Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/WM_TyDD_0eajCVzA9Vb1QD5625A.roa
File: WM_TyDD_0eajCVzA9Vb1QD5625A.roa (raw, json)
Hash identifier: hO1JaSvY5AIqP22gyu377B9SnpCDxq1fQjTYkiSZm/I=
Subject key identifier: 58:CF:D3:C8:30:FF:D1:E6:A3:09:5C:C0:F5:56:F5:40:3E:7A:DB:90
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187F769E74CCC03EDE64ABF70C6AF11030F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/WM_TyDD_0eajCVzA9Vb1QD5625A.roa
Signing time: Sun 07 May 2023 18:12:05 +0000
ROA not before: Sun 07 May 2023 18:12:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:f7:69:e7:4c:cc:03:ed:e6:4a:bf:70:c6:af:11:03:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 7 18:12:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=58cfd3c830ffd1e6a3095cc0f556f5403e7adb90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:91:8e:18:cf:7b:3b:8a:05:79:f3:cd:20:8b:
7e:2e:62:9a:81:28:7e:62:b4:af:01:7e:aa:9d:47:
a9:f3:b3:a2:7a:9f:56:32:9b:2e:96:5f:42:f7:3a:
c5:07:78:cb:a7:cf:03:a5:b4:9c:9b:32:e4:56:dd:
32:d7:bd:ff:9a:66:a8:f7:c3:b6:c1:97:75:5f:4d:
e5:60:2b:36:ac:25:83:bc:1b:5b:18:bc:06:44:5b:
5c:7b:31:6d:ae:d2:45:01:cf:38:8b:3e:5d:0f:24:
f4:2b:e0:4d:d7:78:e9:87:6e:b8:77:bf:7a:10:48:
ea:3c:c7:23:45:a4:ff:b2:4e:4f:d7:1d:e4:56:5c:
ba:73:49:c0:36:9c:e2:a7:d3:74:bb:7b:99:6b:15:
c6:23:f1:73:33:f5:d4:30:44:7a:b6:ca:ea:bb:3a:
f5:f9:d5:fe:ec:42:84:65:d5:18:1a:c6:76:c7:36:
c1:6c:3e:03:16:6c:97:a4:57:2e:42:f8:ac:53:bf:
da:b7:a1:46:e6:65:7c:ad:b7:ce:70:36:1a:46:ff:
ce:49:74:1f:bb:b7:87:6b:15:b5:55:50:d1:00:bc:
f8:be:03:d9:f2:7b:36:46:6a:7e:97:4a:f9:9b:47:
ea:1c:26:27:37:37:d5:5a:a0:c8:dd:5a:8d:63:db:
a5:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:CF:D3:C8:30:FF:D1:E6:A3:09:5C:C0:F5:56:F5:40:3E:7A:DB:90
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/WM_TyDD_0eajCVzA9Vb1QD5625A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
05:81:33:5e:19:a8:d6:84:c2:4b:96:ad:20:73:c5:45:35:ee:
60:d5:5b:92:88:42:52:14:71:0a:0b:ad:04:09:7b:b0:1f:42:
b8:d6:4e:a8:c4:b4:17:df:fb:14:a1:d9:86:3a:ea:f4:76:ab:
7e:0c:68:55:e5:84:f4:14:50:75:d8:8f:96:0e:23:10:ff:a5:
71:58:b0:03:6f:7c:47:cb:cb:96:33:1f:c3:fd:73:a2:a4:20:
6f:6c:d2:13:cc:1b:07:c6:4e:0a:ff:09:ed:66:0b:c1:5b:e9:
0d:f3:f8:ae:db:65:e4:8a:4c:db:4e:24:7b:55:22:19:9c:88:
71:b4:d7:a3:a0:ff:9d:4d:3e:b0:0c:80:46:34:94:ca:b5:0e:
45:42:5a:2e:07:d3:a6:83:35:9c:2f:50:1d:fe:31:70:77:e7:
7c:d6:0d:83:c0:f0:99:d8:2d:9f:ee:09:d8:d7:44:24:46:c6:
5f:0a:11:d7:b9:89:f0:1a:24:5f:c3:ad:0f:31:71:0f:61:a5:
e4:7a:b4:bd:17:05:25:7f:66:b8:d1:7f:fb:f3:87:86:a3:f8:
4e:1d:73:36:48:f1:ef:56:60:d9:c6:43:28:25:13:00:a6:7c:
b1:78:ff:78:64:e1:8d:f6:67:3e:69:27:4f:9b:d7:9e:f9:d6:
b4:02:32:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 14:28:35 2025 by rpki-client