Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/W5UMzEGDQ_hmwh2XQnCTjZ5HZNA.roa
File: W5UMzEGDQ_hmwh2XQnCTjZ5HZNA.roa (raw, json)
Hash identifier: Wtxn8bkUyNJIobVDl82jpSznkgzAQqlQ+5FWHOIbeXw=
Subject key identifier: 5B:95:0C:CC:41:83:43:F8:66:C2:1D:97:42:70:93:8D:9E:47:64:D0
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189CD22D0B3A53832C3EBEB6EB71AE9A813
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/W5UMzEGDQ_hmwh2XQnCTjZ5HZNA.roa
Signing time: Sun 06 Aug 2023 23:15:58 +0000
ROA not before: Sun 06 Aug 2023 23:15:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:cd:22:d0:b3:a5:38:32:c3:eb:eb:6e:b7:1a:e9:a8:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 6 23:15:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5b950ccc418343f866c21d974270938d9e4764d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:4c:8e:90:ad:2f:db:58:8f:f8:8f:f6:82:ea:
4b:bc:cb:cf:cd:84:a3:b9:8e:8f:6d:53:81:90:37:
47:7e:1c:1a:33:e8:a2:df:a6:6d:e0:9e:ec:64:40:
a1:0d:51:63:23:32:a8:46:8e:f4:ca:79:c8:93:f3:
50:83:65:70:7d:17:72:eb:7e:a0:df:ef:4c:5f:78:
37:c5:d2:e8:8f:7e:18:7d:e6:c3:5f:47:20:7c:e3:
ee:c9:e1:f8:dc:18:05:59:e1:17:23:e1:16:00:7c:
13:c3:60:76:d4:da:e1:be:83:4a:12:23:e8:e1:22:
91:d4:27:c2:e2:4f:0d:74:c2:ee:42:dd:13:50:1c:
16:c4:fc:22:06:d1:14:6b:cd:70:fe:10:71:0d:d8:
e3:30:a7:cf:44:88:80:b3:ee:ad:b7:7b:f8:d2:0d:
cf:ca:3d:92:61:90:08:ec:00:c5:6d:76:8e:7f:b6:
a4:bd:43:3d:7a:cd:32:13:14:c7:32:5f:98:fc:ae:
c6:a3:88:0f:4e:d7:72:09:b6:a9:6c:af:74:7e:f7:
12:34:89:2b:2c:ac:cc:76:53:af:fd:96:ee:09:5d:
d1:4c:94:f1:1e:ff:ba:c6:08:e7:41:94:8a:4a:c6:
84:99:62:9d:48:25:7b:8f:05:af:c7:cf:ec:c5:ba:
36:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:95:0C:CC:41:83:43:F8:66:C2:1D:97:42:70:93:8D:9E:47:64:D0
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/W5UMzEGDQ_hmwh2XQnCTjZ5HZNA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
69:8f:eb:6b:9c:99:52:52:f2:e6:1a:87:af:97:71:3a:5d:ac:
f2:6c:50:0e:42:40:2d:7f:ee:2b:41:89:30:3f:a8:90:2c:d9:
e8:0d:2c:b2:7e:cb:c3:9c:47:0f:9e:14:a5:01:ef:db:0d:63:
0e:37:a9:6b:e2:08:25:0e:70:08:6e:a3:e1:2e:58:62:0b:b2:
51:29:59:3e:52:87:e2:2e:19:b3:02:8e:fe:b6:4f:88:36:28:
19:8a:5b:e1:53:d9:ea:1f:80:03:85:25:6d:45:35:44:d3:f5:
9f:d8:81:03:eb:2f:37:eb:71:c7:bc:08:30:16:98:00:1d:1d:
db:53:76:6a:b5:03:01:18:b4:6a:91:ee:23:3d:6b:d7:6c:b3:
de:d4:af:0c:21:34:af:fd:e1:18:d3:c1:c6:46:ae:3c:8a:bc:
99:b6:31:dd:4f:ba:db:0d:ad:83:fa:5f:bb:37:6a:62:aa:09:
95:09:4f:3c:85:65:da:6d:07:4a:38:0f:22:d2:16:d1:70:36:
18:2d:07:88:5c:54:27:59:42:e7:46:fa:9c:e5:bd:54:cc:aa:
65:c7:5f:c6:5b:35:a7:72:6d:23:77:1c:e3:c4:30:d4:80:20:
6f:7e:84:18:4b:00:ff:d0:d4:db:9a:eb:e6:a2:a1:06:42:8a:
1a:bf:12:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 18:43:27 2025 by rpki-client