Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/WDLnZ2MIHjvp_z81fF-A2v3ZKpY.roa
File: WDLnZ2MIHjvp_z81fF-A2v3ZKpY.roa (raw, json)
Hash identifier: Oj0cyZfEb4jE6vdxeq/H1As7M7jRdsW8Qoz9q6ZpIs4=
Subject key identifier: 58:32:E7:67:63:08:1E:3B:E9:FF:3F:35:7C:5F:80:DA:FD:D9:2A:96
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01869E8FCCD2DE4710AE643689BCDEDCF9C6
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/WDLnZ2MIHjvp_z81fF-A2v3ZKpY.roa
Signing time: Wed 01 Mar 2023 19:04:29 +0000
ROA not before: Wed 01 Mar 2023 19:04:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:9e8f:9e73/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:9e:8f:cc:d2:de:47:10:ae:64:36:89:bc:de:dc:f9:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 1 19:04:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5832e76763081e3be9ff3f357c5f80dafdd92a96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:e0:88:b0:35:be:3e:06:3b:89:c0:eb:19:79:
bf:dd:0e:bf:89:48:76:1c:70:b8:28:67:3d:39:e8:
47:0a:3f:af:07:b2:fc:cb:3d:a7:36:80:15:25:0f:
f6:73:50:a8:80:91:47:2b:87:4d:ef:4c:25:75:b8:
44:9f:ed:e8:e9:87:ec:a6:bb:07:55:c7:41:10:05:
e8:25:0e:5e:83:b2:db:7d:25:42:4f:df:b8:fc:71:
c9:e9:3f:60:8b:4b:6d:b8:45:8d:dc:0c:18:4f:9d:
aa:5f:9d:ea:cd:04:4d:0f:3f:0d:89:7c:63:0d:35:
c6:2b:43:3e:e2:d0:67:d5:df:c0:13:29:49:62:90:
f0:87:47:6b:70:f1:5b:13:97:11:cb:8c:c1:6d:93:
7d:d3:dc:25:7a:13:d1:df:21:49:e7:c0:7e:b2:ee:
93:e8:71:1e:ee:c3:0b:96:69:55:a1:35:48:4f:5f:
24:37:ea:bf:c4:e8:c1:9f:02:e7:67:f5:af:d2:1f:
cb:18:1a:a8:5f:92:a9:52:f4:1a:81:8f:0d:db:2b:
5a:0d:25:29:70:0a:5b:11:9b:af:11:5f:3a:26:1b:
af:b8:f1:d3:02:69:ba:30:70:42:cb:04:cb:ee:f8:
6f:8e:36:90:a1:79:bd:7d:e0:cf:57:13:0a:6e:35:
9f:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:32:E7:67:63:08:1E:3B:E9:FF:3F:35:7C:5F:80:DA:FD:D9:2A:96
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/WDLnZ2MIHjvp_z81fF-A2v3ZKpY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
59:df:d8:a4:ac:9a:3a:41:61:25:a2:d1:71:de:96:31:51:3c:
bd:0c:fe:2a:41:65:7f:9a:6e:1c:e5:9d:f1:58:7a:38:6a:11:
b8:6f:5a:fa:f8:7a:fe:3a:f0:15:06:cf:e5:8e:5b:32:7a:6d:
fd:2d:49:08:2d:00:92:0b:94:26:af:b5:3e:c7:07:98:db:19:
e3:f3:b4:ed:ac:43:7e:05:33:4b:6d:b5:23:d2:66:53:9d:c4:
07:9e:f8:94:81:ef:2f:f5:b6:49:55:82:d1:14:5d:85:0d:fe:
8b:72:67:63:7e:85:4b:c2:e7:1b:3b:6c:b5:3a:1f:3b:7f:26:
18:53:f8:23:9f:37:14:68:f5:96:bb:9d:b3:68:5d:f9:8c:1f:
7d:46:88:f1:0f:d2:26:66:3a:4d:25:1a:af:6a:d4:02:b6:65:
2b:0e:07:6c:2f:cd:42:e1:80:33:07:86:87:ca:92:83:c0:ed:
01:4e:29:f1:cc:94:85:9b:55:c8:21:72:5c:d7:98:74:57:f8:
c1:d5:61:ae:31:8c:39:05:39:63:11:a6:5b:08:90:1a:2b:17:
3a:c7:04:51:36:0c:69:8d:0a:01:06:51:41:9e:87:a2:12:cd:
c4:67:db:04:ba:a9:07:b5:e0:fe:82:e3:2d:a1:4c:bf:f8:f3:
88:6e:66:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:41:29 2025 by rpki-client