Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/W8Hp7c4hI8koqGHhXzfiRohYnZE.roa
File: W8Hp7c4hI8koqGHhXzfiRohYnZE.roa (raw, json)
Hash identifier: 1kSl27ws+ylzf7H896ijqujItiy/nVlA+oxN3akm2qM=
Subject key identifier: 5B:C1:E9:ED:CE:21:23:C9:28:A8:61:E1:5F:37:E2:46:88:58:9D:91
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189CB6A734120EA4DB62A1DD37AEFBD75A7
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/W8Hp7c4hI8koqGHhXzfiRohYnZE.roa
Signing time: Sun 06 Aug 2023 15:14:58 +0000
ROA not before: Sun 06 Aug 2023 15:14:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:cb:6a:73:41:20:ea:4d:b6:2a:1d:d3:7a:ef:bd:75:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 6 15:14:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5bc1e9edce2123c928a861e15f37e24688589d91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:fe:f6:7a:d3:3d:e7:a0:3d:26:70:b5:40:2f:
47:bd:b3:08:19:f2:be:a1:a0:a7:06:e9:d6:cd:e6:
b5:1a:31:b0:92:cf:f0:ad:65:75:5d:66:35:c4:8c:
88:8d:48:2e:cf:d6:73:b4:2a:7e:dc:90:08:3e:c3:
1e:31:94:10:47:d4:83:98:63:74:6f:3f:c8:27:23:
69:99:54:0d:51:5d:a3:db:f7:05:84:20:54:6c:da:
26:e2:cc:a0:51:fd:62:75:09:29:ac:13:b9:e3:e2:
7c:47:8b:76:d3:e0:5b:d8:06:2c:c2:13:d4:58:a3:
b5:71:81:75:3a:f4:c3:fd:31:50:b3:1d:2f:ac:77:
58:49:1b:47:45:a5:ef:2b:63:71:88:a0:b8:47:65:
b7:48:fb:c3:6d:ba:35:28:54:d6:bd:43:b0:8f:ac:
6d:33:60:13:44:4c:5c:5e:db:9b:98:a9:f3:22:50:
80:63:45:72:58:7f:29:68:b4:1b:36:fc:dd:bf:01:
6a:bf:92:a8:c6:9e:1a:2f:13:cd:6b:4c:12:e6:7d:
ce:09:9a:2d:6b:1d:75:5d:b8:be:5c:23:48:58:d9:
a6:d2:54:65:64:ee:3c:b8:7c:40:29:f5:b7:b4:b4:
ba:8a:6e:24:8d:98:3f:54:20:5b:a6:89:f4:b4:3f:
26:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:C1:E9:ED:CE:21:23:C9:28:A8:61:E1:5F:37:E2:46:88:58:9D:91
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/W8Hp7c4hI8koqGHhXzfiRohYnZE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
16:2c:be:a7:93:6a:3c:58:f6:9e:8d:5f:01:b8:53:73:6f:dd:
19:95:67:57:d3:39:ac:1c:8f:ef:ca:c2:c7:60:b3:50:6a:7f:
b4:a8:be:27:0e:a7:4c:64:94:31:43:62:0f:c3:93:55:ca:6c:
5e:90:65:99:5b:54:22:4b:19:b5:8f:f7:d3:a1:74:39:18:17:
92:fb:e8:6d:d9:ce:e9:a1:6d:b7:d5:e6:e2:47:38:01:42:74:
75:85:3e:99:a5:9d:d7:37:5b:19:0e:d0:a2:52:ac:58:9c:4a:
f1:b0:a7:de:53:54:b5:a8:85:2e:01:07:af:a9:07:dc:ea:27:
78:4b:3b:bd:ff:ef:8a:f3:a3:5b:4d:29:50:48:0f:6e:39:ab:
24:e4:51:d4:00:2d:b4:8a:e8:6e:ab:a4:4e:d5:89:52:40:c8:
81:0b:56:c2:ce:8c:e9:9f:ea:26:e6:f8:5b:3b:b1:33:2e:0d:
24:05:09:74:df:17:e7:88:77:46:52:f9:2c:93:64:c7:6a:72:
9f:09:16:81:5a:26:0f:b5:b3:59:5c:53:4e:af:df:a1:fe:f0:
70:2a:c0:27:c9:7d:eb:67:b0:da:c9:a4:e1:13:0b:a0:c5:c0:
60:47:f9:a7:55:b6:10:2a:8c:8d:42:67:16:32:56:29:5d:26:
3f:8e:56:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 14:25:16 2025 by rpki-client