Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/WYxTgggMoLd2yUw6F-tFvHlfuh0.roa
File: WYxTgggMoLd2yUw6F-tFvHlfuh0.roa (raw, json)
Hash identifier: 43o5KRzUrJ9e0uJr6Vjk41UGdqxYCdfTJcFvfc3DE0g=
Subject key identifier: 59:8C:53:82:08:0C:A0:B7:76:C9:4C:3A:17:EB:45:BC:79:5F:BA:1D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189C008556450655A473EBF2BB0FA17239A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/WYxTgggMoLd2yUw6F-tFvHlfuh0.roa
Signing time: Fri 04 Aug 2023 10:11:58 +0000
ROA not before: Fri 04 Aug 2023 10:11:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:c0:08:55:64:50:65:5a:47:3e:bf:2b:b0:fa:17:23:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 4 10:11:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=598c5382080ca0b776c94c3a17eb45bc795fba1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:b8:71:2c:24:8f:fd:d8:9b:4c:d4:64:bf:6e:
e4:9d:30:b0:d3:1c:fc:fc:7c:6d:55:5c:a1:89:d1:
3d:c2:26:fa:34:4c:c6:e3:a1:4b:d1:cd:b9:19:3d:
01:db:0d:d1:bd:01:9f:21:66:ef:84:ca:d7:0f:db:
c0:98:f9:26:f5:2c:4a:6f:5f:1b:55:8e:dc:9c:13:
99:d4:5d:45:6e:0f:01:c0:9d:e4:26:36:74:66:53:
fa:46:70:2a:c6:59:e0:4f:17:ea:39:c6:f4:03:be:
fc:f3:98:ae:97:4e:19:61:92:a6:c4:17:42:3c:2c:
d5:56:66:1d:ba:fd:5b:5a:47:af:0f:c8:29:85:c1:
65:a2:fc:d8:3c:fb:de:9a:ab:13:00:1b:1a:be:dc:
bf:83:9f:6a:b8:04:af:c9:e8:93:74:11:87:f8:9a:
32:32:26:aa:69:11:6e:29:6f:a4:2a:fd:bb:0a:ba:
7c:71:7d:3c:bf:67:eb:33:1a:0b:df:61:ba:ab:7a:
29:48:9e:64:f8:d6:dd:7f:97:32:3f:1e:c0:d6:e7:
4b:c1:1a:db:a9:81:e4:52:ee:4a:9d:89:04:09:5f:
90:f6:80:ae:64:4e:16:3f:3c:0f:94:81:15:bc:27:
c3:80:0b:b7:ce:87:67:f9:ca:4b:8e:c6:84:2b:fe:
8f:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:8C:53:82:08:0C:A0:B7:76:C9:4C:3A:17:EB:45:BC:79:5F:BA:1D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/WYxTgggMoLd2yUw6F-tFvHlfuh0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
23:fe:d8:b5:e7:41:d8:91:f9:9b:69:7f:ec:2e:5c:38:93:98:
e9:57:2a:8c:6b:0c:ee:ee:19:aa:4b:0b:0c:6c:dd:71:c8:0c:
2f:d3:32:94:2c:24:e9:c9:26:00:cd:2a:8b:f5:7c:21:7f:31:
6d:4c:84:33:7c:6f:06:b3:de:17:2c:19:84:9b:e5:00:53:44:
5a:3b:e1:7d:83:16:de:f2:e5:e0:a4:a9:d6:e4:25:d1:0f:e8:
0e:d0:28:d9:4b:6a:c8:32:8d:51:90:9b:5f:96:b3:76:2d:0a:
dd:8d:0b:cb:01:1a:8c:3a:04:1d:d3:90:84:e5:3a:ae:6f:26:
a4:6b:49:ca:af:58:15:9e:01:e3:f3:f9:73:9c:58:e6:41:a3:
86:ab:b1:b3:97:72:65:9e:c5:39:b9:74:34:1c:16:75:83:f0:
64:62:ec:3e:d3:7f:fc:c9:43:42:84:63:45:3f:60:59:dd:62:
0a:a3:92:a0:2e:aa:5e:06:e6:60:ca:b3:46:4d:4c:35:8e:64:
4e:2d:28:51:81:a8:5f:45:9b:cf:01:de:07:16:1c:e5:0a:9d:
4d:4c:ef:0b:c8:18:22:d1:d3:a6:a6:0b:db:73:d8:71:21:aa:
8e:d7:63:a7:bc:f7:1b:a4:cf:49:7d:81:fd:46:4a:42:e6:3b:
da:66:6a:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:42:21 2025 by rpki-client