Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/WPYGODcYbbIOWhfFjT7oShXaNS4.roa
File: WPYGODcYbbIOWhfFjT7oShXaNS4.roa (raw, json)
Hash identifier: a8eZVnmZSIHXk4CT1cX3FJ7PM4ZO/Kzis6eaweF5b8I=
Subject key identifier: 58:F6:06:38:37:18:6D:B2:0E:5A:17:C5:8D:3E:E8:4A:15:DA:35:2E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01883BA4A10F15B3D89CF5BA6DADC3B7FA7F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/WPYGODcYbbIOWhfFjT7oShXaNS4.roa
Signing time: Sun 21 May 2023 00:10:24 +0000
ROA not before: Sun 21 May 2023 00:10:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:3b:a4:a1:0f:15:b3:d8:9c:f5:ba:6d:ad:c3:b7:fa:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 21 00:10:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=58f6063837186db20e5a17c58d3ee84a15da352e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d7:5d:44:c1:7c:d7:c0:62:f9:86:a5:17:77:
ed:71:bf:c4:31:94:ed:0a:f2:39:4f:1a:60:e7:ea:
78:1a:e7:0a:cd:5a:eb:da:53:81:27:8a:48:7e:bd:
5e:00:f9:34:6d:1e:e1:e2:b4:c4:f6:1e:ca:5c:a1:
f7:cd:aa:1c:03:5b:f2:37:c1:4a:91:6d:e3:ba:a5:
39:6f:17:4b:08:91:90:1c:3b:05:36:c3:5e:3f:de:
26:06:ab:cf:81:53:d6:b1:a0:fd:a8:d8:b6:17:04:
e4:79:42:9b:8d:9e:9c:1d:bb:0d:04:37:94:30:fe:
bd:73:81:65:da:f8:52:7b:3d:3a:96:e3:47:2c:25:
4f:75:d1:ad:28:d0:7c:02:81:67:9c:5f:85:0c:4d:
48:cc:fb:cc:46:a0:0f:06:e1:fa:87:28:d5:c2:61:
ca:b0:e4:89:79:c1:a9:13:04:bf:8e:b4:d2:96:5b:
5a:59:cf:39:ef:d5:fc:74:12:e8:56:e5:e8:03:a7:
79:92:0f:28:4f:09:ef:89:89:3d:fc:64:f6:e0:5d:
6d:d0:bd:a5:12:8c:8b:1c:7b:80:46:ab:23:db:f3:
a8:2f:ac:61:1b:78:b5:5f:b1:91:48:5c:f1:da:06:
fc:4f:c8:1f:6d:42:e0:28:a2:6d:97:7b:ee:77:c7:
84:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:F6:06:38:37:18:6D:B2:0E:5A:17:C5:8D:3E:E8:4A:15:DA:35:2E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/WPYGODcYbbIOWhfFjT7oShXaNS4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3a:f9:1f:5e:13:ca:7c:f4:a8:44:83:cf:d4:11:ca:d5:f8:ba:
1e:37:da:c3:6e:30:d5:6c:44:5a:18:e7:9e:c1:29:16:1c:39:
02:e6:8d:73:51:d2:6c:d1:5c:ab:77:39:b6:37:d4:ce:10:a2:
58:02:dc:dc:d8:81:88:74:30:c3:78:de:0b:1f:07:2e:e9:2a:
78:66:04:83:cc:07:21:54:c6:c9:ae:66:79:52:16:28:13:8a:
d0:30:3a:46:de:88:45:51:63:84:d4:a4:17:20:2d:8e:2b:e7:
be:7c:3a:fe:58:2c:9c:7d:3a:0b:e4:52:e0:4d:bd:d6:74:96:
c4:fb:a1:e8:a6:14:3b:83:e1:66:8c:57:33:3d:32:e9:5a:ab:
8a:4a:56:8a:55:aa:ce:3a:24:ab:ac:e5:c4:96:38:e6:09:96:
8f:ab:9e:2c:5a:54:19:18:c0:b5:b2:09:75:a7:a5:0b:59:66:
d5:5a:c7:8a:c7:35:5f:0f:93:5c:26:7b:3d:47:1b:48:59:47:
50:9c:fc:be:1c:37:7a:cc:da:6d:25:4e:63:fe:ed:81:82:49:
e5:b7:82:fd:ff:8a:5a:6e:70:33:54:92:b0:7b:1c:bb:fe:80:
e5:d9:53:3b:43:64:7f:f9:74:2f:40:f9:15:7b:10:80:18:df:
80:ac:80:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 22:02:55 2025 by rpki-client