Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/WNivQo_92mhii5ll947l5o31v74.roa
File: WNivQo_92mhii5ll947l5o31v74.roa (raw, json)
Hash identifier: eD7qs4iur1Boz9N0ykuPRYNsv06WjvcBEu2NU2p9IQU=
Subject key identifier: 58:D8:AF:42:8F:FD:DA:68:62:8B:99:65:F7:8E:E5:E6:8D:F5:BF:BE
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01878323D799A24478BB899A471E8B870735
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/WNivQo_92mhii5ll947l5o31v74.roa
Signing time: Sat 15 Apr 2023 04:19:36 +0000
ROA not before: Sat 15 Apr 2023 04:19:36 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:83:23:d7:99:a2:44:78:bb:89:9a:47:1e:8b:87:07:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 15 04:19:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=58d8af428ffdda68628b9965f78ee5e68df5bfbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:9e:94:e4:44:37:e1:1a:77:e4:43:88:37:70:
2a:04:43:2b:a3:2f:68:35:2b:b4:a8:df:29:ca:1a:
6b:77:58:a8:58:97:07:13:aa:33:6b:cf:64:4b:f6:
72:d2:bc:85:a3:b0:68:c7:d3:5f:6b:47:fe:56:7c:
27:b6:a3:ef:93:80:20:ba:36:b7:4b:97:f8:ec:62:
3a:83:c4:92:b3:9e:73:f4:12:78:a4:90:6e:17:96:
75:0d:47:de:91:4a:78:7d:fc:91:fb:8b:38:f8:ae:
cd:2d:23:03:b1:43:21:58:b1:58:f7:b2:1c:34:7f:
95:e1:52:91:54:8f:d6:bf:1b:12:61:14:b7:7d:ce:
b4:27:61:14:cd:9d:cd:7e:22:ea:ef:5b:6b:b4:25:
6b:1c:42:33:c8:ac:e0:c8:dd:69:06:10:f9:1d:35:
4a:eb:99:f5:0f:df:66:df:12:59:46:5a:93:23:42:
66:52:12:36:0a:dd:45:63:7e:e7:12:ae:31:6f:95:
63:57:34:58:02:f1:28:51:1c:80:11:11:4c:35:b3:
7f:f1:42:f8:0a:55:58:e7:16:e7:cf:c9:82:fc:32:
b8:84:3d:a8:7e:92:b6:62:fd:21:94:a0:e8:b4:38:
3f:8b:43:2a:74:e4:66:b9:9d:37:31:17:99:21:8f:
95:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:D8:AF:42:8F:FD:DA:68:62:8B:99:65:F7:8E:E5:E6:8D:F5:BF:BE
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/WNivQo_92mhii5ll947l5o31v74.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5e:7f:df:32:f0:46:c6:38:25:c0:68:fa:93:b5:28:bd:41:b1:
6c:6f:5a:81:94:90:62:89:ff:78:66:11:27:b5:34:17:63:78:
16:2c:23:ba:ff:1f:51:30:b6:19:1d:77:cc:31:02:d4:a9:e7:
a6:a1:c5:e6:ff:e6:8a:d0:b6:ca:1a:fa:42:f9:a2:51:a9:7a:
53:a5:7b:ae:6c:00:dc:35:6c:7f:d7:b6:b0:99:fd:76:4e:5f:
cd:f4:a1:94:a5:1d:d5:0c:dd:a2:6e:31:4d:6d:dc:dc:6e:44:
28:1a:2f:bf:4c:6d:0a:82:01:0b:51:cc:82:8c:76:3c:de:76:
13:5f:cd:43:b1:37:24:f1:4e:9f:80:eb:54:6d:f0:3d:35:09:
02:10:77:16:1b:7b:7b:db:dd:33:59:75:80:43:39:6e:3a:c9:
c5:69:e2:fd:78:c8:9a:2f:3b:69:4b:70:9a:fa:8e:67:bf:56:
1a:9d:f1:11:4f:bd:60:50:5a:bb:ed:0e:c4:49:b5:60:91:c3:
7a:9f:74:cf:9c:a0:54:52:4e:e0:0b:bb:e0:73:68:1e:64:d9:
16:e7:56:03:85:c4:e8:ff:50:64:05:49:61:87:f7:29:8b:20:
34:3d:c7:da:90:e9:0c:4b:92:7a:17:c8:01:6f:0f:02:3b:50:
1b:da:1c:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 18:42:03 2025 by rpki-client