Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/W8z_e02FnuJSi-IquSqicygFfvo.roa
File: W8z_e02FnuJSi-IquSqicygFfvo.roa (raw, json)
Hash identifier: 50nOP+mS1B6AtlDZIeHHzehQjW8Nroo3lvorJ3i8SIM=
Subject key identifier: 5B:CC:FF:7B:4D:85:9E:E2:52:8B:E2:2A:B9:2A:A2:73:28:05:7E:FA
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01862F025DD2FA2409E525AC1F81BB11E378
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/W8z_e02FnuJSi-IquSqicygFfvo.roa
Signing time: Wed 08 Feb 2023 03:12:09 +0000
ROA not before: Wed 08 Feb 2023 03:12:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:2f:02:5d:d2:fa:24:09:e5:25:ac:1f:81:bb:11:e3:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 8 03:12:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5bccff7b4d859ee2528be22ab92aa27328057efa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:15:96:9b:65:5f:26:d2:59:7b:e5:27:95:a7:
a2:0a:f3:fc:8c:03:80:1a:ec:39:3a:a7:d5:8b:b6:
36:9f:ff:62:53:27:67:7a:29:20:50:4a:03:41:57:
6e:7d:95:70:64:c1:4d:a4:78:c2:e1:39:99:23:eb:
02:87:91:dc:6c:5f:ce:69:a9:05:46:f5:71:d6:27:
f2:e2:0e:f6:51:55:01:53:d8:4e:aa:3e:4a:6b:af:
93:dd:c1:1a:79:6d:c8:83:28:df:28:cb:6b:8e:9b:
f4:33:18:e9:2c:3a:b4:ff:ae:95:ca:cc:00:7b:5f:
ed:9d:1f:54:39:fd:11:84:f1:18:31:31:c9:ac:6e:
b4:6c:de:bd:9e:dc:58:f3:a1:6e:04:88:ec:80:7c:
c4:95:d7:b0:e5:5d:43:5d:5c:e3:1a:97:51:d5:b9:
87:1d:b6:40:e0:24:37:9a:22:61:ff:d3:83:e1:9d:
e3:b7:26:63:7a:4a:6c:c2:bf:28:cf:1f:db:fa:2f:
0e:fa:12:b6:62:fa:3d:c0:a1:a1:d1:8f:f1:f4:dd:
4f:b0:67:5b:1c:e7:22:c4:e0:d9:f8:d6:67:8f:46:
a9:a8:a1:14:fb:e1:f2:ad:2c:52:75:8a:df:9c:75:
e5:84:98:01:f9:e0:9f:49:f5:bb:05:a0:6f:55:ea:
be:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:CC:FF:7B:4D:85:9E:E2:52:8B:E2:2A:B9:2A:A2:73:28:05:7E:FA
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/W8z_e02FnuJSi-IquSqicygFfvo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
56:06:5c:e1:46:e0:df:d1:c4:4d:6f:99:e4:55:51:5d:4d:fc:
f5:cd:2f:ea:43:6a:d8:a0:a7:8d:c9:1a:29:b2:fb:2f:9b:a8:
f1:52:87:87:a4:3e:da:76:bc:4c:6f:6e:15:11:23:6c:cf:34:
f3:ee:90:e5:f1:04:4c:51:13:08:46:ba:1e:1a:52:a7:65:6a:
2d:df:0c:c3:75:16:38:b5:de:a1:29:db:d4:e3:5d:46:c9:3d:
16:69:24:7b:cf:b3:a0:d1:c8:39:c6:9a:89:61:f1:fb:3b:c5:
47:69:c4:26:91:f2:d2:74:31:df:b8:75:87:aa:a4:a1:7a:f6:
fc:f5:9d:5e:7c:80:97:53:54:96:59:7d:9f:bd:99:35:0e:f3:
68:35:d0:1e:40:73:46:cc:b5:24:df:b2:aa:34:48:14:a9:14:
6c:38:d4:09:94:6e:ee:10:87:85:50:e0:79:62:d6:44:87:d0:
b6:a0:f1:00:6a:d4:3d:d8:ec:39:82:de:a2:aa:17:50:b9:56:
e5:4b:32:1b:44:57:bc:e0:db:55:d8:d2:fd:0f:ca:f9:c9:ac:
d9:0e:60:ad:e7:d0:cf:a9:6f:ae:fa:df:a7:1a:b6:07:a0:26:
94:aa:ce:77:89:c4:e0:f4:f2:9b:ab:8b:24:0c:43:23:7b:54:
bd:3e:4c:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:25:11 2025 by rpki-client