Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/WV5LXxlPxgs-a95eFumGJ0Zp-1Q.roa
File: WV5LXxlPxgs-a95eFumGJ0Zp-1Q.roa (raw, json)
Hash identifier: TdgPQEyuD9zgoLAe4rBFSwFqo1kS98rfOlmDO1Jgspk=
Subject key identifier: 59:5E:4B:5F:19:4F:C6:0B:3E:6B:DE:5E:16:E9:86:27:46:69:FB:54
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018721076AA6F3B0378B51C24C6E5A49EC24
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/WV5LXxlPxgs-a95eFumGJ0Zp-1Q.roa
Signing time: Mon 27 Mar 2023 03:05:46 +0000
ROA not before: Mon 27 Mar 2023 03:05:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:187:2107:b93/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:21:07:6a:a6:f3:b0:37:8b:51:c2:4c:6e:5a:49:ec:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 27 03:05:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=595e4b5f194fc60b3e6bde5e16e986274669fb54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:6a:f4:a7:8a:13:02:37:1c:74:a5:8c:56:67:
34:e5:35:a2:86:ee:cf:a9:07:90:55:9d:c9:ef:6d:
c4:92:17:0b:0a:12:22:da:96:f1:97:9b:76:07:a9:
93:29:b6:06:83:1c:b1:43:49:4f:c3:c6:cc:e3:ec:
1f:14:4f:15:f9:f6:bf:1d:d9:aa:13:a5:e6:5d:b4:
1d:8f:30:7f:ce:75:cb:8f:dc:a5:f0:c6:97:b8:8d:
18:ef:83:33:02:5e:d1:dd:57:48:a9:7c:40:b0:e4:
71:3a:1c:38:b0:b1:db:27:64:90:ed:5d:e9:1e:14:
6a:dc:b5:9e:73:a0:bd:4a:7f:77:2e:ce:bf:73:c0:
10:e8:ae:d9:a3:d4:c3:bd:2e:fd:2b:3d:c6:87:1b:
c9:78:e8:06:45:98:a2:83:7a:5b:3f:2a:10:9f:6b:
b0:80:71:aa:2f:c0:7a:79:dd:46:b6:a1:2c:ee:82:
68:fe:03:f6:58:ee:94:a9:b8:45:75:92:f3:c4:51:
15:44:a8:82:f3:9c:9b:5d:a8:cb:2d:97:d8:7f:a2:
b1:46:93:8e:90:66:97:90:15:a9:29:33:9e:45:bb:
cc:d5:eb:d3:56:2b:ab:43:4a:a4:f7:36:5c:10:77:
79:f6:19:42:8b:f6:19:db:3f:25:00:54:a0:f8:3f:
c9:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:5E:4B:5F:19:4F:C6:0B:3E:6B:DE:5E:16:E9:86:27:46:69:FB:54
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/WV5LXxlPxgs-a95eFumGJ0Zp-1Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
11:73:5b:c4:68:57:82:b8:d0:d8:82:6f:c7:da:30:b0:55:6c:
6e:75:76:9a:32:5c:5e:b9:b7:90:e6:b8:71:45:9c:fb:86:ce:
53:0d:82:14:93:89:e5:b3:2f:c2:fa:c6:d0:c4:b8:a1:1b:c5:
98:a0:1e:80:d0:76:a2:5f:75:0c:86:f0:47:bf:6a:8a:9d:fd:
74:d3:79:ca:09:16:99:aa:a9:84:f0:7e:77:1d:20:8e:5a:d7:
bd:3d:09:b7:ae:c9:e6:d2:9a:ed:3c:06:79:d8:4a:fe:3f:f7:
69:e9:71:66:ec:c3:eb:8c:8d:6d:36:ee:93:e2:6e:d0:f8:e4:
e5:ad:71:5c:9b:87:6a:60:18:ce:22:33:97:d5:f6:82:df:e3:
cd:c9:c2:75:9c:5e:d5:ad:13:f5:9e:8a:ff:ec:0a:4a:61:9d:
e5:d0:c7:ce:9a:0c:42:18:20:da:51:ba:e3:dd:60:71:58:31:
19:ec:3b:de:3d:74:85:a4:b3:6a:c3:38:e9:57:e5:a0:63:3a:
33:a9:fa:fb:ae:34:b0:ed:d5:66:52:1a:4a:c8:d5:ba:11:c9:
59:3c:9b:d2:f8:71:82:73:41:39:1d:bc:69:c0:9d:90:2d:51:
f0:70:79:3e:2a:4f:8b:d8:66:07:3d:7b:ce:89:6a:0b:66:d0:
08:44:c3:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:40:51 2025 by rpki-client