Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/WFXHac3WLJR41r7VSsnE8A4h1tA.roa
File: WFXHac3WLJR41r7VSsnE8A4h1tA.roa (raw, json)
Hash identifier: fRfzkVs/kylMG6FMqeSLlxxMbJ63l8r/auykwpOEEa0=
Subject key identifier: 58:55:C7:69:CD:D6:2C:94:78:D6:BE:D5:4A:C9:C4:F0:0E:21:D6:D0
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018777838938D5A8A4E8800E77F9F0B12020
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/WFXHac3WLJR41r7VSsnE8A4h1tA.roa
Signing time: Wed 12 Apr 2023 22:08:41 +0000
ROA not before: Wed 12 Apr 2023 22:08:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:77:83:89:38:d5:a8:a4:e8:80:0e:77:f9:f0:b1:20:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 12 22:08:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5855c769cdd62c9478d6bed54ac9c4f00e21d6d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:9b:77:25:3f:51:8c:2e:88:2d:a7:13:5e:99:
56:7a:30:50:4c:c5:50:d2:0e:e9:a1:1f:5c:fd:b6:
49:eb:9e:3a:e0:a1:0f:51:a1:35:9f:48:87:3f:a9:
e4:a6:b5:d3:0f:3c:6e:fe:a0:90:24:da:d1:bc:aa:
0f:63:25:32:ab:5a:f9:ac:c8:bf:76:15:52:8e:77:
f5:23:75:e4:34:92:7c:8a:77:e4:90:26:6f:9b:54:
53:83:ae:36:55:c5:c9:61:b8:3f:8a:a0:40:c1:00:
69:3c:f3:fd:5a:93:df:10:02:1a:ab:cc:c3:47:66:
19:14:4b:78:ae:c8:29:7c:d1:85:42:d0:71:c0:85:
d7:50:6c:4e:4d:b7:90:19:85:99:ed:0e:c3:5c:6f:
b4:6a:aa:c7:5e:8d:89:cb:a1:bf:13:d0:9c:ee:14:
a8:1f:a4:82:74:7d:b4:a8:1b:93:fd:49:a8:16:6c:
dc:0b:fa:11:a9:46:b9:ef:15:d8:5d:c5:b9:a0:38:
11:3f:2e:6d:fe:9a:01:9c:7b:4f:db:78:d9:fb:3c:
bc:45:2b:22:1f:24:37:2a:b7:1d:8e:4c:eb:72:b0:
c0:cf:bd:97:9b:9a:85:ae:6f:2d:ce:90:2b:bd:40:
91:c5:b9:90:43:2b:40:03:d4:69:98:37:af:b9:ee:
b3:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:55:C7:69:CD:D6:2C:94:78:D6:BE:D5:4A:C9:C4:F0:0E:21:D6:D0
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/WFXHac3WLJR41r7VSsnE8A4h1tA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a7:de:d5:d3:b7:36:cb:54:5f:e8:06:94:f8:9f:53:d9:5b:34:
a9:43:22:95:99:39:13:fa:b1:c4:4f:6c:1c:91:58:11:75:b3:
69:4f:6a:29:c1:d7:11:4a:8a:cc:a8:39:ec:29:2c:cd:f1:0c:
dd:90:b5:85:90:ae:52:ea:bf:5a:5a:85:06:5a:45:67:a9:d4:
5c:77:73:64:f9:15:40:3e:57:fb:c0:79:aa:6a:98:f6:5d:ca:
f8:ea:07:92:db:f1:f3:7a:d2:de:ef:47:ec:22:fb:69:41:84:
01:48:d9:c1:4e:c7:11:b3:0c:22:45:01:47:9d:d1:a7:76:db:
d4:e6:ab:7c:b1:35:e9:08:73:12:a1:6c:c0:23:ee:4f:b8:91:
c0:6e:b1:86:81:ad:25:9a:78:a3:62:eb:b4:7c:65:d2:f4:42:
be:94:f2:6a:53:b1:2f:6d:8d:60:00:d9:d8:8e:76:98:28:7a:
3a:b5:ed:b9:b1:8c:32:00:a5:f3:ab:e9:84:6a:43:8f:76:2d:
bd:b1:2b:c9:34:7b:fd:b4:33:c1:df:6c:a7:01:51:d0:8a:62:
13:45:23:55:0b:9e:a3:c8:e4:fb:d8:f6:d9:05:84:cf:cf:84:
b6:e1:88:2d:6a:74:00:c0:ca:33:0c:36:7a:16:eb:66:38:f7:
29:cd:c4:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 17:43:17 2025 by rpki-client