Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/WeU3N_5NtQjR7718CGEzOgGGTtM.roa
File: WeU3N_5NtQjR7718CGEzOgGGTtM.roa (raw, json)
Hash identifier: TcLYW6fLB/zw6yB6hYYtLnlECd18fa03VRYVsiOgy1M=
Subject key identifier: 59:E5:37:37:FE:4D:B5:08:D1:EF:BD:7C:08:61:33:3A:01:86:4E:D3
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018588E673479E161810290DE545C9BF2DDB
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/WeU3N_5NtQjR7718CGEzOgGGTtM.roa
Signing time: Fri 06 Jan 2023 21:04:42 +0000
ROA not before: Fri 06 Jan 2023 21:04:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:88e6:2188/128 maxlen: 128
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:88:e6:73:47:9e:16:18:10:29:0d:e5:45:c9:bf:2d:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 6 21:04:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=59e53737fe4db508d1efbd7c0861333a01864ed3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:fc:9a:59:15:b3:6c:9d:0f:fb:2c:a8:a4:92:
a9:2d:3f:c3:56:cb:ba:e5:93:45:92:27:b6:64:a5:
5e:cd:c3:90:f9:d5:5e:19:1e:e7:05:9c:bb:88:e9:
b3:01:db:f0:ca:c9:62:6b:b7:ca:d3:f6:f0:6a:58:
56:7f:f4:c5:85:e9:5f:5d:00:e7:6c:53:d0:5c:84:
37:72:b1:ad:3f:66:14:c8:20:5b:dc:d0:07:8e:0e:
10:cf:d2:f8:1d:b3:79:e0:90:d0:48:d2:3c:02:3b:
a6:c3:f7:9c:13:04:50:60:a8:70:d9:c5:86:a1:27:
0d:96:78:9a:76:d0:1b:cb:a7:83:2c:26:48:0e:b4:
3d:78:1a:07:14:dd:8c:c8:86:d4:48:a6:8b:3b:f4:
9b:bd:13:4d:33:18:b9:8c:97:7e:cd:5f:78:de:85:
8a:76:4a:9f:0f:a3:d4:62:a6:46:ba:e4:65:50:16:
70:17:f7:bc:b9:90:5d:7d:c7:3b:98:ae:2e:9e:50:
a2:58:19:a6:ff:38:af:70:06:ea:a7:49:52:b6:33:
6f:30:01:76:42:95:80:e9:ac:38:2d:16:50:c2:29:
0e:36:1e:59:15:3b:a2:ef:8d:1b:a0:cc:6e:06:07:
bc:08:b0:bf:b7:7a:cc:7b:66:e8:20:32:56:ee:45:
7d:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:E5:37:37:FE:4D:B5:08:D1:EF:BD:7C:08:61:33:3A:01:86:4E:D3
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/WeU3N_5NtQjR7718CGEzOgGGTtM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4e:f6:c9:2b:67:9e:58:98:64:6a:12:55:1d:61:ce:fc:62:9b:
46:4f:b9:1c:34:06:ec:44:6f:4d:f9:85:5d:af:a6:2a:29:0c:
30:21:39:28:29:95:34:3f:16:1f:08:48:83:a0:87:26:11:91:
06:9a:fa:ff:9b:2d:40:6e:60:34:17:7b:31:d6:7a:0a:bd:6d:
b8:a2:b9:0b:0e:be:ab:97:80:a5:df:be:a0:0e:9a:ec:50:44:
7e:b9:e4:d1:d2:26:df:7f:b4:c2:09:08:be:b0:66:ed:cf:3a:
dc:60:ab:e6:08:7b:f3:c2:00:15:06:7f:88:bf:17:71:22:ee:
0e:2f:ef:b0:74:bc:7c:11:b4:3e:f7:82:81:28:25:83:b7:f7:
08:cf:bb:b4:c6:65:f0:24:ec:da:aa:d6:38:3b:ff:27:61:a2:
2b:11:02:d5:3d:24:27:9c:93:33:d4:00:fe:5a:0c:e2:bb:fd:
07:55:32:4c:c2:5c:7b:8d:af:2d:82:d8:c5:e7:6c:01:3f:0c:
ad:45:14:1d:b4:1d:6d:d4:4d:a3:21:81:c4:50:7c:13:f0:d9:
d6:e4:f2:88:2b:0e:cf:62:eb:e2:2a:03:b5:b8:c3:cd:0a:1d:
e1:ce:e9:9d:c6:a2:0a:c3:b9:77:52:d4:73:e9:d9:84:ea:54:
4a:c0:74:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 05:33:32 2025 by rpki-client