Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Wmx00zKBMDrzbTu6MX7IYcEe4eE.roa
File: Wmx00zKBMDrzbTu6MX7IYcEe4eE.roa (raw, json)
Hash identifier: YeSmNRKxnr8SzCtkYcCzHGEZnCSziv2KmU5DxNdlOgg=
Subject key identifier: 5A:6C:74:D3:32:81:30:3A:F3:6D:3B:BA:31:7E:C8:61:C1:1E:E1:E1
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186F61BDF44A0502B28486333DDC73C11CB
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Wmx00zKBMDrzbTu6MX7IYcEe4eE.roa
Signing time: Sat 18 Mar 2023 19:04:27 +0000
ROA not before: Sat 18 Mar 2023 19:04:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:f61b:d797/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:f6:1b:df:44:a0:50:2b:28:48:63:33:dd:c7:3c:11:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 18 19:04:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5a6c74d33281303af36d3bba317ec861c11ee1e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:c7:4a:22:93:ad:dd:7c:e6:f5:5e:0b:db:1f:
56:f9:3d:ad:b3:8f:96:01:9d:b8:cd:59:d2:73:a8:
98:cf:ed:d6:c9:1d:87:dc:dc:a3:6a:bf:7a:ae:01:
4b:2a:0a:aa:12:7c:b5:34:36:42:b0:70:4a:22:65:
45:4f:b6:c6:b0:55:ca:17:01:b8:b6:74:fd:ac:8b:
03:c7:0b:ac:f0:0d:9e:fa:18:b0:e8:06:8a:59:a3:
cd:82:00:77:8d:d0:96:4b:19:21:58:26:ec:d2:2d:
52:aa:5d:44:50:c6:27:d9:fa:b8:4e:f3:97:ee:17:
74:76:b0:03:b6:15:a6:85:6b:01:40:d6:45:84:f6:
5c:26:4e:f9:d7:a9:4b:ad:d2:b1:20:1d:f2:0c:ad:
66:45:ee:56:6d:af:c1:8d:b3:16:e8:df:b2:32:de:
e1:c8:15:02:3a:d1:5a:df:e6:eb:8d:b7:24:e3:27:
b7:cb:a2:52:87:4f:96:90:bf:64:6c:94:f9:53:38:
dd:85:2f:e8:d5:5a:5d:e4:31:b0:08:e5:09:dc:4b:
64:bb:f6:f7:af:d3:bd:4e:a5:1f:2b:b9:96:ba:97:
35:d0:d7:19:58:e2:b1:b8:e3:51:db:bb:b3:7e:10:
c9:a8:53:4c:ae:7b:55:cf:f1:84:b7:3c:52:ac:69:
80:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:6C:74:D3:32:81:30:3A:F3:6D:3B:BA:31:7E:C8:61:C1:1E:E1:E1
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Wmx00zKBMDrzbTu6MX7IYcEe4eE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
35:cc:34:af:27:9a:3b:1f:5f:94:c8:d9:d6:cd:6e:55:fa:c4:
78:af:eb:81:20:ae:b4:c1:ff:f4:d4:7b:ed:46:f5:ec:e7:eb:
3b:6a:89:c7:ca:cf:42:12:64:8f:0f:c4:63:0f:0f:4f:3f:f8:
78:49:b5:23:b7:b2:8a:a4:4e:4e:07:ff:ad:c5:a3:90:8e:bb:
5a:cc:b6:84:a0:69:fa:2e:26:6c:4d:f6:57:dd:fa:ae:90:06:
fd:e0:1c:aa:c2:b7:56:60:70:0e:e2:6d:ad:d4:71:9b:c5:cb:
dd:13:21:12:41:79:89:ce:c9:ef:b7:1c:24:45:84:dc:0d:ea:
ff:c3:91:ce:97:1c:50:7f:14:48:98:95:99:b2:4e:e1:a7:8c:
7f:0b:5a:92:97:5d:1c:30:7d:33:67:00:2f:1b:24:56:b1:01:
1c:bf:31:5e:44:c3:75:2d:81:c0:f5:98:c0:d3:9d:89:98:36:
17:0a:d2:bf:47:32:75:69:9b:6e:10:5d:cb:08:f4:2a:71:09:
44:b5:13:b2:08:5c:c3:f3:34:1b:a8:ae:81:d8:2c:2c:3e:48:
88:bb:ec:0a:a4:c6:19:9f:0a:2d:bf:89:1d:80:a0:1e:75:a3:
aa:82:b1:ee:bb:07:53:6a:1f:c7:9c:d6:b8:69:21:e7:98:95:
a7:0b:ce:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 16:25:48 2025 by rpki-client