Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/WXu_ZgmK4YRxjcO-2aZvsQGZLoE.roa
File: WXu_ZgmK4YRxjcO-2aZvsQGZLoE.roa (raw, json)
Hash identifier: XdsugwFJ+lKVgur+hk8bXNRY+FX0EZavqiA1OxAa7k0=
Subject key identifier: 59:7B:BF:66:09:8A:E1:84:71:8D:C3:BE:D9:A6:6F:B1:01:99:2E:81
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186EBD84FA8EDDA448886E9C01A0F681335
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/WXu_ZgmK4YRxjcO-2aZvsQGZLoE.roa
Signing time: Thu 16 Mar 2023 19:14:27 +0000
ROA not before: Thu 16 Mar 2023 19:14:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:eb:d8:4f:a8:ed:da:44:88:86:e9:c0:1a:0f:68:13:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 16 19:14:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=597bbf66098ae184718dc3bed9a66fb101992e81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:37:5f:6e:ba:3f:e9:0f:cd:fe:bc:40:b2:16:
3f:e0:c4:7d:d3:ca:c5:fa:d0:dc:58:33:5a:6d:07:
2b:5f:fb:16:b0:fd:f8:a8:3f:b5:39:95:71:e5:65:
f4:66:e8:48:37:f8:d1:3c:91:9b:3e:32:03:0f:4d:
a8:12:24:99:de:fb:8f:ff:47:05:21:dd:91:c9:7b:
33:7b:5b:ac:16:42:cc:86:21:b5:d7:ff:40:58:26:
56:95:d7:05:b0:5b:5f:c7:37:21:31:95:91:70:ed:
ee:12:5a:5e:1e:8e:8a:47:85:e1:0c:c3:ac:04:e9:
5e:57:18:fe:87:ea:23:44:ac:86:13:b3:fa:42:a2:
02:4f:e4:4d:44:71:db:f8:d6:6f:28:0a:dd:17:74:
ae:ec:91:6f:7b:21:45:4f:dd:3b:56:52:f3:01:6f:
76:f2:70:65:95:70:1c:bd:a0:67:a6:f0:2f:18:91:
56:ef:e3:31:13:8d:f0:bc:9c:cf:12:27:b2:db:4d:
3c:8d:93:4b:c3:46:40:43:c8:e9:96:e8:a9:bb:24:
ca:63:75:42:4c:76:ea:f6:3e:b3:2a:f8:32:1f:0c:
ac:b6:2f:27:16:25:11:ec:c6:8a:15:c1:0d:00:6c:
a0:19:0e:41:01:f0:73:ad:cc:a2:93:50:3a:a9:5e:
ad:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:7B:BF:66:09:8A:E1:84:71:8D:C3:BE:D9:A6:6F:B1:01:99:2E:81
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/WXu_ZgmK4YRxjcO-2aZvsQGZLoE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
23:9f:2b:72:0d:90:6b:c1:f6:a2:62:f5:99:54:99:d2:c8:1b:
73:83:48:4f:c6:a0:71:df:e5:f9:06:28:29:c0:7e:b8:3a:93:
fa:bc:38:23:e3:14:03:07:03:4d:14:7f:83:1f:2f:e7:da:2f:
13:dc:d7:3b:f2:40:46:58:fe:84:d0:e5:27:0c:3a:62:3e:ee:
9d:e7:01:0a:fb:52:57:e7:cc:5c:0e:9e:3a:b8:4c:73:25:d8:
22:83:b4:99:88:a3:65:01:0b:59:86:e7:dc:cf:93:32:79:45:
c2:8e:aa:f8:59:ab:75:50:82:a1:96:f5:8e:51:b9:fc:d5:af:
ee:70:db:c7:4f:ba:da:c0:82:ba:75:50:e7:f2:c0:03:6e:f1:
f1:fa:f7:73:82:e3:ff:51:71:aa:e6:8e:ec:1d:6e:7e:2a:87:
77:6d:33:24:95:17:29:f3:d7:49:3c:7b:3e:b6:2b:57:c4:ba:
58:ac:31:f7:44:2a:32:9f:74:6b:f9:4f:2d:92:1c:8a:54:6c:
7a:87:8e:cd:8b:c8:96:3c:d9:ca:eb:ed:18:e8:62:8f:f7:08:
fc:a5:e7:7e:38:91:cc:55:bb:60:db:d8:b7:c9:48:7e:4a:ce:
86:33:2d:99:53:11:7c:fe:2f:87:64:56:42:a7:ec:45:2a:44:
8f:ba:7f:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 01:18:22 2025 by rpki-client