Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/WoEJUDQnXrdg7j4Vjz-H9XUBY_0.roa
File: WoEJUDQnXrdg7j4Vjz-H9XUBY_0.roa (raw, json)
Hash identifier: NwsCm+9tTyLKAGiLRn6688zXnxvb7R+gBJELDcfmAjA=
Subject key identifier: 5A:81:09:50:34:27:5E:B7:60:EE:3E:15:8F:3F:87:F5:75:01:63:FD
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A30B540F48C9B1B713B62BCF831A5699A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/WoEJUDQnXrdg7j4Vjz-H9XUBY_0.roa
Signing time: Sat 26 Aug 2023 07:18:19 +0000
ROA not before: Sat 26 Aug 2023 07:18:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:30:b5:40:f4:8c:9b:1b:71:3b:62:bc:f8:31:a5:69:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 26 07:18:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5a81095034275eb760ee3e158f3f87f5750163fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:0e:16:8a:dd:74:3c:20:7a:c1:76:bb:cb:20:
6e:8c:72:dd:3a:ec:fd:78:22:82:40:6a:94:53:ed:
ed:d1:82:02:c7:f4:b6:71:79:2f:86:5a:c7:01:88:
1e:fa:ee:a9:1a:2a:51:a7:0a:f6:5d:b4:d1:be:b3:
01:b2:9d:e6:94:45:3a:83:0d:7e:7d:b7:85:85:be:
0a:ea:21:cb:f1:9f:11:9a:08:0d:b2:ea:b7:0e:eb:
4f:70:d9:d9:43:f3:dc:92:19:88:8b:e6:29:c1:7b:
d5:1f:12:ca:40:61:2f:e7:68:71:e7:91:17:52:cd:
ef:76:81:6a:dd:5f:6e:fb:00:7a:4d:fd:90:60:54:
bc:c4:82:f8:f2:5c:a5:7b:d4:46:46:8e:db:f6:bb:
9c:34:92:95:1f:aa:59:c8:10:c2:75:e8:6a:6a:ac:
5b:12:4b:e2:99:09:b6:45:1f:ec:87:90:2c:82:2e:
72:f5:8c:d7:36:d5:49:84:c1:4c:74:b5:d3:52:53:
6c:76:04:b9:77:58:ff:9c:7e:b6:13:dd:b5:42:0b:
ee:fe:56:82:4b:74:40:a6:c4:63:85:bf:4d:27:4a:
d3:2a:ee:c9:d3:2c:9f:59:f3:d2:24:06:c9:45:70:
d4:26:70:1c:9f:28:09:4c:77:d8:84:6f:32:86:32:
78:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:81:09:50:34:27:5E:B7:60:EE:3E:15:8F:3F:87:F5:75:01:63:FD
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/WoEJUDQnXrdg7j4Vjz-H9XUBY_0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
58:f8:97:d2:b8:48:db:7a:9c:1b:a4:de:5c:f3:07:5f:89:c2:
1f:e8:26:ce:a4:c9:38:67:90:e9:46:1e:a1:45:0d:09:0d:95:
c4:73:74:8f:ae:a9:89:32:99:d5:66:1c:5b:88:64:4d:72:90:
b5:95:e7:8d:e9:e0:4e:57:a5:12:25:0f:61:33:2a:31:0d:57:
0d:f5:98:98:b4:44:92:ca:9b:d1:18:b0:09:10:81:6b:86:a7:
84:73:0c:9d:34:da:f3:62:11:85:ec:0c:91:91:69:0a:e6:e1:
01:4d:28:ce:5b:07:81:50:da:48:59:ae:32:79:52:b8:22:e1:
ca:26:60:fa:98:b4:ef:ab:48:7e:d1:dc:de:25:f6:c2:d9:5e:
d2:ae:c2:8e:85:28:50:bf:47:f4:3a:1b:bc:a5:27:0e:9d:bb:
22:ba:d8:f4:49:92:6b:8f:ce:24:68:28:8d:ce:e6:1a:e3:57:
99:4e:8f:d8:27:42:4d:3c:67:45:01:6e:1e:4f:a1:c4:62:74:
e1:1c:38:82:3c:51:9f:8e:6f:11:c7:b7:1d:1d:48:d4:00:b3:
0d:c2:58:65:4d:32:75:ac:96:e6:6f:77:07:b8:ef:31:9b:85:
45:62:ad:4e:93:26:71:a9:47:25:8f:62:45:7b:ff:ee:20:05:
0c:2c:8d:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 07:25:47 2025 by rpki-client