Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/WEQjqC-0BIzB9MpbGYrZf9AvwEg.roa
File: WEQjqC-0BIzB9MpbGYrZf9AvwEg.roa (raw, json)
Hash identifier: imgQ8vA9jDcLoNzXLw5QiiKcfxUxPFIJoiwyaMkkSOE=
Subject key identifier: 58:44:23:A8:2F:B4:04:8C:C1:F4:CA:5B:19:8A:D9:7F:D0:2F:C0:48
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187EC408A99FF484F55CD63A0C31ADACDCF
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/WEQjqC-0BIzB9MpbGYrZf9AvwEg.roa
Signing time: Fri 05 May 2023 14:11:05 +0000
ROA not before: Fri 05 May 2023 14:11:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:ec:40:8a:99:ff:48:4f:55:cd:63:a0:c3:1a:da:cd:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 5 14:11:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=584423a82fb4048cc1f4ca5b198ad97fd02fc048
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:9e:93:e5:2f:dc:39:68:65:45:75:59:fd:8e:
1d:fb:a0:49:51:27:f3:ba:ab:e4:50:60:94:f5:4d:
3f:93:f9:3a:94:09:84:95:76:d2:85:c4:65:e0:02:
f5:97:2a:80:04:d8:7a:85:10:3f:71:f5:27:e4:c9:
cd:8a:13:26:c5:96:f5:63:c7:72:a9:ec:22:78:6d:
38:d7:a1:00:7e:26:c7:b8:37:db:91:af:e3:84:a9:
64:2a:46:49:35:18:d1:a3:90:2b:99:55:27:bb:bc:
88:44:b5:83:40:c7:71:2e:0e:d2:c7:aa:bc:bf:24:
0e:8d:1e:d1:7e:37:5c:ed:4c:e0:7a:38:d9:f4:50:
9a:de:7d:7f:ca:47:c1:6d:23:90:a7:06:92:b2:86:
e4:49:c1:5d:6f:8f:4b:9a:c9:32:f8:be:59:9b:c6:
39:a1:5c:15:e0:1a:e3:8e:b1:c8:45:4e:25:e1:33:
33:10:d6:e9:a2:2a:e6:76:a0:78:58:c4:8e:2f:c2:
54:c3:3c:5d:24:6d:5e:a0:0a:d2:70:5b:1b:77:55:
a0:bc:68:3c:7e:6e:ec:a0:92:81:e3:6b:f1:77:61:
46:61:24:c6:42:d4:15:3d:24:95:48:52:55:20:36:
13:d2:7f:03:54:ea:39:18:64:bf:83:a9:a7:7c:af:
6e:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:44:23:A8:2F:B4:04:8C:C1:F4:CA:5B:19:8A:D9:7F:D0:2F:C0:48
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/WEQjqC-0BIzB9MpbGYrZf9AvwEg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
17:d9:04:11:81:4a:49:ce:60:90:fc:cb:2f:a3:3d:d3:c8:f4:
9b:ff:c9:41:98:fa:c1:1f:d4:dd:b6:98:8d:d8:4d:f2:0a:e1:
91:4e:60:3c:cb:75:ff:b8:5d:80:c2:8e:4f:ad:c1:05:c7:30:
6b:27:50:d7:de:f9:75:4f:5d:d6:58:c1:4c:a2:53:7f:84:27:
38:47:df:10:39:cc:af:bb:0c:6d:7f:45:9e:eb:8e:d1:d4:90:
3b:3a:7b:f5:29:94:57:5a:c5:d7:66:34:d6:48:95:1e:95:c3:
b9:be:6e:cb:bc:59:f5:c5:14:41:34:0b:f4:db:27:3b:07:59:
64:d9:0b:22:68:a1:db:7c:f7:15:22:d3:5b:5f:66:44:fd:33:
36:4d:8e:89:d0:76:82:ad:27:e7:63:86:cb:80:72:7d:23:c8:
74:25:b5:2d:33:ba:aa:a6:3c:1c:c0:75:db:61:32:4a:24:fe:
13:98:20:ee:a9:d0:b1:a0:a3:f1:3c:36:f7:13:9c:9e:0e:c7:
c9:1b:8e:35:de:b4:ef:8e:a4:38:3e:bc:fa:ca:d4:87:f3:c6:
5e:73:c6:8d:5b:dc:96:3e:92:dc:e7:39:8f:33:d1:46:86:81:
c4:a0:60:6d:f0:21:a9:89:a4:60:d7:e5:59:4c:e8:d6:9f:e0:
35:15:e8:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:15:25 2025 by rpki-client