Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Wsbhw9yj2pjzY1qWW5W42fc1TUE.roa
File: Wsbhw9yj2pjzY1qWW5W42fc1TUE.roa (raw, json)
Hash identifier: KFbmdkKJSwMPSPnYXCq6SDm1WFK6+svnx8ybAyaXFFs=
Subject key identifier: 5A:C6:E1:C3:DC:A3:DA:98:F3:63:5A:96:5B:95:B8:D9:F7:35:4D:41
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01866E48EA7619ED370F5DB46C4CD8C60D84
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Wsbhw9yj2pjzY1qWW5W42fc1TUE.roa
Signing time: Mon 20 Feb 2023 10:05:17 +0000
ROA not before: Mon 20 Feb 2023 10:05:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
2001:67c:64:ffff:0:186:6e48:21b3/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:6e:48:ea:76:19:ed:37:0f:5d:b4:6c:4c:d8:c6:0d:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 20 10:05:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5ac6e1c3dca3da98f3635a965b95b8d9f7354d41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:70:aa:f2:c7:1f:f1:ca:4f:7e:79:d2:16:4d:
7c:a1:a9:75:65:eb:0d:ab:e6:1d:77:c7:b4:3f:1e:
f9:ad:40:bc:f2:39:b5:25:d7:73:00:e0:80:39:0f:
b8:45:11:f6:32:49:10:4e:c4:e8:9a:d9:ea:da:87:
7e:ec:53:8b:20:5b:9c:16:f1:d3:f4:36:6a:40:e1:
50:be:8e:bf:30:9c:3a:28:f1:a5:a3:41:d9:5f:1d:
e2:2e:67:6b:a5:2d:09:7d:3e:2f:b8:0e:93:d5:f6:
6f:69:e0:05:e6:ba:33:5e:2e:3d:cd:25:a8:01:ee:
ac:8e:32:52:d2:8a:7f:f6:ca:71:5d:83:f2:2d:f0:
15:98:93:69:58:7a:ad:01:5e:ce:66:cd:6c:59:9a:
b6:52:7f:d1:36:dc:a9:51:c8:1c:1f:58:3b:60:6d:
25:29:bb:5a:a1:9f:33:71:f2:1b:c5:6e:b4:aa:e0:
53:73:ba:89:f7:f3:60:2f:9a:2f:c1:b7:42:ae:26:
34:7e:b8:df:9f:ff:4e:2c:52:07:42:0d:3b:26:81:
36:6c:27:5c:53:ec:00:94:7f:47:8d:e9:d3:22:90:
ae:9a:a2:ff:7a:a5:52:95:ae:98:16:2c:49:a5:b4:
48:7d:a2:80:ab:96:8b:09:a1:cc:d5:ed:b2:c1:ab:
cb:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:C6:E1:C3:DC:A3:DA:98:F3:63:5A:96:5B:95:B8:D9:F7:35:4D:41
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Wsbhw9yj2pjzY1qWW5W42fc1TUE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5c:be:80:52:ae:84:1b:ec:18:0b:e7:eb:b1:ba:2d:18:15:06:
a1:fe:40:6d:ed:18:42:72:67:29:f4:84:91:d5:4f:d1:d9:c2:
fa:28:fd:b7:e1:37:0f:1d:52:ce:36:3f:73:19:f4:c6:61:91:
52:ec:0f:7e:4b:a7:57:a8:a7:4a:63:55:66:53:4a:f4:0f:b7:
54:59:c1:82:10:8e:5e:63:90:eb:70:06:43:9a:09:60:03:fe:
5b:c7:e1:f2:9f:81:ba:38:ca:9c:94:1d:19:fb:a1:89:72:ac:
84:b9:78:94:c1:c4:01:ec:b3:71:00:f3:84:3b:36:b4:82:85:
7b:ed:01:0c:78:7e:d9:65:01:f3:32:5f:f5:fb:64:b0:e3:5b:
c0:87:31:c1:c5:89:6e:ff:b1:23:7a:31:73:72:22:45:76:bd:
44:c5:ea:df:e7:32:9a:5e:99:81:b9:69:93:ea:1b:e0:a9:6e:
2b:50:a8:1d:11:e8:50:79:e3:89:17:37:77:c8:31:fd:d3:43:
b4:38:97:c7:6a:ce:d9:ca:1e:d0:00:92:04:83:53:05:7d:90:
c0:f2:5d:31:46:27:6b:14:fc:ad:76:48:55:fa:da:81:d1:95:
ef:a4:56:d2:58:c5:ec:a6:f6:fc:d6:32:29:53:1a:5f:f9:4b:
27:f8:3c:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:41:28 2025 by rpki-client