Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/WByM09ZxXTrUgoStgGqNXfgJl_k.roa
File: WByM09ZxXTrUgoStgGqNXfgJl_k.roa (raw, json)
Hash identifier: oeSs6ErZKHqxRE9q/NsUIHJIbSdl6rsYEyV8TivWLNM=
Subject key identifier: 58:1C:8C:D3:D6:71:5D:3A:D4:82:84:AD:80:6A:8D:5D:F8:09:97:F9
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 763417DB
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/WByM09ZxXTrUgoStgGqNXfgJl_k.roa
Signing time: Sun 27 Mar 2022 17:10:38 +0000
ROA not before: Sun 27 Mar 2022 17:10:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:17f:87e3:2531/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1983125467 (0x763417db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 27 17:10:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=581c8cd3d6715d3ad48284ad806a8d5df80997f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:12:8d:a5:19:65:b3:29:28:54:18:1e:ed:99:
7d:80:23:f6:7c:5c:82:70:6d:c3:b5:a5:4a:e4:05:
58:0e:26:ae:69:b1:5d:7c:1b:79:72:ae:31:5d:75:
32:89:ac:96:d7:a7:bf:7a:45:3e:2d:f6:95:2d:82:
cf:d2:64:89:50:20:03:08:19:00:04:c3:6a:40:34:
0c:68:2e:7b:b3:4b:a2:ea:bd:1f:8e:9e:22:09:5d:
11:91:d1:80:55:25:d8:b3:1a:2e:dd:6d:9a:1a:db:
b3:5b:f1:e8:8e:6a:c3:ac:6b:91:8e:d1:4c:90:34:
3a:c3:50:08:53:03:1c:9d:fd:53:f6:3c:ef:67:8a:
2a:a5:8a:cb:c7:cc:38:ae:bf:8c:bb:e3:6f:66:0c:
62:28:7a:fb:e1:a3:7d:f4:f0:0a:45:8b:07:79:4f:
c2:22:d0:2b:2f:aa:92:4b:7f:2e:a7:d4:25:56:2d:
8d:2f:7f:d4:bb:9c:f7:57:8f:77:5e:cd:af:0e:a2:
0e:fa:bf:34:5f:89:d2:c0:1d:c1:ca:6d:24:1c:3f:
21:b1:f7:ae:b1:c0:91:66:72:ab:6f:ee:b0:b8:a8:
58:0e:75:bd:cd:57:7d:93:7e:0b:65:e7:f8:81:6e:
51:01:fe:c5:8b:19:4f:6e:e2:0d:e4:72:a4:01:09:
76:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:1C:8C:D3:D6:71:5D:3A:D4:82:84:AD:80:6A:8D:5D:F8:09:97:F9
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/WByM09ZxXTrUgoStgGqNXfgJl_k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4b:30:74:5b:33:fc:b6:12:ff:6b:88:04:d0:71:c9:63:5d:c3:
d2:80:a9:46:bb:2a:99:21:d9:94:0a:6c:75:61:e3:05:8a:3f:
0c:07:54:a1:54:f7:ce:e7:8d:82:93:ac:2d:fc:0f:ac:d7:67:
eb:e2:c7:d5:55:fd:14:40:8b:39:c8:46:61:de:f4:e2:b0:5a:
3e:4a:73:d5:75:00:7b:33:ed:8e:2e:15:e3:b3:57:a3:59:9e:
9c:8b:d9:e2:0b:a2:c8:2d:7f:7d:3b:7e:0a:3f:2d:95:a5:f8:
03:36:08:d6:39:d1:41:71:4c:b1:e5:9a:0c:f4:82:01:58:1b:
5e:8f:e8:eb:d0:8e:20:a8:1b:ef:70:f4:fe:ea:e7:7e:04:e8:
ea:f6:1e:09:b7:dd:fc:a2:f8:0a:00:60:65:c7:03:41:44:f6:
ca:ad:0f:e0:09:06:fb:c0:89:34:ba:b0:e2:e0:c0:6e:1b:79:
81:ce:ee:1f:a2:0e:73:3e:4d:94:f7:de:9b:8b:a1:00:73:3b:
a8:a4:07:a1:d7:61:ff:8f:90:a1:f8:74:20:3a:f1:93:14:6a:
08:c1:ca:21:f4:ec:28:8b:82:db:0a:e9:52:52:9f:49:70:45:
45:1d:15:f9:56:74:c8:d1:75:aa:0e:67:78:28:07:d9:fc:14:
ba:1f:cb:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 06:13:43 2025 by rpki-client