Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/WGDXGyTTfnjsCGzMy4CVNGIebfo.roa
File: WGDXGyTTfnjsCGzMy4CVNGIebfo.roa (raw, json)
Hash identifier: th+tX7hll1+sGcGPP0P01EL8pZaGw08cOq0lpOL6lC0=
Subject key identifier: 58:60:D7:1B:24:D3:7E:78:EC:08:6C:CC:CB:80:95:34:62:1E:6D:FA
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01893E0176397440C8D5F9CDFA612E6DF363
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/WGDXGyTTfnjsCGzMy4CVNGIebfo.roa
Signing time: Mon 10 Jul 2023 04:13:50 +0000
ROA not before: Mon 10 Jul 2023 04:13:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:3e:01:76:39:74:40:c8:d5:f9:cd:fa:61:2e:6d:f3:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 10 04:13:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5860d71b24d37e78ec086ccccb809534621e6dfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:2c:ed:a7:72:ac:05:80:fe:1e:6f:60:5d:0f:
32:2d:ed:c0:5f:9f:ae:f0:b7:6e:89:56:61:f5:fd:
72:55:f6:b3:77:43:d7:3e:7f:07:a4:fe:3a:26:ea:
72:9b:fe:8d:91:50:1f:00:10:a2:40:8d:0f:77:7e:
ce:e6:6b:2c:cf:1a:f5:b4:e8:05:86:4a:5d:2c:5b:
93:dd:70:b9:f8:79:58:79:83:7c:5e:f8:28:c7:d9:
08:56:6b:dc:14:e9:65:a6:6f:c7:1a:32:2a:13:18:
e5:bb:ab:03:95:39:ac:54:98:d4:d1:49:0d:5c:03:
fc:ef:61:14:b1:8a:70:5f:62:48:29:a1:ab:39:94:
18:51:dc:9a:71:c6:23:6e:3a:68:07:bd:d7:7c:6b:
06:8b:cd:75:b9:7a:1a:9c:ec:c5:b3:b4:c6:31:dd:
45:10:0d:6b:1f:3a:57:69:39:0f:3c:5e:9c:f9:da:
15:7d:13:87:76:7d:a3:d2:16:63:ec:f5:47:ee:f9:
5f:4d:87:7a:f3:c5:ac:16:ec:8c:9f:fd:56:d1:57:
5e:81:9d:79:64:b8:56:c7:7c:a9:56:f8:e2:a4:83:
1f:ba:86:43:d5:fe:06:86:92:21:d2:3d:b2:7c:a3:
2e:cb:0a:d9:38:6e:47:69:ac:21:7f:98:32:77:13:
a6:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:60:D7:1B:24:D3:7E:78:EC:08:6C:CC:CB:80:95:34:62:1E:6D:FA
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/WGDXGyTTfnjsCGzMy4CVNGIebfo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a0:1a:11:e9:4c:95:a1:0b:e7:66:66:b5:3f:09:54:f5:bc:08:
82:1e:91:8a:d8:ae:9d:3a:87:0c:c6:41:a8:f9:e1:aa:01:02:
eb:ff:b5:83:96:29:4d:12:00:ca:14:0d:f5:8b:51:68:31:7a:
6a:68:77:2e:39:ef:1f:01:97:f3:3c:9f:42:e8:74:55:ba:e4:
a7:56:0c:e6:1a:b4:fb:11:e1:14:45:32:d9:db:9c:77:ba:37:
f5:99:8b:95:13:aa:c9:d2:b2:d0:bf:76:c5:ea:71:8e:5c:18:
a8:cd:0e:3a:09:90:0c:e5:e3:ac:9e:d3:02:f7:47:8f:b9:9f:
7c:29:57:11:97:e4:aa:4b:27:bd:a2:e7:9d:88:b1:6f:33:b1:
b8:0c:af:23:a2:00:4b:06:7a:f4:1c:3e:05:ae:e6:1f:7e:34:
f7:ab:eb:69:26:1a:94:6d:5c:35:d8:69:21:eb:75:cb:d4:49:
df:fc:81:95:4e:a0:44:66:bd:93:67:06:a9:90:d8:6e:39:64:
02:73:f9:f0:fd:42:c7:76:43:6b:a1:6b:cf:55:c9:2d:70:19:
12:af:af:33:d1:8d:25:48:dc:15:3b:3f:06:dd:59:07:70:96:
78:d8:ae:bf:1f:97:31:56:c8:3d:8d:41:bc:0a:d3:c5:5c:30:
6a:19:03:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 00:08:24 2025 by rpki-client