Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/WjgceciNU8wzOmKUjt_DRMXpPUQ.roa
File: WjgceciNU8wzOmKUjt_DRMXpPUQ.roa (raw, json)
Hash identifier: RavVN9xjlsHcc4ZD+uvcAfsmX0CMvKX84Z0YpUYHaRI=
Subject key identifier: 5A:38:1C:79:C8:8D:53:CC:33:3A:62:94:8E:DF:C3:44:C5:E9:3D:44
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01830FB704DDDDFC66CF00EF947C768AD04B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/WjgceciNU8wzOmKUjt_DRMXpPUQ.roa
Signing time: Mon 05 Sep 2022 22:13:15 +0000
ROA not before: Mon 05 Sep 2022 22:13:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:0f:b7:04:dd:dd:fc:66:cf:00:ef:94:7c:76:8a:d0:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Sep 5 22:13:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5a381c79c88d53cc333a62948edfc344c5e93d44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:ef:a9:e6:8c:76:79:1c:95:b1:ac:67:c0:e5:
25:66:db:9a:a9:fd:5d:86:ac:8a:06:7b:ab:41:57:
51:c7:56:70:35:fa:b3:61:88:54:b6:4c:4c:49:5c:
e6:7c:9c:2b:4a:c5:34:61:a4:87:cf:8e:a4:ed:bd:
43:37:2e:29:fb:21:ae:c4:82:74:0b:e5:59:ed:6e:
cb:f0:b9:fd:90:6a:ee:24:a4:c9:9a:50:2b:29:9d:
58:f4:27:71:fa:7c:be:58:14:9a:45:31:a4:5e:aa:
4a:49:9a:87:d4:94:ac:8f:1c:bb:c5:b5:11:7f:85:
4a:94:7d:20:a7:d3:25:ee:e2:9a:19:b0:c6:f0:64:
9f:17:46:f1:df:6d:4d:f5:f4:15:2c:3b:65:da:c2:
09:c8:19:02:5b:84:c0:86:75:9a:03:cb:f2:20:e8:
47:9f:0b:85:cc:84:f5:7f:59:06:3d:fc:45:2c:95:
7e:83:e0:3d:8b:71:b0:6c:b6:a1:e5:c9:5b:d6:d9:
94:32:d8:56:f1:55:2b:6f:d9:f1:cc:d6:6b:dc:32:
be:0d:62:18:95:d6:58:b2:ee:c9:bf:32:83:df:c3:
69:9d:c3:e4:91:79:d3:b0:07:22:3c:b7:0e:ad:75:
e1:c6:3c:62:ba:d0:25:d2:4f:f6:6f:b4:ae:06:d6:
f8:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:38:1C:79:C8:8D:53:CC:33:3A:62:94:8E:DF:C3:44:C5:E9:3D:44
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/WjgceciNU8wzOmKUjt_DRMXpPUQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5c:da:8e:a6:67:80:5e:c5:3a:f4:cd:a9:43:b6:2d:ef:e6:02:
98:58:a7:52:13:02:87:d5:e7:08:56:13:a0:89:62:21:77:7b:
f5:98:67:1b:1c:48:fd:1b:45:46:95:35:47:ab:7b:9f:fb:51:
cc:e0:cb:55:d2:2c:4e:27:81:d6:88:99:43:32:c2:f1:14:87:
cb:47:54:de:a5:e5:20:82:c3:65:6b:98:71:69:7a:56:ad:e5:
58:dd:29:02:ec:26:d4:48:e5:d5:a0:50:1b:ac:52:76:6c:12:
e9:44:c9:f5:c1:8b:ac:38:d0:3f:4e:e1:95:b4:42:a9:15:7a:
63:12:01:d5:39:b6:71:55:6d:a6:ec:ac:8f:39:66:64:3b:e1:
74:30:8f:00:69:5e:ce:3b:03:86:32:6e:e6:e2:d3:d9:09:d5:
e6:4d:c6:5e:9c:36:2a:2b:6e:ed:88:7e:dc:ec:81:b3:78:07:
b4:9c:fe:82:bb:34:60:6c:f4:ae:c4:a3:25:df:15:b8:a0:a2:
d3:61:45:20:17:86:ac:33:3b:01:e6:61:a5:07:61:63:13:db:
08:d0:b7:3f:39:1e:c5:bf:b6:d9:9d:51:e9:11:54:cf:04:6a:
2e:40:c9:49:a8:49:75:90:c5:91:ac:f6:64:b6:07:32:d4:aa:
b3:6a:e6:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:35:46 2025 by rpki-client