Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/WYu1o43FsuUPNx7nqYU_m6A-jd0.roa
File: WYu1o43FsuUPNx7nqYU_m6A-jd0.roa (raw, json)
Hash identifier: goipxVqDIRIadSf/1spKGMzM0kmZeqVTRwHmFLN98Lw=
Subject key identifier: 59:8B:B5:A3:8D:C5:B2:E5:0F:37:1E:E7:A9:85:3F:9B:A0:3E:8D:DD
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189D134AF293E37A6F3CD4E4A18A790A299
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/WYu1o43FsuUPNx7nqYU_m6A-jd0.roa
Signing time: Mon 07 Aug 2023 18:13:58 +0000
ROA not before: Mon 07 Aug 2023 18:13:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:d1:34:af:29:3e:37:a6:f3:cd:4e:4a:18:a7:90:a2:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 7 18:13:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=598bb5a38dc5b2e50f371ee7a9853f9ba03e8ddd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:ea:df:32:81:be:b2:56:20:58:b9:bd:51:16:
80:22:36:55:f1:45:8b:22:54:93:49:d4:df:52:c2:
97:32:01:3b:a1:44:6c:38:63:f9:d6:d1:93:97:96:
75:2a:9e:55:7e:cd:35:86:22:50:76:71:9b:b7:cb:
f5:43:33:63:fc:59:fd:63:b1:12:fe:88:47:8a:6e:
45:b3:ea:c1:96:59:c1:e9:04:32:6f:2c:16:6f:c0:
a4:09:61:b9:4e:7e:d5:ef:2f:61:74:27:32:aa:85:
b8:7b:58:16:11:da:ae:98:e7:4a:4e:af:61:88:53:
f9:3b:6e:bb:0c:25:14:e7:b2:08:4f:92:a3:6c:d7:
05:51:ad:cc:d9:48:24:fa:13:cb:66:06:b1:7a:b8:
86:c8:d0:a1:d7:51:70:92:bb:4d:07:fd:30:87:7c:
fd:22:8d:d3:97:50:69:d5:f1:1c:9a:85:b9:d1:99:
10:7c:2e:c7:eb:b9:17:1b:a8:93:e1:53:18:af:50:
19:53:07:eb:29:2f:d9:1d:79:c7:06:17:05:44:38:
5f:47:a4:e5:cb:44:4d:eb:19:0e:cf:ad:10:b6:8b:
89:44:8d:fb:bb:73:2c:4d:5e:f1:52:9c:3c:55:5c:
e7:1c:1e:c6:ab:c1:f2:5e:8b:e0:6f:d1:92:28:71:
7a:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:8B:B5:A3:8D:C5:B2:E5:0F:37:1E:E7:A9:85:3F:9B:A0:3E:8D:DD
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/WYu1o43FsuUPNx7nqYU_m6A-jd0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
68:65:83:74:37:74:7b:ff:ca:64:b6:c1:97:af:4c:ff:1c:45:
2a:d6:0c:e6:05:6a:ce:d4:81:6c:17:8e:3d:d2:d4:03:50:d0:
1c:a2:25:f1:23:59:d1:78:82:64:3f:17:40:d3:21:73:51:f1:
61:f1:d4:d2:30:d1:82:ba:33:17:6c:66:d8:e6:ca:c2:df:ba:
f6:e5:9f:51:db:e2:af:7c:85:8f:95:2c:be:76:4e:46:cc:7e:
c0:b8:39:05:a2:ea:50:c0:e7:ec:77:6d:c2:bf:9a:dd:26:28:
4a:51:97:32:c1:3c:01:1a:dd:b1:dd:83:6c:38:45:dc:89:53:
04:de:c9:77:54:6d:73:d3:59:34:c5:49:55:d9:dd:0f:df:e3:
c9:2f:3a:f8:51:c1:03:f6:ca:85:5c:9a:42:01:a9:c9:50:57:
08:2e:2a:a0:1f:2f:ac:e1:b9:60:00:1d:f5:49:1b:a4:84:bb:
f9:2d:b0:e6:88:7c:21:d4:be:b2:fb:81:3e:89:e7:eb:81:54:
25:52:3f:ff:0b:88:8e:20:c3:fa:c0:5e:b0:71:17:f2:0e:4a:
9d:6b:0b:5b:4d:ed:6b:c3:3b:07:96:22:8c:b3:52:86:8c:23:
f5:20:59:40:0f:45:f9:9b:24:68:0e:81:87:5b:54:a2:de:50:
09:79:74:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 09:31:33 2025 by rpki-client