Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/WglEMrpS58SUgRPMDQKDptRcanw.roa
File: WglEMrpS58SUgRPMDQKDptRcanw.roa (raw, json)
Hash identifier: cNdzZuqd21hQHObP76YYcMz5bulUYMqzW+dFiO8e9cA=
Subject key identifier: 5A:09:44:32:BA:52:E7:C4:94:81:13:CC:0D:02:83:A6:D4:5C:6A:7C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 80DEF2CB
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/WglEMrpS58SUgRPMDQKDptRcanw.roa
Signing time: Tue 03 May 2022 22:09:20 +0000
ROA not before: Tue 03 May 2022 22:09:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:180:466e:42dd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:8961:505f/128 maxlen: 128
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2162094795 (0x80def2cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 3 22:09:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5a094432ba52e7c4948113cc0d0283a6d45c6a7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:c6:3e:c5:b0:09:d1:ec:6a:4f:91:5f:5c:7c:
0a:9f:0b:ae:a2:ef:35:1f:a1:c4:47:fa:92:26:72:
31:d2:cf:c7:92:53:75:48:d5:e3:75:a0:a8:64:2d:
23:2e:05:6e:70:21:0a:14:89:9a:1d:dd:03:45:bd:
cb:57:80:8d:b0:37:fb:d0:42:bd:9e:82:90:ce:0f:
d2:47:ea:3b:98:4a:04:28:a1:0a:f1:a9:26:2b:66:
62:b7:d0:a1:a3:6b:e9:d1:56:18:03:68:16:8b:86:
af:25:1d:36:d4:e7:f7:a8:86:de:17:04:2e:be:ce:
94:cc:b0:cf:b8:c2:fc:89:2f:e0:56:47:ed:64:fa:
13:aa:e0:5e:7c:1f:9a:e6:32:f4:be:f6:40:3d:3e:
7f:ff:33:f9:df:79:65:55:7a:5f:66:19:f3:59:8a:
26:fa:59:91:3b:5b:05:de:9b:21:f2:8a:b3:2b:f6:
bd:08:b4:19:55:e2:e0:6e:aa:e4:e9:9f:9c:80:3b:
d6:7b:6c:e1:39:62:86:ef:a8:48:77:3b:bd:65:81:
08:7f:1f:8f:cb:c7:70:f3:00:58:78:44:26:5e:71:
de:9d:e1:4a:11:c5:a0:1d:43:cb:81:06:53:f2:e2:
ff:6d:6d:1e:e1:b8:db:4b:d4:ff:b7:49:e3:a9:0a:
da:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:09:44:32:BA:52:E7:C4:94:81:13:CC:0D:02:83:A6:D4:5C:6A:7C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/WglEMrpS58SUgRPMDQKDptRcanw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
71:c9:0a:7a:f2:8e:fa:8d:22:18:e2:ce:dd:8d:ba:70:b2:e9:
04:c4:4f:7b:0d:d4:5d:f1:cf:0a:49:56:ba:ef:4e:d6:20:61:
15:2c:bd:18:00:25:76:0a:ea:51:0a:e4:22:5a:19:2e:90:0e:
d1:46:93:de:3c:60:5f:3d:4d:9d:28:f2:14:ca:7d:e5:fa:40:
3c:d5:4d:ec:02:09:b9:5c:ac:96:27:9d:3a:90:34:5f:c1:a5:
3b:07:b2:f8:35:5c:fc:04:1f:a8:ae:85:c9:7a:a6:07:44:79:
e7:6d:fb:3d:3b:87:79:71:85:38:23:39:9a:fe:53:89:57:84:
19:08:77:84:9d:09:e5:ee:7b:df:0e:ab:39:52:15:2e:2e:a4:
02:14:53:4f:e1:e0:b2:a2:94:2b:01:e8:7f:d1:76:67:47:de:
15:53:3e:cb:71:57:fc:8b:51:3a:15:8c:1e:32:ae:1d:f1:bf:
fd:30:a0:ce:48:96:46:80:76:fc:56:ef:cd:fd:bc:30:e8:de:
bf:a7:a5:dd:b4:c0:db:06:1e:89:c8:7b:08:2a:47:ee:e1:4b:
19:7d:cd:af:1f:dc:89:e9:91:55:0d:7a:d6:ef:4d:1e:1f:87:
2b:79:6b:64:fe:4d:5c:9c:00:25:df:3c:ed:79:1e:cf:be:ad:
f0:c8:bb:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 04:32:15 2025 by rpki-client