Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Wt158W5R7Pkskfs6gjE7FK_n3Lw.roa
File: Wt158W5R7Pkskfs6gjE7FK_n3Lw.roa (raw, json)
Hash identifier: a2s5rzx9i+4cwzimkpkZbqVU1qJW3bfEqgYm7Bj4oOg=
Subject key identifier: 5A:DD:79:F1:6E:51:EC:F9:2C:91:FB:3A:82:31:3B:14:AF:E7:DC:BC
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186B329B6623C1A447FA1C464CECB812428
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Wt158W5R7Pkskfs6gjE7FK_n3Lw.roa
Signing time: Sun 05 Mar 2023 19:05:00 +0000
ROA not before: Sun 05 Mar 2023 19:05:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:b328:ec3f/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:b3:29:b6:62:3c:1a:44:7f:a1:c4:64:ce:cb:81:24:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 5 19:05:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5add79f16e51ecf92c91fb3a82313b14afe7dcbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f6:37:c3:ce:af:4d:14:4c:6d:4a:e5:49:e1:
db:75:bb:28:80:78:3d:41:e0:e2:bd:e5:78:d7:30:
c1:ad:05:de:a6:ad:63:57:65:21:0f:78:0f:c5:fd:
0b:98:fe:03:3a:f6:2c:6b:34:fb:7d:c1:7a:f1:e7:
b7:30:ff:c7:28:db:76:de:88:ed:de:dc:0c:31:9f:
d3:3e:ee:b8:66:fe:c3:3c:38:51:d0:ae:cb:16:d4:
fd:4c:1e:3b:27:32:a3:8f:94:51:a1:37:0a:1b:76:
63:54:f2:2a:79:80:17:3c:e3:67:d8:ea:2e:b6:4c:
b4:2f:6b:85:14:f8:0b:83:44:f0:fe:85:e5:34:f8:
eb:ae:7e:11:a7:13:cc:94:74:c3:85:28:ee:db:98:
16:e7:e6:d8:78:5b:ab:da:75:e1:0c:84:91:11:0d:
91:b1:b9:73:22:35:c5:3c:3f:cc:97:43:6d:32:6f:
4d:b4:12:2e:50:5e:8c:f1:7f:a4:39:2f:11:d6:8e:
eb:d6:64:d9:ec:cd:64:a6:d4:4d:f0:6a:16:17:b4:
a5:c9:69:cc:91:92:58:af:f7:d6:ca:4b:15:d6:72:
9d:43:d5:55:49:25:ba:d0:01:95:bf:ad:bc:26:0a:
c5:9e:49:31:e3:b8:b5:92:34:bd:00:76:ae:18:a9:
60:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:DD:79:F1:6E:51:EC:F9:2C:91:FB:3A:82:31:3B:14:AF:E7:DC:BC
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Wt158W5R7Pkskfs6gjE7FK_n3Lw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6d:5d:8a:69:87:d4:56:e3:7e:85:d7:52:0e:96:33:10:00:64:
0b:91:10:cd:15:97:8b:fb:90:57:1d:0a:f9:1c:4b:b0:99:fe:
bc:01:dd:b3:6e:0f:7e:88:b9:82:63:2b:bd:87:b4:2e:d0:a2:
26:27:ea:ce:f1:ce:d0:b6:4f:0a:89:27:5a:f6:4c:bd:69:5d:
6f:84:7d:c3:c2:3b:d2:6f:a4:9a:f3:15:44:fd:06:3d:a6:d2:
42:10:8f:84:f9:d4:cb:b1:cc:f4:ea:58:60:77:87:f5:68:c5:
51:33:73:cc:f9:41:04:5b:df:65:3b:64:05:f8:2d:10:45:8d:
72:56:37:13:e9:5d:fa:ff:7d:80:89:f6:d4:04:af:4a:d5:bd:
da:5a:65:93:7a:0d:f0:07:e1:cd:61:91:c6:28:96:38:28:39:
35:7b:76:80:da:69:c5:b7:40:d2:b6:1b:3e:c1:b4:3d:fa:04:
0e:cc:43:07:e8:f9:4c:d5:20:04:f4:cc:8c:9e:ce:af:e7:45:
d5:7a:87:6f:2f:bc:a7:c8:ad:6d:3a:87:12:9b:49:ef:33:cc:
47:27:bc:3a:63:10:5a:15:df:3e:fc:a9:e1:3f:c5:cd:37:66:
97:bf:39:6a:d6:2a:d1:7e:8b:46:88:3c:f5:19:d0:6c:1f:7d:
40:35:09:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 12:43:22 2025 by rpki-client