Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/WPnm-FSErNkxaC-4NeR2IHV8j2Q.roa
File: WPnm-FSErNkxaC-4NeR2IHV8j2Q.roa (raw, json)
Hash identifier: NnsDXvV15sNvy/arxQdYkAbUWiXIR+rEwM8LbenW76c=
Subject key identifier: 58:F9:E6:F8:54:84:AC:D9:31:68:2F:B8:35:E4:76:20:75:7C:8F:64
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186A0482C7FC6A52A73697FA087FFF6EDC2
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/WPnm-FSErNkxaC-4NeR2IHV8j2Q.roa
Signing time: Thu 02 Mar 2023 03:05:29 +0000
ROA not before: Thu 02 Mar 2023 03:05:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:a047:fb99/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:a0:48:2c:7f:c6:a5:2a:73:69:7f:a0:87:ff:f6:ed:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 2 03:05:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=58f9e6f85484acd931682fb835e47620757c8f64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:0c:48:c5:f1:de:f7:47:c5:d3:17:34:4f:47:
cc:a4:00:76:b9:a6:e7:e8:36:14:42:1e:48:4e:72:
a5:fa:d0:e2:a4:e0:df:7b:e8:22:9d:d0:50:cb:36:
9f:6a:c1:b0:f7:4f:6b:61:aa:e9:55:34:87:ea:2f:
b8:78:1d:25:17:c7:fb:ff:9a:79:1d:1f:b0:32:1d:
a9:c3:86:70:c5:f0:78:a4:0e:fa:20:d1:4d:d5:0d:
f5:f6:27:ac:98:eb:ee:99:14:f7:1b:fb:2d:f4:b7:
75:eb:c8:56:df:46:cc:41:95:36:4a:b6:1f:46:ec:
e0:78:c0:79:1a:0f:c3:fe:4a:a3:09:89:e4:7c:85:
5f:59:8f:55:71:96:67:cf:4d:80:93:a3:3f:60:79:
4d:b8:6f:00:16:42:8d:27:05:fa:c5:4c:37:d0:99:
4e:43:9a:1c:25:80:68:17:64:50:b8:ae:30:66:2a:
fa:f2:8c:4f:93:1a:d7:9a:72:48:bb:8b:93:64:3f:
d5:4a:b7:f6:da:8d:8d:56:f9:ae:ae:89:40:5f:4f:
12:fa:90:8e:36:31:53:de:58:fc:3d:4b:87:b7:d5:
a0:58:3d:2c:43:9c:cb:e4:93:16:de:52:ff:0f:ef:
9e:22:80:72:db:29:3f:f4:56:20:e5:85:83:c1:cb:
b0:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:F9:E6:F8:54:84:AC:D9:31:68:2F:B8:35:E4:76:20:75:7C:8F:64
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/WPnm-FSErNkxaC-4NeR2IHV8j2Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a7:0f:60:34:e6:f7:16:42:b6:f0:4f:19:45:14:66:43:42:89:
a5:52:26:dd:8b:83:99:b9:9c:95:e7:68:48:5b:70:93:e6:ad:
6b:d0:37:5c:8c:0d:ab:80:dc:cc:e6:b3:3f:0f:44:f3:f0:6b:
74:ab:20:18:af:c0:b3:d0:d9:5a:7b:68:a2:c3:38:d8:48:c3:
52:c3:36:c8:a1:dd:54:1a:eb:7e:72:a9:d5:03:f3:03:89:de:
03:1d:f8:92:69:c3:f8:b7:5c:a3:f5:10:5d:e2:a2:f1:b0:40:
23:9e:d2:92:ce:f4:c0:f4:42:79:be:ff:63:a1:16:5d:86:04:
54:88:bf:57:b4:f5:d8:87:6f:85:f1:c1:27:91:2f:30:bc:4f:
29:0f:60:ab:ad:7d:96:89:b5:bc:57:c9:4c:4e:94:25:62:f5:
d1:95:c5:f9:7e:a6:e2:20:63:5d:77:9f:b5:71:33:56:25:c2:
03:4f:d1:82:54:f6:b7:cf:3b:3f:28:25:4d:6a:c1:59:89:fd:
c6:69:02:8d:0e:e0:e2:1e:29:23:82:2b:cd:26:87:e1:63:8a:
89:af:65:46:56:56:0a:7e:c9:36:b8:8b:7b:fc:b0:6e:a3:95:
92:c1:48:04:37:ac:23:7a:30:14:97:d4:c4:af:d7:f3:bf:0f:
02:a5:f3:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:42:43 2025 by rpki-client