Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/W57Gk8fNsmcYutPD8yZL4rf5saM.roa
File: W57Gk8fNsmcYutPD8yZL4rf5saM.roa (raw, json)
Hash identifier: dexiQlKt4t0ImWIsm/fHjS59+4etB9Jj+alMx8cP0mc=
Subject key identifier: 5B:9E:C6:93:C7:CD:B2:67:18:BA:D3:C3:F3:26:4B:E2:B7:F9:B1:A3
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188416FC86A43BCD37F33C340D5351D98BD
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/W57Gk8fNsmcYutPD8yZL4rf5saM.roa
Signing time: Mon 22 May 2023 03:10:24 +0000
ROA not before: Mon 22 May 2023 03:10:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:41:6f:c8:6a:43:bc:d3:7f:33:c3:40:d5:35:1d:98:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 22 03:10:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5b9ec693c7cdb26718bad3c3f3264be2b7f9b1a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:3d:c9:3c:8f:c5:f5:45:67:85:ed:1e:45:ea:
b7:75:c9:9d:c4:ed:5d:20:10:5e:2b:90:8d:1a:f5:
09:41:8a:bb:66:fc:e2:1c:a8:76:7c:cc:d3:42:fe:
b8:55:71:72:0e:d5:88:30:34:c4:7e:9c:00:2b:36:
bd:7f:c3:06:4e:f9:69:0f:ca:c5:b4:3a:f3:93:b6:
c8:bf:3c:89:3d:eb:d4:78:90:e2:c4:cf:6d:5f:3a:
e7:fa:28:6b:dd:67:9b:a8:4e:2a:77:4d:88:40:9d:
44:60:1b:25:ff:c9:ba:b0:fa:ea:aa:2d:f3:0e:c3:
d1:5e:8e:8f:8e:db:8a:5a:e8:78:52:c1:4f:48:88:
b1:b9:05:91:b3:b6:7e:e2:f0:94:46:e8:91:a2:73:
86:53:5b:ac:77:6f:02:13:be:43:86:72:d7:35:75:
53:3f:9b:22:e5:4c:3c:f2:a9:4b:c5:11:1a:6e:c2:
26:4d:ac:6a:90:26:bf:5d:4d:90:89:de:6c:23:2c:
2e:83:eb:10:ef:57:05:aa:cc:e1:0b:94:eb:28:b4:
53:61:8c:15:4d:b0:85:9b:ba:60:37:ad:16:84:4e:
52:fc:00:9c:61:89:19:46:be:b5:12:1d:9e:73:19:
2d:7a:86:3f:36:e0:e6:17:09:59:84:82:c8:22:24:
e3:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:9E:C6:93:C7:CD:B2:67:18:BA:D3:C3:F3:26:4B:E2:B7:F9:B1:A3
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/W57Gk8fNsmcYutPD8yZL4rf5saM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
88:13:6f:13:d2:74:d4:98:b6:37:2b:d4:46:98:8f:39:a0:00:
20:f5:75:38:7d:a7:08:d2:e9:53:a9:d1:fe:d4:67:45:35:43:
2f:42:b6:77:c5:bd:ab:09:fc:e7:34:fc:5d:ed:eb:db:39:51:
d5:6a:56:8c:49:b8:82:92:a3:d1:b4:b3:06:7e:a8:8d:d5:5e:
bf:c2:14:c4:56:14:2c:0d:06:83:90:86:c3:bc:00:7c:47:33:
a3:ce:64:39:55:04:ee:8d:6f:34:32:54:27:57:d7:44:56:99:
a4:97:32:d7:08:2c:db:25:07:27:32:bb:e6:00:59:9f:a8:6b:
c1:42:c5:ab:70:9e:9c:36:c9:f6:d3:b9:9a:99:e6:96:0d:7b:
66:57:f0:bb:07:7f:34:19:67:5b:97:07:f5:33:e2:da:1b:7b:
1c:47:42:fa:a7:53:4f:93:a2:4a:58:16:ff:bb:b2:a6:7f:ff:
30:bf:29:ad:96:01:e1:40:be:7c:6d:87:8b:af:0f:c0:8a:66:
2c:04:e0:86:7c:c0:44:2c:5d:80:94:08:f2:d6:e0:69:f2:57:
89:21:cd:1d:08:30:c5:ae:61:e1:5e:2d:03:d0:95:14:4b:0c:
bf:fa:c8:4b:40:82:8c:8e:e0:12:88:9d:81:b3:98:6c:d0:87:
57:6e:0c:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:44:25 2025 by rpki-client