Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/WHT6L-AepttUqy4seniU_1km3hc.roa
File: WHT6L-AepttUqy4seniU_1km3hc.roa (raw, json)
Hash identifier: oRj1/rstBk/5LsUBkDCBVSKXZyIWLjIJOHtGMSO7o7s=
Subject key identifier: 58:74:FA:2F:E0:1E:A6:DB:54:AB:2E:2C:7A:78:94:FF:59:26:DE:17
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186B2BBD8F8A0E3A21C42349C9092339B22
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/WHT6L-AepttUqy4seniU_1km3hc.roa
Signing time: Sun 05 Mar 2023 17:05:00 +0000
ROA not before: Sun 05 Mar 2023 17:05:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:b2bb:2ee5/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:b2:bb:d8:f8:a0:e3:a2:1c:42:34:9c:90:92:33:9b:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 5 17:05:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5874fa2fe01ea6db54ab2e2c7a7894ff5926de17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:98:5b:4d:ec:5b:83:7e:1e:04:27:9a:49:a4:
ae:17:3d:5f:e6:eb:32:37:23:ce:25:f6:aa:95:bb:
03:e5:4b:e2:06:00:67:3f:b5:7b:8b:51:cf:b0:6a:
e3:06:68:61:cd:db:0c:cb:fc:9c:60:2a:0d:4b:80:
e2:00:cb:31:56:a7:63:9b:b4:a5:49:22:54:9b:c3:
27:96:ca:f2:41:6f:4c:22:43:86:3f:59:b9:58:0a:
a7:04:0b:3f:bd:97:db:5d:b3:5b:ea:6f:29:dd:11:
92:cf:ce:9f:d5:38:fc:33:b9:c7:f1:33:3a:13:5e:
bf:a0:73:10:28:7f:eb:ff:f4:af:15:23:9a:b7:9e:
7a:01:21:d9:77:5b:eb:80:22:91:51:7d:2b:25:4a:
8f:27:90:b5:41:52:1b:7b:9b:2b:47:bd:86:34:bb:
05:49:e9:58:6c:24:62:7b:c9:0d:7e:ca:c9:8a:96:
df:90:23:35:8a:93:c4:43:59:91:1e:3c:f2:07:e3:
55:fe:61:27:cd:5f:2b:ee:df:d5:fd:a4:91:c5:94:
92:93:21:7c:5b:e9:e6:e8:ec:88:b0:5c:8f:62:29:
a5:92:da:a2:fb:e4:85:9d:97:eb:d6:54:5a:29:72:
0d:57:01:9e:ec:a7:f7:7f:bd:cb:44:33:39:3e:f3:
f9:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:74:FA:2F:E0:1E:A6:DB:54:AB:2E:2C:7A:78:94:FF:59:26:DE:17
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/WHT6L-AepttUqy4seniU_1km3hc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
56:5e:5b:c9:3d:5f:b1:54:e9:94:56:73:bc:0e:3c:6a:17:d0:
02:cf:28:43:fd:01:89:f9:8f:7d:36:74:2e:7d:3e:f5:0d:c8:
64:53:a3:24:57:18:51:9e:21:ee:a3:e0:f7:38:8e:1e:94:68:
f5:ad:f1:c8:ec:c8:cd:b5:e9:3e:e7:85:f0:9f:26:11:6f:2b:
03:b5:4c:45:a8:10:48:cb:86:be:ce:3b:e8:a0:f0:a3:86:10:
34:9d:44:74:8e:29:42:9e:50:97:e0:dd:ec:7e:b1:9f:12:2e:
3a:7b:2e:8a:5f:2b:7c:6d:dc:6c:33:9d:dd:1f:41:a3:fe:12:
10:c9:cd:24:fb:30:b2:43:6e:32:a4:18:1e:66:a6:f1:20:cd:
ef:77:3e:3e:a8:9f:da:e3:fc:08:36:af:fe:d3:6f:c8:97:74:
46:73:4c:20:85:dc:d5:05:81:f1:01:40:b0:19:01:9c:13:31:
4c:ab:76:42:b3:ac:81:c5:e6:c6:56:6d:a4:e4:ba:12:99:cb:
48:69:88:c0:1b:42:55:13:ea:d6:39:3b:f3:2a:da:03:ea:20:
45:1e:c3:51:54:e9:eb:a1:14:93:85:ac:6c:a8:3d:0f:77:94:
f6:86:3c:b7:d8:ac:fa:e7:14:b8:e2:db:82:26:3d:2b:78:d4:
c5:93:b2:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:35:00 2025 by rpki-client