Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/W6LFf_gFZl5xsuCaM41mhmQz0_4.roa
File: W6LFf_gFZl5xsuCaM41mhmQz0_4.roa (raw, json)
Hash identifier: vXE+97NxhmAlrsaiK+Bu00S9jc/QiGH55fuCRZIppVc=
Subject key identifier: 5B:A2:C5:7F:F8:05:66:5E:71:B2:E0:9A:33:8D:66:86:64:33:D3:FE
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01883CEE37E5D0DAFA875AACFAE0722FFDB6
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/W6LFf_gFZl5xsuCaM41mhmQz0_4.roa
Signing time: Sun 21 May 2023 06:10:24 +0000
ROA not before: Sun 21 May 2023 06:10:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:3c:ee:37:e5:d0:da:fa:87:5a:ac:fa:e0:72:2f:fd:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 21 06:10:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5ba2c57ff805665e71b2e09a338d66866433d3fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:45:bc:28:9c:45:8c:dc:cc:12:ca:0e:d8:c5:
f7:e0:a0:d7:c1:6b:36:15:e7:6d:54:f4:5f:b9:e9:
0c:4e:71:41:f4:1c:d6:71:9c:db:0f:c3:79:0b:00:
81:ba:1f:aa:48:a8:2e:02:6d:05:3b:8d:7a:4b:a4:
e7:48:df:4c:e3:40:24:a2:68:2c:13:95:ca:51:14:
d1:9c:a5:c9:d3:12:53:7d:73:fd:dc:03:16:c5:a8:
aa:c0:5e:96:ca:bb:90:d6:a0:21:50:da:4b:36:83:
34:93:f4:4f:7f:42:02:cb:da:f5:d2:a6:8a:df:07:
d4:4b:40:fd:11:b7:72:33:d2:b3:d0:36:06:12:2f:
a5:f1:42:b1:b9:f9:3c:4b:b8:75:77:6e:2a:3f:3e:
bb:53:f5:ec:3f:34:31:66:5f:75:14:e3:5b:8e:0b:
64:52:42:1f:5c:da:3a:10:d8:63:97:03:83:ae:42:
61:40:c5:b1:f2:2c:e8:0a:c0:72:47:ad:3f:06:49:
b6:17:ef:e2:a9:92:a5:9f:77:8c:07:8e:a7:8b:73:
63:02:e2:05:39:41:d4:9e:ee:3f:5c:9c:a0:40:4b:
d8:44:8c:10:e5:3a:8d:c9:59:70:af:69:f0:38:34:
a2:9a:a8:59:26:ce:de:68:59:65:d2:a7:35:86:32:
cd:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:A2:C5:7F:F8:05:66:5E:71:B2:E0:9A:33:8D:66:86:64:33:D3:FE
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/W6LFf_gFZl5xsuCaM41mhmQz0_4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
81:7f:ea:9a:ae:20:8f:20:22:22:db:e5:35:6a:6a:45:12:23:
99:74:a5:cd:ff:73:ac:04:a9:b6:f5:79:a3:ac:ea:84:6e:75:
cb:54:f9:ea:23:91:c0:7a:04:64:fb:0e:6e:eb:78:f6:be:2b:
87:ab:8f:44:25:c3:88:57:05:8a:ee:37:c6:a0:48:13:d5:75:
b9:c7:fa:be:02:c5:c7:90:48:26:f2:40:2b:71:b3:8d:c2:29:
cf:38:bf:43:2b:38:9f:99:03:b9:bb:c0:5a:14:71:d2:54:85:
82:92:97:91:b8:e1:b8:c3:d0:2a:b0:f8:71:a8:07:d9:82:83:
28:b5:89:91:14:04:b1:6e:e9:08:9c:ae:e2:a3:52:0a:d4:9b:
f4:8c:57:91:dc:e8:28:1b:a9:d2:67:17:dd:8b:9c:7e:29:83:
c1:ab:31:52:d1:66:26:1b:c8:5f:d9:e2:c7:38:2e:b2:f3:1f:
36:08:f5:d5:0b:02:21:b5:09:7e:ac:19:22:53:ee:07:e5:2a:
46:09:ae:c4:19:f6:54:0f:3b:16:4e:7a:b5:aa:b6:2b:77:8b:
4c:c3:b5:5f:91:60:22:d1:89:64:17:d0:3e:fc:7a:e4:b9:5a:
19:3a:11:9c:a7:fd:66:2c:13:a6:ab:4e:84:0b:08:af:e4:43:
04:b6:93:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 06:35:13 2025 by rpki-client