d7:28:e6:
0f:8a:d6:7a:fe:f5:57:e7:e7:7d:1f:d9:cc:fa:d7:
d8:2f:fb:16:91:71:84:3c:d7:34:01:33:78:cc:71:
a3:8f:27:a8:68:03:1f:d8:bf:c8:36:f8:60:07:75:
45:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:83:9B:97:53:26:F8:95:2F:A2:E1:1A:3B:94:CB:72:59:EC:DC:D5
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/W4Obl1Mm-JUvouEaO5TLclns3NU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9e:d4:b6:bc:ec:34:b7:db:ba:9d:fb:4a:ed:1b:e1:94:0d:ce:
71:1c:1a:69:9b:a7:ba:8b:4b:c8:22:d4:25:b8:fa:54:2a:ba:
a5:8a:e7:d1:0e:86:4e:12:00:75:1d:70:15:4a:30:63:b5:c6:
a2:23:78:ea:7c:a4:36:a0:1e:84:58:d1:a6:ec:8e:07:66:c7:
fa:10:bf:ce:b2:91:82:96:aa:b4:bb:14:51:07:9b:af:f6:c9:
b7:37:b2:c3:7e:27:f9:10:06:67:35:2c:0b:d9:a6:63:3b:98:
ca:52:9c:e6:6f:c9:67:7c:b9:3a:dd:26:a7:a3:38:41:ea:e2:
87:5b:9d:e5:f2:10:d6:75:4f:f6:6d:33:a3:8c:43:15:8e:34:
65:ce:2b:bd:58:cb:7b:1c:75:d3:a8:2e:9c:a5:17:bf:df:df:
7a:5b:80:78:62:41:46:a1:17:97:5c:3e:11:b2:a0:49:cf:15:
a0:44:98:50:0a:a8:ec:2e:e8:82:a9:1b:ef:07:8b:a6:2e:cf:
f7:a3:98:3a:a8:2c:a1:4c:ee:98:8c:d7:e7:82:fe:4d:cd:20:
86:94:07:f2:e2:da:a8:f6:4b:fb:50:f6:d2:67:32:b8:fa:a8:
76:62:c5:16:2d:f6:6c:6e:cc:41:3b:10:e5:af:dc:75:fb:93:
89:ed:8e:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:37:38 2025 by rpki-client