Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/WoBl9IlxlqulZIcdWQjJ7kV7adA.roa
File: WoBl9IlxlqulZIcdWQjJ7kV7adA.roa (raw, json)
Hash identifier: b2aOWGr0BioFeRoBAahmPzlaV+tdn5oqGWwEaV3vdaQ=
Subject key identifier: 5A:80:65:F4:89:71:96:AB:A5:64:87:1D:59:08:C9:EE:45:7B:69:D0
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186E716A9633A68F88490090F01C613F3B3
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/WoBl9IlxlqulZIcdWQjJ7kV7adA.roa
Signing time: Wed 15 Mar 2023 21:04:27 +0000
ROA not before: Wed 15 Mar 2023 21:04:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:e716:6d9f/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:e7:16:a9:63:3a:68:f8:84:90:09:0f:01:c6:13:f3:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 15 21:04:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5a8065f4897196aba564871d5908c9ee457b69d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:57:a8:64:76:20:f5:04:63:20:9a:b2:88:09:
65:c1:b3:29:75:f7:03:ae:25:5e:a0:e8:dc:66:c3:
a3:ee:bd:47:99:f2:08:5a:42:78:73:78:df:89:43:
49:c1:5e:f0:9b:8f:8a:73:58:88:07:90:b8:e2:9f:
e0:0e:b2:c4:28:ea:60:93:8f:83:fc:f0:3b:9d:9f:
1e:b0:1d:22:a9:62:ff:ea:15:6e:39:93:c8:b4:dd:
c7:a4:43:95:70:22:45:f6:6a:8c:0d:71:25:33:51:
42:96:0c:11:f1:9d:1e:52:a5:1c:ba:22:61:16:0a:
17:32:79:25:c6:59:23:06:35:0b:e4:ae:2b:1e:6a:
36:93:37:16:07:1b:a6:8b:75:c1:7c:1d:1a:50:d7:
c4:0c:2c:0b:40:82:d1:4d:43:ca:ed:64:04:63:5a:
51:40:8b:3d:f0:c0:79:a6:19:5e:e5:d1:08:8d:80:
7c:7d:3a:07:aa:62:f5:9c:78:76:5e:ee:48:ef:e8:
97:63:35:e1:b8:53:d7:53:4b:67:f1:42:4e:c0:ca:
67:f0:d6:20:ab:aa:2a:bb:b7:ca:c8:d8:9c:4a:4b:
3e:82:91:99:5d:20:cb:06:b5:de:08:ae:bd:19:c9:
f9:70:85:79:fd:d7:e0:ed:34:0d:13:20:0c:d8:5e:
ff:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:80:65:F4:89:71:96:AB:A5:64:87:1D:59:08:C9:EE:45:7B:69:D0
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/WoBl9IlxlqulZIcdWQjJ7kV7adA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
78:d5:08:21:35:b8:2d:16:dd:fd:88:a7:85:84:04:e3:93:2a:
b2:fd:95:d7:ea:8b:23:ec:66:08:37:6a:ff:e7:0d:03:ad:82:
61:b2:2a:61:69:34:c1:e9:60:8b:d2:68:49:79:4b:a8:30:87:
d3:da:3a:84:6a:25:9f:4f:b7:ff:fd:50:76:87:94:ce:64:8a:
5e:24:50:1c:8b:7d:79:a7:06:28:41:89:08:dc:e0:ad:63:53:
b4:2d:f7:88:87:f1:92:77:35:76:05:61:39:77:79:02:fe:d4:
7f:01:0b:e6:ba:02:95:7d:a3:cc:e7:91:0c:6e:c4:e2:df:f9:
38:95:2a:e6:f9:ae:51:f0:3d:28:1d:82:cb:12:d2:8e:a5:02:
8a:8d:f1:17:5d:a9:10:b2:1f:d4:13:e6:e8:0f:9b:49:a2:ab:
9c:1a:f5:e7:bc:a1:a2:03:56:2f:28:d7:8d:5e:5c:d2:67:d8:
cc:29:2a:06:f0:f2:2f:c4:52:cb:15:73:d8:45:63:d4:f9:da:
7e:17:21:88:f3:35:12:b3:dc:48:83:78:8b:c4:8a:aa:2e:69:
09:81:c8:25:6a:63:69:d1:ee:db:31:b5:f9:b8:77:56:7d:3e:
60:cb:80:09:d3:0a:2a:2d:36:9c:b4:6a:68:b3:36:1b:d1:48:
37:09:47:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 10:59:23 2025 by rpki-client