Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/WQ0IZ7vBc-6z_GMSTSaPGdGnxNA.roa
File: WQ0IZ7vBc-6z_GMSTSaPGdGnxNA.roa (raw, json)
Hash identifier: udtpJbfpass2kDi52qtiSg/62Xb1EcDovseYQWHT8gY=
Subject key identifier: 59:0D:08:67:BB:C1:73:EE:B3:FC:63:12:4D:26:8F:19:D1:A7:C4:D0
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018648FAEB66603FCF1BE1D9E3768DD5CF33
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/WQ0IZ7vBc-6z_GMSTSaPGdGnxNA.roa
Signing time: Mon 13 Feb 2023 04:14:09 +0000
ROA not before: Mon 13 Feb 2023 04:14:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:48:fa:eb:66:60:3f:cf:1b:e1:d9:e3:76:8d:d5:cf:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 13 04:14:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=590d0867bbc173eeb3fc63124d268f19d1a7c4d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:4c:f1:aa:ed:df:81:dc:96:a4:76:d2:5b:e4:
d6:09:8b:7c:d8:06:44:92:89:08:73:80:dc:23:9b:
9c:59:a1:bc:8b:bb:be:d0:dc:0c:9e:26:db:8f:be:
09:fd:3d:49:58:86:bf:2a:85:35:1b:44:4d:61:4c:
27:b4:4d:0b:cd:d7:21:44:bc:c7:2f:79:fc:57:43:
00:fc:5b:13:9a:54:f8:87:8a:5f:9e:10:54:fb:d2:
b9:cd:9f:59:85:39:02:01:06:9c:a1:2a:50:84:44:
ee:5f:3d:08:4b:84:8c:73:70:97:89:79:dd:41:fa:
2d:28:81:39:ae:f1:c9:25:65:b9:63:cd:81:d0:45:
d3:f1:f6:95:8f:51:9a:f5:c8:80:13:86:58:b4:d6:
f7:bc:ee:92:78:53:f3:b6:fc:46:84:48:a1:55:21:
16:52:b1:d8:b8:6e:a9:f3:07:8d:1d:6c:81:1d:ad:
db:d1:4b:17:1c:c5:37:b1:23:80:7f:4a:0a:56:34:
e2:44:ed:36:1a:88:6f:49:83:66:5b:c7:21:77:d9:
ea:54:66:57:c6:63:1f:f6:aa:56:d5:d9:3c:22:56:
e9:fb:5b:e0:e7:eb:bd:bb:af:e3:e2:90:90:ef:48:
e7:3d:7e:9e:72:a8:dd:8f:ce:bb:37:7e:db:4e:89:
0a:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:0D:08:67:BB:C1:73:EE:B3:FC:63:12:4D:26:8F:19:D1:A7:C4:D0
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/WQ0IZ7vBc-6z_GMSTSaPGdGnxNA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
23:52:bb:4c:72:8c:93:db:8e:bd:1c:87:6b:c1:a6:5d:e8:ab:
82:e2:59:cb:28:63:bb:b8:d0:3b:84:81:71:c8:05:43:81:36:
23:b0:4b:f6:f9:34:95:66:63:71:fc:23:b1:d5:f7:3d:41:01:
fb:21:b9:cf:06:43:80:75:8d:40:7d:71:50:ed:d4:7a:be:9c:
39:ae:68:d0:0a:9b:4f:8b:cf:55:89:3f:7a:4f:df:c4:af:05:
ef:20:58:7a:74:b8:31:63:76:65:4c:34:a9:28:39:1f:36:ed:
ec:c7:65:66:7d:5a:d0:3e:20:59:4b:63:c1:3e:ac:55:46:58:
86:90:98:20:a4:46:da:76:ec:0c:b6:46:cf:b3:88:0b:4d:f9:
81:67:ec:51:59:b8:55:4c:9c:54:cd:0c:fd:58:92:82:c2:3f:
d0:31:2c:c5:bc:bf:64:85:53:85:66:5a:08:d8:b8:d2:07:11:
2a:2c:04:65:95:5e:63:bd:f4:b0:c4:8d:8a:0b:2b:f1:98:15:
dd:f5:e1:29:44:c9:1c:93:c1:f9:cb:db:59:66:5c:6a:39:82:
6d:1f:c4:3a:dc:af:5f:27:84:84:9e:06:78:e6:f5:c8:82:34:
95:11:76:87:49:75:15:df:86:68:b1:9a:89:e9:45:94:60:d7:
f0:ea:a3:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:34:42 2025 by rpki-client