Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/WFsNT8xmWsJt6z2aENr72R2v43A.roa
File: WFsNT8xmWsJt6z2aENr72R2v43A.roa (raw, json)
Hash identifier: BxdDV9Mw8RiWqPyjMXWYb+KzWo8tOZIFaZkOAzCcE/s=
Subject key identifier: 58:5B:0D:4F:CC:66:5A:C2:6D:EB:3D:9A:10:DA:FB:D9:1D:AF:E3:70
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018642BB7AB206E79DEA4E091C08D3A034A7
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/WFsNT8xmWsJt6z2aENr72R2v43A.roa
Signing time: Sat 11 Feb 2023 23:07:08 +0000
ROA not before: Sat 11 Feb 2023 23:07:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:42:bb:7a:b2:06:e7:9d:ea:4e:09:1c:08:d3:a0:34:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 11 23:07:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=585b0d4fcc665ac26deb3d9a10dafbd91dafe370
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:3e:87:3f:3f:fc:53:7b:63:b6:87:7b:20:21:
13:83:4e:f8:d2:97:ad:6b:78:bd:88:69:92:13:7d:
ba:f9:f1:98:ff:17:3e:f1:33:79:e6:9e:d0:8b:27:
a6:70:8f:14:7f:6d:dd:2e:5f:59:bf:34:f8:bd:0e:
ef:d3:aa:12:d8:d3:e0:be:16:07:a6:ab:ae:92:56:
00:9f:e2:38:b8:06:14:9e:1a:c0:e9:97:83:f0:dd:
e0:a9:10:67:fb:69:21:45:79:fe:14:a5:f1:ac:ca:
1d:c8:a2:a5:9e:ef:47:76:82:43:69:79:4e:f2:24:
6c:f8:8a:b0:62:92:25:0f:66:5b:ca:1e:ae:f6:c4:
ad:7a:01:1a:0a:05:56:bd:e4:64:e2:a8:03:33:61:
8d:05:03:a6:7b:53:b0:f2:93:04:b9:be:b6:65:e1:
b7:d0:e1:a9:74:b9:c6:68:de:1d:4f:0a:5f:d7:9d:
02:af:9c:c2:23:b5:a9:2e:95:44:69:99:41:b3:d4:
07:5b:77:ea:4d:26:c7:09:e3:ce:d3:0b:4e:60:0c:
98:5b:7a:36:3c:12:05:87:d4:fe:61:cd:4f:7b:24:
62:2a:02:8f:e3:36:4f:1c:45:ed:83:6b:30:cb:dd:
f6:e4:62:ab:7a:ce:fa:c6:eb:49:76:c3:d7:50:17:
6a:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:5B:0D:4F:CC:66:5A:C2:6D:EB:3D:9A:10:DA:FB:D9:1D:AF:E3:70
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/WFsNT8xmWsJt6z2aENr72R2v43A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8e:33:c4:1c:5a:21:91:a7:54:35:96:00:5c:92:d4:80:f4:64:
fe:df:8f:79:d1:da:0c:19:a7:22:92:06:37:10:a9:5e:a9:20:
ae:68:42:86:cb:da:bf:0d:27:5f:6a:82:1c:ba:c4:83:16:46:
70:5b:88:be:1e:10:95:fe:65:87:f2:50:e8:f7:89:47:12:dd:
e1:ee:b6:fb:24:4a:19:80:bc:48:a2:70:4e:13:8d:b1:18:ac:
e4:6e:03:b5:7a:2b:56:cf:44:ba:20:f7:61:45:96:3d:f0:c5:
bd:a4:33:3a:4a:e8:66:ae:43:a9:83:48:66:5f:8c:8d:07:58:
00:62:15:2f:34:4a:f8:0a:92:0d:82:f9:f8:74:25:fe:be:2f:
dd:f6:34:18:24:72:7b:c2:b9:0b:7a:42:cc:f8:22:78:5b:6a:
9f:1a:17:e1:6b:d8:7e:93:5a:4f:24:28:e2:46:9a:f3:a6:6e:
78:bc:b1:ad:e7:a0:47:9b:66:29:1d:d2:67:67:47:84:39:9a:
a2:6b:b6:a4:cc:73:45:06:f9:f1:54:d4:e7:70:e9:ad:08:37:
86:9a:81:b0:bc:f0:0a:77:74:cb:67:97:01:aa:01:dd:7e:a0:
d6:9a:03:64:c5:58:06:ed:d4:ff:be:ba:b6:ee:be:06:bb:7c:
18:e0:d6:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 08:32:28 2025 by rpki-client