Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/WrHPBof6GMyXLZCNy79zu0sbnws.roa
File: WrHPBof6GMyXLZCNy79zu0sbnws.roa (raw, json)
Hash identifier: YmqWjqx5UWltEGZD5F5/1w5q9oTGRTlY+d8xpwzxmqA=
Subject key identifier: 5A:B1:CF:06:87:FA:18:CC:97:2D:90:8D:CB:BF:73:BB:4B:1B:9F:0B
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 6EED18CA
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/WrHPBof6GMyXLZCNy79zu0sbnws.roa
Signing time: Wed 02 Mar 2022 03:10:49 +0000
ROA not before: Wed 02 Mar 2022 03:10:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1861032138 (0x6eed18ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 2 03:10:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5ab1cf0687fa18cc972d908dcbbf73bb4b1b9f0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:0d:d0:66:88:af:5d:37:f1:4f:52:f8:1b:94:
93:e3:7f:30:92:5b:78:26:aa:16:cf:dc:d4:d2:27:
38:b8:0b:cf:14:6e:67:dd:d6:ee:c9:60:61:d0:1a:
3e:1b:8a:b4:18:e2:b6:6d:8e:23:1e:6b:77:77:ae:
93:d3:28:19:3e:7d:74:6d:4d:36:cb:23:c4:8b:7b:
2f:c4:bf:46:23:d9:7a:4f:7a:0a:da:af:c6:14:ff:
cf:ad:bb:84:a8:63:f5:0b:f6:bb:d2:49:38:d0:4e:
ba:10:51:9e:f6:31:0d:fa:20:ca:3b:a9:44:71:a1:
16:c8:54:a2:9c:28:04:0a:3e:18:31:70:23:1c:86:
a9:4c:5c:6c:97:28:12:c9:1c:1b:38:a2:c8:7b:fa:
0b:46:75:a1:d0:4f:a1:f6:5e:03:45:68:64:de:76:
31:8b:04:55:04:bf:9c:6d:90:be:da:32:ab:10:d6:
e0:84:e2:da:dd:ca:b2:15:8c:1d:56:ce:36:31:4c:
43:ed:28:c2:c9:41:68:b1:bb:17:72:a8:4e:71:3a:
5d:3b:e4:ab:89:25:13:d9:6e:95:ca:30:43:55:14:
2e:75:ac:04:7f:bb:ba:5e:1e:7c:a1:ef:bc:f2:ba:
bc:82:b2:6b:de:bf:92:04:33:cc:e8:56:26:94:60:
a2:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:B1:CF:06:87:FA:18:CC:97:2D:90:8D:CB:BF:73:BB:4B:1B:9F:0B
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/WrHPBof6GMyXLZCNy79zu0sbnws.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6b:28:3a:bb:d7:71:57:8f:19:ca:22:cd:33:7f:59:b4:ed:09:
1f:a7:9e:f3:5f:0a:41:50:46:a2:f8:d6:d5:90:25:f0:83:13:
0e:24:a2:5f:37:fb:eb:ca:1e:46:38:e1:8b:db:9a:ca:a9:40:
86:95:6c:b3:f0:19:c4:26:d0:c3:20:5a:9e:41:ce:19:da:74:
27:52:1c:c0:50:cd:8c:7b:db:86:fc:35:69:de:94:93:09:35:
6e:4a:b7:60:7c:ae:c5:9e:63:09:e9:3b:68:c2:9e:43:f7:7e:
c8:30:3a:26:2d:12:2e:99:ad:af:ac:b5:bb:77:fb:2c:47:07:
60:19:2f:a9:01:18:ad:60:70:15:14:bf:6e:50:77:b8:90:bd:
0a:c8:78:ac:d8:5f:af:c8:e9:3d:82:46:5b:eb:06:f6:66:7f:
1b:02:c0:da:c6:25:19:a4:f6:56:88:60:8d:1b:34:88:f0:4e:
a0:ce:d6:c8:df:09:ad:8c:05:c0:15:5b:1a:7f:f9:61:9a:76:
95:1e:50:9c:91:11:33:12:fb:8b:33:9d:af:92:d5:74:69:de:
93:88:2a:c2:2a:27:d9:ba:83:fe:de:84:4f:f3:0e:50:ad:b2:
c4:f5:45:57:62:0c:d2:b1:f3:3f:fd:a9:ed:12:d1:4c:02:66:
26:b1:d8:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 12:09:13 2025 by rpki-client