Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/WBDrbKO_H-iIeDyj3vFJr9cC1pk.roa
File: WBDrbKO_H-iIeDyj3vFJr9cC1pk.roa (raw, json)
Hash identifier: 7iIdaBRLirCZ9xekMYWsZHA2Dvw2SEZ5pZmiDWCe5G8=
Subject key identifier: 58:10:EB:6C:A3:BF:1F:E8:88:78:3C:A3:DE:F1:49:AF:D7:02:D6:99
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185F0C432D8DB5D3DC6EE1C5EF2FA45ED02
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/WBDrbKO_H-iIeDyj3vFJr9cC1pk.roa
Signing time: Fri 27 Jan 2023 01:07:47 +0000
ROA not before: Fri 27 Jan 2023 01:07:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:f0:c4:32:d8:db:5d:3d:c6:ee:1c:5e:f2:fa:45:ed:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 27 01:07:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5810eb6ca3bf1fe888783ca3def149afd702d699
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a8:96:ab:99:c7:80:07:6b:03:46:5c:ea:d9:
a0:04:80:b1:36:99:85:f8:ab:ee:ab:36:bc:a4:bb:
c2:4c:64:5b:dd:e0:32:6f:e9:4f:9c:b0:79:12:6b:
93:c4:9e:12:17:06:ca:e7:9e:62:dc:25:02:04:88:
d3:8b:9e:d1:ec:5b:10:61:ac:f5:92:d2:38:bb:83:
29:00:34:a9:94:39:70:b8:7d:77:25:30:1a:b9:9b:
8c:64:4d:0d:84:fa:f0:f5:52:47:71:77:5d:46:a5:
78:fa:87:da:f0:b4:10:6f:d7:ed:91:03:ec:a1:f5:
77:ac:c7:89:7a:af:76:a7:b5:81:a0:fc:4a:c2:bf:
97:df:c7:80:f1:e1:f4:3b:1e:3e:71:d2:c3:3a:49:
4c:06:4a:e7:23:8a:84:bc:93:80:94:c9:52:04:bc:
4a:76:c4:3f:9b:1c:67:91:24:4d:e1:40:81:3a:1b:
67:02:6d:cf:8f:71:97:6a:4d:1b:e1:5c:ef:70:80:
5b:54:47:ed:df:41:17:f1:a0:d4:ed:87:89:f4:20:
25:e5:49:3d:34:dd:b3:ed:9f:48:c1:f4:71:76:f1:
99:f7:97:6e:8b:c5:a4:e2:89:e0:48:e4:56:df:62:
2d:4b:fe:59:17:5e:39:e3:c9:44:7b:9a:a5:41:ae:
15:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:10:EB:6C:A3:BF:1F:E8:88:78:3C:A3:DE:F1:49:AF:D7:02:D6:99
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/WBDrbKO_H-iIeDyj3vFJr9cC1pk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1f:00:78:ba:69:46:83:fc:ab:fb:ed:06:c6:55:bd:e7:99:73:
09:c3:25:a6:92:6e:e6:c5:ca:55:7e:29:9e:70:cf:ee:d7:f1:
5d:4e:25:52:65:4b:3b:13:9f:dc:a9:7b:17:38:3b:25:1f:73:
5f:f4:d7:fd:11:35:57:f4:c9:6e:7c:dd:b4:08:e2:ad:bf:de:
e3:3e:7a:40:2d:4b:dd:b3:7e:1e:39:a7:11:98:93:fd:ed:95:
d3:00:76:fb:4f:2b:1c:22:c5:4e:97:d4:ff:e1:c9:ae:5e:16:
8b:56:b4:2c:cd:5d:d8:f9:91:a6:de:4e:8c:1b:b8:ec:a4:e4:
7f:ab:2d:7d:f3:83:74:eb:b8:98:9f:f1:fb:cc:ea:a7:c9:3e:
a0:a9:48:a2:28:6d:7b:8f:d8:83:81:b7:53:f0:a1:fd:94:e3:
31:db:34:77:21:59:f2:df:90:4c:89:03:43:f9:e4:9b:a2:73:
b3:35:e0:11:86:0b:13:61:2c:4b:e6:48:73:9d:66:8a:78:76:
aa:dd:11:41:d6:4b:77:86:8b:a3:12:76:94:8c:3b:1e:20:52:
4b:66:6c:6b:ba:9c:f5:00:b0:fc:2a:b0:3f:15:60:0d:f4:10:
69:91:fb:be:c6:c9:e8:79:96:9b:42:8b:25:db:77:89:c7:f5:
4b:c7:db:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 14:23:21 2025 by rpki-client