Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Ww7GRHIJfKpP5gNQceIuhh2xkjo.roa
File: Ww7GRHIJfKpP5gNQceIuhh2xkjo.roa (raw, json)
Hash identifier: sEu5h7Y1J/3ePA9Bz+yMhOJqvB6ggFzJQL0MKWNWXkg=
Subject key identifier: 5B:0E:C6:44:72:09:7C:AA:4F:E6:03:50:71:E2:2E:86:1D:B1:92:3A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189BF629F550E061B39E44B7A9E2626F7AD
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Ww7GRHIJfKpP5gNQceIuhh2xkjo.roa
Signing time: Fri 04 Aug 2023 07:10:58 +0000
ROA not before: Fri 04 Aug 2023 07:10:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:bf:62:9f:55:0e:06:1b:39:e4:4b:7a:9e:26:26:f7:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 4 07:10:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5b0ec64472097caa4fe6035071e22e861db1923a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:05:4a:31:9d:d2:93:d1:86:a0:75:b8:7a:d6:
72:3f:9a:12:0c:f9:9a:cf:d1:5d:b2:49:2b:7c:51:
d6:8f:54:0b:cf:1a:53:d1:4a:9b:77:07:86:e0:20:
1f:d2:fa:ed:8e:28:eb:78:88:da:85:46:20:40:69:
56:07:d1:d9:bd:88:60:b4:15:40:f8:f4:66:02:c2:
51:cf:63:f8:23:54:a2:e3:d0:15:91:21:90:55:c3:
d1:62:7b:af:da:9b:34:0a:ae:73:1d:64:21:7f:a2:
3e:86:5d:98:47:17:58:d4:f4:8a:fd:07:5f:23:0b:
97:38:91:e3:20:1c:da:49:83:98:f0:02:98:36:ea:
60:f2:0e:b9:c2:cb:6b:b5:7d:4f:81:56:73:49:fc:
76:d3:a7:ba:1e:b1:57:29:8d:e0:9b:43:c4:e5:7a:
df:ea:45:c5:9d:15:de:a9:1a:db:04:a1:aa:ad:96:
a0:ea:65:31:79:2d:61:60:d0:02:75:1f:ef:76:59:
3c:1a:f5:43:1d:24:ed:99:d0:90:90:91:e9:5e:b3:
14:cd:76:bf:cf:cb:01:b3:d9:07:be:53:42:86:62:
10:25:60:1a:2f:66:29:bf:e7:62:a4:50:55:7c:1e:
33:0b:4f:14:bc:6a:dd:a4:ec:f3:24:aa:7a:e0:53:
14:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:0E:C6:44:72:09:7C:AA:4F:E6:03:50:71:E2:2E:86:1D:B1:92:3A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Ww7GRHIJfKpP5gNQceIuhh2xkjo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
26:d9:4f:8f:5b:9c:d5:e1:06:7e:12:af:55:4a:8a:5d:de:ed:
e8:b0:30:e8:5c:44:b5:c8:c7:86:31:76:4a:53:a6:32:42:3b:
a7:e7:ad:6b:6a:e4:b3:12:e0:c3:d9:97:b3:f4:0b:a0:c6:c6:
da:de:42:7c:93:e1:40:a4:ba:d3:97:37:93:a0:76:07:07:5c:
39:65:84:ff:3f:6d:c4:00:e6:08:05:97:3d:61:5e:eb:e3:a0:
b2:5b:18:7b:78:57:57:9c:f2:07:37:db:75:89:6f:2a:e8:5b:
37:3c:45:13:84:ca:51:22:89:17:18:30:95:8f:13:c8:e3:83:
dc:d4:a5:67:33:e2:cb:f7:e3:14:7b:7c:89:9a:c2:6e:8a:8b:
8d:69:8c:db:d0:93:e6:9b:b2:84:95:66:dd:ff:41:c7:d7:6d:
46:b4:72:ac:32:89:13:63:93:a6:e1:a5:b8:e0:02:ee:8b:4a:
9c:40:06:86:15:e2:7f:fd:aa:6f:2b:fb:c8:1c:ed:fd:c5:36:
3d:70:99:cf:d8:59:b6:57:51:9e:4c:48:bf:98:0c:64:fb:2c:
e5:37:3c:d1:6a:58:79:63:35:3c:72:55:a7:67:02:2f:8b:55:
fc:c9:1a:95:9a:3c:07:43:82:b2:51:df:6d:6d:8a:8e:97:bd:
71:67:d3:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:54:20 2025 by rpki-client