Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/W7KdC6v093NMDsSqBp2vDaQuxw8.roa
File: W7KdC6v093NMDsSqBp2vDaQuxw8.roa (raw, json)
Hash identifier: Dz+peU1yte/HzjLbDBs7jpDNbYEruqqxlMvlYvN8TEY=
Subject key identifier: 5B:B2:9D:0B:AB:F4:F7:73:4C:0E:C4:AA:06:9D:AF:0D:A4:2E:C7:0F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018415788313C87BB38E9290740A554DB58E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/W7KdC6v093NMDsSqBp2vDaQuxw8.roa
Signing time: Wed 26 Oct 2022 18:05:30 +0000
ROA not before: Wed 26 Oct 2022 18:05:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:184:1577:6996/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:15:78:83:13:c8:7b:b3:8e:92:90:74:0a:55:4d:b5:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Oct 26 18:05:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5bb29d0babf4f7734c0ec4aa069daf0da42ec70f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:9a:95:3b:af:87:13:77:51:ef:b7:c3:8b:22:
08:60:72:0b:50:62:55:72:24:be:e6:36:63:91:d6:
dc:64:02:3b:35:39:35:8f:34:bb:74:74:09:59:3a:
f7:bd:0a:fd:0a:bf:cc:b7:65:c1:3d:42:8d:ab:38:
c1:ec:ff:1c:5d:7a:b9:65:c9:b0:6b:57:d9:86:3d:
8c:bf:61:d0:eb:8d:d9:d1:34:59:e4:37:66:d7:10:
33:a5:91:e9:73:9a:4b:46:fe:41:a9:6f:e4:2d:7e:
79:b2:6c:f5:50:14:d9:bf:67:ee:4e:8d:d6:63:01:
8f:f2:a6:a6:64:1c:ff:63:93:6b:76:f6:a6:10:40:
55:b4:66:fd:30:db:04:72:3a:0f:b7:02:a6:82:07:
57:cb:f1:a7:36:03:ee:55:7d:7e:0f:d1:2a:f9:9a:
ff:45:41:16:af:e8:1c:b8:d8:ea:93:54:57:45:c3:
49:de:bf:e1:c5:8b:0f:7e:d4:99:b7:df:6a:8d:0d:
86:f9:f5:a6:48:6e:c9:0b:63:d8:1e:e0:77:9f:57:
fa:1d:9b:d1:6c:97:0d:e1:f2:fc:8e:3b:ff:7a:0a:
ca:eb:4e:da:52:e7:19:04:9c:2f:fa:59:bc:93:b6:
33:b7:7d:3e:f4:02:c9:3b:3a:4f:ac:e7:ce:1f:1e:
fa:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:B2:9D:0B:AB:F4:F7:73:4C:0E:C4:AA:06:9D:AF:0D:A4:2E:C7:0F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/W7KdC6v093NMDsSqBp2vDaQuxw8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3c:1d:8b:89:57:32:7d:fb:9a:22:30:fe:ed:2a:ce:c2:a1:9b:
00:ca:e3:78:98:dd:52:70:33:0b:4e:51:cd:0f:ce:24:2b:e3:
2f:8f:63:52:d3:8a:b6:46:6b:0c:98:72:b3:06:dd:f1:60:44:
11:a3:64:fc:6e:52:91:25:11:6a:bc:37:30:6a:89:05:a4:ac:
69:2c:ff:fc:3d:5b:ea:8f:de:b8:fb:b2:4d:0f:fe:41:46:01:
34:f3:a3:04:f3:3a:9d:2b:ef:9f:88:2d:72:cd:6c:90:bf:29:
fb:c9:ef:00:23:61:f5:2d:d5:99:4d:79:f3:17:67:7e:0b:cd:
de:83:b4:0a:e0:6e:58:28:16:1a:2b:f8:f2:0d:ed:54:5f:a5:
3f:5e:28:9d:02:7f:d3:70:12:f3:fc:53:df:a4:73:8f:d0:22:
33:f2:cd:fd:cc:22:9c:d8:e4:87:44:09:96:9c:31:48:f7:a3:
5e:5c:1f:12:c5:23:bb:64:99:50:eb:62:65:a3:b0:43:b6:d5:
84:09:b5:ea:d2:96:e8:ee:01:9c:03:90:3e:39:d0:09:da:e6:
ff:26:24:10:e7:62:9d:7c:2a:65:47:3e:39:3c:67:51:42:34:
23:48:4b:c0:85:de:b4:ea:96:41:48:3a:b0:80:c1:0e:7a:74:
d2:ea:bf:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 01:00:29 2025 by rpki-client