Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/WLarAEgFtyxwhnGoHfg7AsDKcMQ.roa
File: WLarAEgFtyxwhnGoHfg7AsDKcMQ.roa (raw, json)
Hash identifier: /HnSAzw+GZmAxmiJFTOFXmIYB/PMMuA7r4sijD99bB0=
Subject key identifier: 58:B6:AB:00:48:05:B7:2C:70:86:71:A8:1D:F8:3B:02:C0:CA:70:C4
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188A4FFDEF5AEABD24B3450FC53B34B5B62
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/WLarAEgFtyxwhnGoHfg7AsDKcMQ.roa
Signing time: Sat 10 Jun 2023 11:10:12 +0000
ROA not before: Sat 10 Jun 2023 11:10:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:a4:ff:de:f5:ae:ab:d2:4b:34:50:fc:53:b3:4b:5b:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 10 11:10:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=58b6ab004805b72c708671a81df83b02c0ca70c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b0:ca:28:7d:c8:e3:f1:ed:9f:31:86:70:a9:
90:53:7e:dd:c7:0c:0e:6a:1b:c7:a6:18:04:93:28:
1c:50:fa:7a:5c:f5:1f:e6:63:a9:26:16:49:54:99:
5d:c1:e9:9a:8f:8b:96:50:e3:9d:83:d0:52:bd:c0:
9f:ac:53:09:6a:0b:0e:5a:bb:6b:3e:98:f9:6d:bc:
30:9d:b6:e9:60:d4:eb:6d:10:5f:7f:5a:6f:90:76:
dc:16:15:63:3d:a4:84:35:db:e9:1e:3c:fe:ac:68:
af:68:d0:54:95:a4:4f:31:8a:7c:0d:f8:45:85:80:
0d:d2:52:bc:d2:79:b6:ef:1b:bb:95:6c:9b:ca:d5:
a1:52:94:6b:f8:f8:36:78:cf:90:1d:07:dc:25:95:
f8:6e:18:1c:ce:e5:76:2b:61:90:bb:53:d3:3a:4f:
a7:24:3f:1c:d7:f4:b6:a5:66:5f:dc:0a:7d:2c:d9:
d9:1d:07:89:c0:8e:f2:df:59:3c:60:6a:ff:5f:6a:
1f:de:58:0f:a1:ef:70:0e:a8:54:d3:2e:20:45:64:
15:ef:51:90:be:71:22:21:98:a7:74:65:c6:36:ce:
10:18:c8:5d:e7:ea:db:5a:68:7c:4f:69:3e:37:07:
4e:9a:12:77:cf:51:f1:f9:f7:d1:4e:e4:e6:b2:df:
dc:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:B6:AB:00:48:05:B7:2C:70:86:71:A8:1D:F8:3B:02:C0:CA:70:C4
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/WLarAEgFtyxwhnGoHfg7AsDKcMQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
ac:ba:76:33:bc:96:aa:43:39:c5:52:26:28:f9:77:f9:77:fd:
fe:8c:e3:36:78:ec:c9:03:3c:4a:33:68:79:31:57:41:72:69:
5a:fb:a4:d8:02:ba:90:b7:14:df:83:4a:f3:6c:81:f4:cd:4c:
00:2f:03:e0:1a:1b:84:67:62:a9:a9:25:7d:59:cf:3a:c3:65:
6b:e4:e0:e1:3a:30:4b:2f:2e:51:29:bc:ba:21:88:d1:71:21:
e2:da:83:42:04:c5:28:5b:73:66:10:d5:1e:f4:88:f4:b1:5b:
1c:dd:2d:19:19:d1:a5:6e:51:1e:32:57:d1:9c:80:ff:89:3a:
35:c4:c8:a6:b7:97:96:ef:96:21:98:6d:c6:9d:3f:48:49:4f:
0e:09:fb:9c:2b:cf:26:c7:1f:78:cc:2b:c3:6a:75:1f:58:54:
58:da:10:f7:f2:ee:b2:04:78:6c:53:46:0b:b5:17:1e:ec:65:
71:ea:fe:11:55:1f:36:6a:11:e5:c6:c6:92:d4:ab:58:72:46:
f2:55:a5:25:75:5e:20:8d:9d:6b:b7:39:77:4b:5b:fc:64:9a:
bd:58:f7:cb:86:99:49:fb:5b:20:73:d1:b1:bb:18:f9:a8:78:
e2:a5:dc:6d:58:a2:3e:7a:d8:53:35:d7:4a:12:e3:56:dc:6f:
f6:32:08:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 15:29:36 2025 by rpki-client