Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/WQi2Fo2tKk86Yad6rklUKtn3L6o.roa
File: WQi2Fo2tKk86Yad6rklUKtn3L6o.roa (raw, json)
Hash identifier: 0M84RgMqukzkZyweWKqcQdcyDeRI4hPZlzG3NaWqMjc=
Subject key identifier: 59:08:B6:16:8D:AD:2A:4F:3A:61:A7:7A:AE:49:54:2A:D9:F7:2F:AA
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018950E4631786F294EFD63A90A7CDDF3212
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/WQi2Fo2tKk86Yad6rklUKtn3L6o.roa
Signing time: Thu 13 Jul 2023 20:14:52 +0000
ROA not before: Thu 13 Jul 2023 20:14:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:50:e4:63:17:86:f2:94:ef:d6:3a:90:a7:cd:df:32:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 13 20:14:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5908b6168dad2a4f3a61a77aae49542ad9f72faa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:a9:d8:03:cc:7e:a8:52:bf:be:49:ea:f5:0f:
e0:5c:bd:e2:80:7a:7b:02:ed:09:8e:28:a0:45:33:
e9:63:68:30:fe:19:ea:af:76:08:6c:2d:04:21:14:
7a:d7:72:c9:ec:1a:22:ee:7c:34:e5:a9:92:9b:1d:
d8:ea:78:d4:29:2b:17:5b:3c:c0:6e:97:fc:b5:ad:
33:cc:38:b6:e6:e2:0e:a8:20:ef:51:48:81:e8:d9:
13:bd:c3:3f:36:99:4d:d8:b0:9d:2a:84:e4:f4:59:
c4:bf:f4:37:8f:60:bd:b5:4e:42:18:66:8a:32:26:
76:57:e0:e5:72:9f:d6:8a:b3:3e:a7:84:cf:14:10:
32:12:e2:60:a8:17:32:71:cb:2b:21:2c:73:ca:1f:
24:46:55:36:6a:ca:09:57:03:12:89:b4:b1:81:29:
3d:72:47:43:09:25:86:b6:3a:1e:e6:99:8a:a5:ab:
ca:3a:ee:3f:0c:f1:34:5e:6a:1a:2d:53:21:6f:52:
98:1a:4c:e4:fc:91:c8:6f:36:d8:a9:9a:45:dc:24:
9d:69:e9:99:10:c0:b8:cb:58:11:ba:66:6c:44:ef:
44:24:d9:70:a8:17:4b:f3:1f:41:35:f8:bf:de:03:
27:c7:da:aa:b9:c2:d1:78:a8:a9:57:45:16:d5:81:
d0:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:08:B6:16:8D:AD:2A:4F:3A:61:A7:7A:AE:49:54:2A:D9:F7:2F:AA
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/WQi2Fo2tKk86Yad6rklUKtn3L6o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
39:cc:1a:97:5b:ae:30:55:a3:e6:cc:a3:41:be:64:f4:df:1b:
6d:62:fa:b1:8a:d0:0a:6c:c7:8d:14:6a:e3:1d:0d:02:2e:a3:
50:f3:76:49:9a:f1:38:0a:96:bb:e2:6c:fa:f6:49:f1:58:55:
12:28:3d:c4:5a:d7:60:fb:7d:7f:b7:f0:c1:4e:97:8c:bc:3d:
9a:e5:0c:da:2f:fc:51:5f:f0:f4:02:a6:87:c4:c6:eb:67:5e:
47:a9:91:ad:ef:f3:24:df:ae:a3:76:81:88:45:02:51:7f:2f:
b0:77:23:99:cd:b6:36:86:dd:7e:1a:d8:fe:a1:a7:05:c0:a4:
e4:8d:ea:b2:2a:71:9d:5c:ec:4e:3b:75:18:33:c4:8c:56:45:
31:99:71:b3:99:6f:5d:5f:2f:87:c6:e6:a8:00:f2:25:99:af:
9f:04:fb:ee:30:a8:5a:88:20:b6:dc:b1:eb:5c:35:bc:2f:0a:
a5:d9:6c:dd:b6:85:49:a9:cf:f3:6a:f6:12:b4:dc:66:8e:24:
9b:50:01:a6:25:d1:ee:1b:69:ce:0a:1a:42:26:d1:d2:cd:22:
ee:fa:50:85:29:f1:7c:f5:90:a7:af:35:f3:9f:9d:c2:f0:71:
2a:f9:3f:60:f2:e0:7a:6b:c7:e4:1d:79:ef:d1:d0:d8:69:58:
d3:71:11:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 03:23:19 2025 by rpki-client