Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/WNTYxB86vNaPVd4PpM4oGeg8l_4.roa
File: WNTYxB86vNaPVd4PpM4oGeg8l_4.roa (raw, json)
Hash identifier: bMm7kQiHd4WaJHLDRi/xq1VFoP16LlwQGofhhDzqrUM=
Subject key identifier: 58:D4:D8:C4:1F:3A:BC:D6:8F:55:DE:0F:A4:CE:28:19:E8:3C:97:FE
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018638718198027A55FD5E42F0F5B3BB83AB
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/WNTYxB86vNaPVd4PpM4oGeg8l_4.roa
Signing time: Thu 09 Feb 2023 23:10:08 +0000
ROA not before: Thu 09 Feb 2023 23:10:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:38:71:81:98:02:7a:55:fd:5e:42:f0:f5:b3:bb:83:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 9 23:10:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=58d4d8c41f3abcd68f55de0fa4ce2819e83c97fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:af:9d:ab:b6:f4:61:e0:ec:05:8a:a4:da:51:
10:48:46:70:e0:09:18:df:c1:94:e2:bb:26:3d:b6:
bc:51:49:60:b5:3f:c1:3f:b2:0a:60:f6:11:d9:70:
e5:d7:b5:39:5e:4b:5f:76:a2:a4:e8:c6:db:24:aa:
48:77:e3:af:1c:7b:4d:ed:bf:ab:5a:21:fd:d9:34:
51:e8:a4:0a:e5:93:04:b3:7c:59:9f:a1:ef:49:17:
6a:e9:9a:f5:37:3e:dc:d2:b6:f9:33:bf:d0:7d:10:
bb:13:7d:fe:3e:eb:a0:10:24:72:d5:6f:c3:61:fd:
a3:23:e6:0e:8c:d5:8e:cb:c3:38:31:fe:13:a1:1c:
70:fd:d0:9c:f4:9b:a8:6e:5e:c4:dc:34:ac:e9:78:
24:3d:c0:9c:45:8f:2f:66:c6:57:fb:e2:50:f2:b8:
03:3d:ba:d1:9c:2b:86:8f:44:8d:1b:b0:9b:c6:50:
4b:71:24:c8:5d:53:0d:12:c0:20:7b:30:97:3f:30:
ae:bd:6b:8a:a1:d1:fe:75:e2:5c:b7:74:92:1a:7d:
07:82:ef:ce:a5:20:69:9f:e0:6e:24:39:43:22:9c:
43:1e:d1:9b:52:72:b1:52:f1:81:19:90:d1:03:24:
ea:1b:57:b8:81:96:06:26:8e:a6:d1:dd:b7:d0:e3:
12:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:D4:D8:C4:1F:3A:BC:D6:8F:55:DE:0F:A4:CE:28:19:E8:3C:97:FE
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/WNTYxB86vNaPVd4PpM4oGeg8l_4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
91:13:43:59:ab:d3:6a:12:aa:69:9c:73:50:e2:62:7b:86:1c:
d4:52:32:00:4f:bf:de:58:04:f0:de:2e:a5:26:bb:90:bd:df:
37:50:ab:74:72:a6:dd:2f:59:12:81:f0:4e:f2:ec:ad:e2:a4:
5b:28:82:55:01:ce:04:c9:cb:a6:32:c2:ff:d0:a3:46:c6:75:
91:4c:47:1e:eb:88:ba:ac:f4:15:8a:ef:34:74:93:70:c7:00:
23:d5:54:ed:a5:30:1f:eb:73:79:b9:c6:63:ae:e4:7a:42:26:
80:31:a1:2c:78:2a:31:a9:b1:dc:52:7d:54:98:6b:46:3d:98:
d2:45:f9:43:bd:3e:56:81:f6:24:5c:0d:16:00:35:f1:07:99:
bb:2f:b4:da:24:ab:a1:aa:eb:e3:dd:a4:e0:c3:9b:b1:34:c3:
a0:d0:c9:58:23:d8:b9:97:25:18:bf:02:db:95:be:6c:1e:d4:
8f:86:00:a6:a7:b2:4b:23:fe:6b:97:8b:ab:68:0e:63:29:04:
2e:5e:a9:ed:21:cb:93:74:84:d9:b9:82:d3:dd:7a:15:d9:83:
12:c6:7e:4b:39:27:19:04:cb:0a:b3:0a:5b:01:8e:e9:f0:80:
43:0c:1a:41:10:7f:90:6b:d8:57:74:5b:3b:73:82:a7:9a:6c:
f3:03:5e:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 00:07:59 2025 by rpki-client