Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Wef-LJODS0WHUi6i68eqqF4xZ2U.roa
File: Wef-LJODS0WHUi6i68eqqF4xZ2U.roa (raw, json)
Hash identifier: VNBFlMACqSWCvzdxojgPVmXOzjuyaZw24T70NQy+fro=
Subject key identifier: 59:E7:FE:2C:93:83:4B:45:87:52:2E:A2:EB:C7:AA:A8:5E:31:67:65
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018780905BCAEC0F379F6DEAE9759CEE8F7D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Wef-LJODS0WHUi6i68eqqF4xZ2U.roa
Signing time: Fri 14 Apr 2023 16:19:17 +0000
ROA not before: Fri 14 Apr 2023 16:19:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:80:90:5b:ca:ec:0f:37:9f:6d:ea:e9:75:9c:ee:8f:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 14 16:19:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=59e7fe2c93834b4587522ea2ebc7aaa85e316765
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:22:13:d7:68:bb:97:58:97:09:ac:48:9b:f8:
63:86:45:53:79:f6:bf:e3:a5:7d:71:80:46:a0:38:
a8:a1:fb:1f:f3:c4:6d:ce:55:d8:4f:7f:8f:3c:86:
a7:bf:10:25:bf:41:bd:da:1d:65:17:d2:89:5c:ea:
05:c0:2e:9a:7f:b2:69:e4:97:af:66:49:8b:37:2b:
ee:fd:08:9a:5f:3e:05:54:4c:17:f8:77:53:cd:df:
14:ec:7b:49:9e:a1:ff:f0:10:2f:f2:63:40:58:33:
95:e2:4a:44:2b:0d:d0:62:cd:b7:16:df:b5:d5:78:
72:7c:35:a4:e0:cd:3a:89:b1:f1:20:66:fe:62:31:
05:b1:5c:62:a2:9f:71:7f:6d:44:38:48:93:78:64:
d9:8e:8f:1e:2d:b1:84:ae:5d:2e:07:3c:fb:e2:67:
e8:2f:f2:a1:b4:ca:8d:37:dc:b9:81:cf:0e:f7:f9:
e1:07:c2:d1:c4:dc:95:77:4c:4e:01:04:11:9c:a9:
eb:e3:08:88:5f:7b:13:81:88:55:bc:b3:a8:66:a2:
69:af:f7:a6:3e:30:96:0d:2b:30:b4:e6:0d:a1:e3:
af:ac:e6:dd:3b:ca:60:b3:88:ac:88:42:92:6e:80:
6c:ad:4c:da:09:a6:e0:4c:06:26:74:e4:78:ef:d5:
96:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:E7:FE:2C:93:83:4B:45:87:52:2E:A2:EB:C7:AA:A8:5E:31:67:65
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Wef-LJODS0WHUi6i68eqqF4xZ2U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
30:9e:43:5f:44:9b:c9:be:6e:d0:21:1f:5f:9b:80:17:3b:d1:
42:c8:e2:44:4d:6f:a4:84:67:9d:0f:89:52:b8:83:fb:77:5e:
25:e1:3e:13:29:a0:6e:d5:de:c5:d5:62:fe:fa:a8:52:87:92:
6d:9e:7e:ef:62:f3:b7:e6:d1:e1:3e:c0:9e:0b:46:42:69:b6:
66:aa:94:53:5c:72:5b:f3:53:2a:1c:2c:cd:0c:e1:2b:4d:06:
16:86:1c:ef:dd:7a:fb:55:0d:3b:0b:27:a8:b3:71:63:eb:61:
1b:06:8f:f1:cb:f8:00:5b:6f:0b:d1:7e:38:11:de:58:44:35:
66:30:6a:79:8c:29:7d:44:56:25:59:b5:43:b6:61:81:f9:98:
24:0a:2b:64:9b:ca:95:17:52:ad:e5:3f:43:b6:d5:5b:d0:3f:
c2:04:2d:e9:ba:74:04:88:64:e2:c8:07:c4:0d:e4:cc:84:5a:
20:bc:86:89:50:35:65:b3:d4:10:a4:67:bc:49:4e:cf:07:df:
0c:3a:91:36:71:fe:0f:11:f8:5f:de:a5:2a:1b:90:08:36:3d:
3e:6d:38:2a:7d:da:24:91:a8:79:13:f1:a6:ad:6f:a8:4d:ac:
cf:5b:43:1e:ee:fc:b2:4f:72:e5:50:dc:b3:df:d3:71:5a:44:
77:fb:ca:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:42:17 2025 by rpki-client