Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/WoTcXnVceik2jo0UB00LWGboXbE.roa
File: WoTcXnVceik2jo0UB00LWGboXbE.roa (raw, json)
Hash identifier: lw3f/DqGGLLTEA6u9D69vlZBj/ePJnMT0FYndKTNZkg=
Subject key identifier: 5A:84:DC:5E:75:5C:7A:29:36:8E:8D:14:07:4D:0B:58:66:E8:5D:B1
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186BE8918380CDCC4005CDF52C73A7F0829
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/WoTcXnVceik2jo0UB00LWGboXbE.roa
Signing time: Wed 08 Mar 2023 00:05:00 +0000
ROA not before: Wed 08 Mar 2023 00:05:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:be88:8a51/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:be:89:18:38:0c:dc:c4:00:5c:df:52:c7:3a:7f:08:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 8 00:05:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5a84dc5e755c7a29368e8d14074d0b5866e85db1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:71:63:86:02:23:64:52:6a:be:45:82:88:07:
80:f8:59:af:6a:e0:63:2c:e8:59:7c:ed:69:11:5d:
82:cc:7b:11:bb:e2:c1:b1:fb:f8:c2:90:13:5f:14:
bc:70:5c:f3:07:ff:66:51:27:ff:a9:14:78:c7:8f:
bd:7f:6d:21:85:d7:f4:77:ab:80:4f:83:ad:66:25:
f9:31:ef:79:f5:ec:a4:2b:51:8b:ea:f8:f1:2d:23:
3f:8f:86:08:4b:e9:0c:3a:04:36:d0:77:8f:17:19:
26:f5:9c:03:bc:11:f2:cb:5f:d7:fe:39:6f:1a:2a:
0f:40:bd:37:35:21:35:a4:fd:9a:c9:14:03:eb:a1:
15:2c:99:c8:71:47:85:0e:e3:12:31:23:5b:e6:f1:
f2:95:7c:f1:ef:c4:0c:b9:1c:fd:34:52:b1:58:64:
e6:1d:4e:ac:53:2f:79:2b:13:42:b4:55:9f:20:c5:
57:28:f3:4a:09:50:72:8c:19:a6:bd:e2:f4:c8:ca:
4e:4e:19:3f:67:81:56:e3:ea:2c:08:f5:b9:bb:35:
87:bc:5d:95:3e:88:54:db:95:09:d2:57:dd:f8:e0:
9e:b1:04:f1:fd:c7:76:9e:5d:fa:d2:6d:c3:eb:8a:
5f:de:ff:0c:43:fd:32:ca:d0:b6:17:93:13:11:5d:
8e:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:84:DC:5E:75:5C:7A:29:36:8E:8D:14:07:4D:0B:58:66:E8:5D:B1
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/WoTcXnVceik2jo0UB00LWGboXbE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6b:58:dd:29:9f:25:34:4b:db:91:47:67:ce:0a:01:59:82:a9:
e6:cd:63:84:f5:86:b0:37:7c:2b:cb:87:cb:73:28:b4:bc:85:
69:4f:bb:c1:9f:c6:76:32:e9:43:c4:f9:d4:85:da:ce:68:03:
7a:8a:38:59:71:b4:02:84:cf:03:21:19:bd:3b:2a:48:78:9f:
50:26:9c:da:2a:d2:6a:37:85:18:b9:8e:21:5a:b4:f0:7f:96:
75:97:55:f7:29:7f:d4:57:2b:f1:51:d8:cc:64:ef:53:a4:2f:
74:ed:25:43:07:e7:87:27:ab:d3:5c:1a:f6:1c:b1:9a:c0:1e:
64:8f:74:4d:11:41:c2:ad:71:6d:01:51:d2:7e:40:d3:a3:f1:
44:65:db:53:3e:d6:6a:8a:d7:56:24:79:0e:95:14:97:b6:0e:
ce:3d:6c:1f:67:4b:2f:59:c3:2d:9b:82:f4:7d:40:91:ed:b4:
7b:9e:47:23:a6:f5:a5:5f:12:50:9d:9b:44:a9:59:18:f3:5d:
89:23:9d:12:b7:5f:34:c0:95:ac:f4:7c:3a:87:a1:00:7c:d1:
e4:dc:f1:9b:8b:c0:1a:72:39:4c:cd:80:bc:77:f0:81:6c:43:
cd:6c:8f:fe:ed:1e:f0:39:e6:c6:27:db:2e:5c:06:07:b7:ea:
3d:4f:0e:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 18:54:42 2025 by rpki-client