Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Wm6MSVbftsH1D4fRhecud8VMXWs.roa
File: Wm6MSVbftsH1D4fRhecud8VMXWs.roa (raw, json)
Hash identifier: fiQ+yAfUiAkmcWsK1LlgqOSc+HOF5ID1U/m94ccNpkc=
Subject key identifier: 5A:6E:8C:49:56:DF:B6:C1:F5:0F:87:D1:85:E7:2E:77:C5:4C:5D:6B
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018988AC6456585A2701B2A7CA825700B04E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Wm6MSVbftsH1D4fRhecud8VMXWs.roa
Signing time: Mon 24 Jul 2023 16:12:26 +0000
ROA not before: Mon 24 Jul 2023 16:12:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:88:ac:64:56:58:5a:27:01:b2:a7:ca:82:57:00:b0:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 24 16:12:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5a6e8c4956dfb6c1f50f87d185e72e77c54c5d6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:4f:a7:20:f5:e2:96:e4:e1:2b:da:19:94:c9:
e3:4c:30:a1:a1:86:f7:6f:8d:43:0c:42:9b:88:7a:
bf:60:9e:6f:ff:6b:32:db:5c:64:bf:7a:40:3f:e3:
c1:0e:26:01:b0:ef:de:3a:7f:58:ac:7f:ca:70:0d:
60:56:29:56:d8:89:dc:fb:f1:67:a8:f6:2d:08:b7:
68:f1:84:9f:94:d2:68:c5:83:82:a5:2f:f3:8a:21:
c2:ba:61:6f:49:f2:eb:8b:fd:7c:07:af:e5:3d:e9:
3e:f1:01:35:32:f5:4b:b9:b0:39:eb:38:2e:57:be:
b5:43:f6:28:9d:3b:cf:dd:96:7f:50:99:9b:cc:e1:
a6:f2:00:03:7c:89:4d:fd:1d:90:b0:99:d2:02:7f:
a2:bb:a1:d5:67:2b:64:45:ce:f2:92:d3:91:dc:7a:
42:6b:a6:ec:12:9b:fd:2c:d2:c9:28:06:de:33:66:
0f:2f:74:95:e3:5f:33:ef:a4:88:6e:52:4b:eb:c5:
2a:1d:d3:44:58:49:11:1d:e7:9d:a9:01:b8:32:09:
51:8f:a8:94:81:1d:e4:42:f6:c9:7e:ad:13:81:cf:
58:38:ae:7c:6e:ca:94:85:c5:b4:7b:0c:45:cd:88:
48:80:2f:ca:03:56:79:b0:b9:16:df:fa:19:72:7a:
6a:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:6E:8C:49:56:DF:B6:C1:F5:0F:87:D1:85:E7:2E:77:C5:4C:5D:6B
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Wm6MSVbftsH1D4fRhecud8VMXWs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6a:4b:8b:75:6d:20:28:5a:6e:ff:5b:ba:b7:cb:13:d1:2b:aa:
ba:09:f2:34:38:8a:b8:07:26:ab:84:24:6f:14:f3:63:86:88:
de:40:04:c3:91:03:e8:72:39:10:28:d4:39:16:10:b0:35:a4:
93:73:f9:5d:ac:b2:46:d3:9b:c6:cd:ad:95:eb:bf:6b:4f:23:
c3:4f:d8:1f:e3:89:50:f0:45:0c:32:a0:aa:de:91:68:20:02:
8f:86:18:6b:9c:79:3e:ad:32:cb:15:b0:df:13:65:58:bf:bb:
80:96:99:5d:af:5e:51:c2:47:91:56:0f:87:08:a3:cf:7c:3c:
4e:f0:e7:b3:43:dd:3c:8d:b6:85:34:9d:79:10:dd:c7:53:65:
8e:5c:50:8c:bd:63:e5:10:6c:de:be:d6:f9:87:2c:ce:d2:f2:
14:a3:62:91:b4:09:35:0b:15:1b:f4:c8:e9:82:51:b5:ac:7d:
89:50:fb:3c:0e:40:bb:a1:24:39:00:c2:53:8d:52:9f:86:5b:
dd:ba:48:10:c6:b5:cf:83:03:29:c5:aa:89:0f:cc:7e:42:0c:
27:c8:82:db:cf:ae:20:f1:8b:44:31:94:47:3d:f7:69:fa:27:
a2:52:67:cd:d3:de:f4:81:19:0d:5a:06:57:bd:46:40:d0:02:
0e:13:96:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:41:09 2025 by rpki-client