Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/WOarFs3ubs0V5FCDRhS3o91epQ4.roa
File: WOarFs3ubs0V5FCDRhS3o91epQ4.roa (raw, json)
Hash identifier: wsBdJFMh8pFT+l3cQh2riIc0Kn+CtChXtFwvJeR2eY8=
Subject key identifier: 58:E6:AB:16:CD:EE:6E:CD:15:E4:50:83:46:14:B7:A3:DD:5E:A5:0E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018712AE52217BAC4058A428CCC10BBDA977
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/WOarFs3ubs0V5FCDRhS3o91epQ4.roa
Signing time: Fri 24 Mar 2023 08:13:46 +0000
ROA not before: Fri 24 Mar 2023 08:13:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:12:ae:52:21:7b:ac:40:58:a4:28:cc:c1:0b:bd:a9:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 24 08:13:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=58e6ab16cdee6ecd15e450834614b7a3dd5ea50e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:bf:59:fd:68:6d:af:ff:59:eb:c2:0f:84:d8:
2e:51:1f:f7:5e:10:64:42:8f:83:bf:26:3f:89:62:
20:05:91:d7:c1:db:3d:70:b2:6a:2d:f4:45:bd:eb:
71:d1:1a:fe:6f:bf:f9:df:8f:0a:0a:14:5d:eb:76:
9f:fd:58:91:ff:6b:80:91:f5:de:71:1a:0a:5b:ae:
c7:39:65:e4:44:fe:29:2e:10:f0:2b:4d:07:22:e1:
3f:98:e1:0f:0d:20:25:52:dd:66:b0:12:c5:3b:c8:
b6:14:89:ec:55:e2:38:24:4c:fd:79:0a:63:c0:9d:
19:7d:53:d8:52:2f:f2:6b:2c:e0:37:19:89:0f:8e:
2a:e8:d3:7b:ab:c8:b8:af:49:27:f4:fe:f9:5b:fc:
b9:f1:2c:bf:97:11:e6:31:93:87:94:ae:e7:84:f5:
81:e7:4c:52:ef:a4:7c:5e:7b:66:0a:4c:aa:a1:d1:
87:fb:13:b3:e3:c1:70:9d:cf:5a:5b:ae:c8:5f:0f:
37:56:0b:de:a1:59:10:4d:25:2c:39:fa:d3:82:48:
bd:60:e0:32:1f:f0:69:74:67:95:07:6c:83:d2:46:
b5:b0:63:30:66:fa:fa:45:e0:53:d0:b6:77:db:9d:
81:dc:5c:67:12:3b:08:7f:dd:1c:55:85:2b:26:d7:
8c:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:E6:AB:16:CD:EE:6E:CD:15:E4:50:83:46:14:B7:A3:DD:5E:A5:0E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/WOarFs3ubs0V5FCDRhS3o91epQ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9b:b1:84:49:fd:c4:46:8f:4c:a4:47:5a:b2:e5:62:42:2a:b6:
eb:38:3c:d1:5e:00:f8:c0:e1:06:aa:63:7d:44:c1:80:a3:b5:
7b:3f:9d:9c:09:b3:08:d3:e8:95:43:55:21:4f:cf:ff:ca:2c:
24:b3:4b:f4:55:92:f9:55:6d:09:9a:08:ef:71:aa:5e:cb:61:
60:32:20:e7:a9:c1:24:81:be:8b:19:1e:d8:63:ba:55:d3:4d:
b4:4d:68:b5:e8:72:22:a2:98:01:69:93:a6:30:48:6b:9a:6d:
ba:d8:2d:23:b5:23:83:5b:1e:2c:64:96:6a:28:2a:53:5e:b6:
c8:a3:81:8a:f0:f2:a7:f6:11:cb:0e:d6:29:cf:e2:3a:9b:81:
ee:00:77:e9:3f:09:eb:9e:d2:9e:01:dd:eb:63:bd:d7:d8:58:
e4:e9:88:40:a8:58:5e:66:ac:ec:65:26:5d:3d:7a:03:46:69:
c1:39:27:df:bb:bc:0b:75:be:78:da:05:56:f4:8d:ff:cb:11:
65:e9:8a:53:a7:53:3d:a6:b4:9e:1f:eb:1c:b3:43:b4:a1:dd:
d2:cb:f4:12:f2:0b:7a:71:21:2b:fe:bd:02:5d:ea:cd:59:43:
d0:6d:47:c2:4c:56:7a:ff:17:e9:6a:0c:0a:57:c6:2f:d3:7a:
82:6f:e6:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:33:24 2025 by rpki-client