Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/WxVRokKgPrgY2Ud4e3N2k7zfv10.roa
File: WxVRokKgPrgY2Ud4e3N2k7zfv10.roa (raw, json)
Hash identifier: HEDW/7mDSS7HelD2BiA9OJoBGUCwECwpRzzDUtYHTfw=
Subject key identifier: 5B:15:51:A2:42:A0:3E:B8:18:D9:47:78:7B:73:76:93:BC:DF:BF:5D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189823C727C4321BC33329DF12E350E14DE
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/WxVRokKgPrgY2Ud4e3N2k7zfv10.roa
Signing time: Sun 23 Jul 2023 10:12:26 +0000
ROA not before: Sun 23 Jul 2023 10:12:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:82:3c:72:7c:43:21:bc:33:32:9d:f1:2e:35:0e:14:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 23 10:12:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5b1551a242a03eb818d947787b737693bcdfbf5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:7d:b6:d2:5a:f3:88:45:fb:00:fb:84:d5:4b:
5f:fe:41:d1:e3:b5:5f:e4:21:19:18:ce:b6:19:23:
64:6d:65:10:37:ae:39:38:ad:0f:58:fb:1f:8a:d1:
27:bb:ec:d2:da:2d:33:aa:37:b6:b5:06:e3:f4:b8:
ae:54:2a:5c:9c:f2:f8:c0:cd:68:cf:1b:a8:1d:bc:
56:ed:5f:55:ce:8c:da:74:5a:0a:9e:45:c8:88:45:
46:28:b9:43:3b:6e:a1:4f:ee:45:77:c6:f7:4c:6a:
6f:02:9d:07:2f:c5:8f:e8:47:c7:52:07:b8:ff:5d:
ff:e0:06:c0:b5:f4:7c:2a:a2:1c:8d:3d:98:24:ca:
2f:5a:86:c1:3d:e3:d9:95:d4:b6:be:b4:1e:38:c1:
66:1a:b8:50:77:1f:b9:a4:8f:90:8a:6a:ca:30:25:
c7:37:62:28:f8:e3:1b:59:89:ff:41:23:a3:d5:7d:
6d:18:e9:4a:dd:be:15:84:b0:30:55:2e:4c:5c:79:
31:13:8d:ef:f2:a1:0f:9b:b3:5b:1d:23:dd:39:cb:
a6:52:0c:23:39:84:b5:15:32:ce:5a:ef:5a:74:17:
3c:02:bf:bb:3c:1e:b4:c9:69:6a:6f:16:4c:2d:56:
00:52:49:90:4b:7a:a4:e1:e2:7a:4f:e1:34:52:59:
42:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:15:51:A2:42:A0:3E:B8:18:D9:47:78:7B:73:76:93:BC:DF:BF:5D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/WxVRokKgPrgY2Ud4e3N2k7zfv10.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
91:c6:30:59:24:c1:74:ed:ca:77:02:97:d0:b1:52:ce:2d:2b:
4a:51:fa:14:ce:64:f5:c0:bd:16:1d:2c:db:8f:1c:ea:24:b6:
7d:e2:82:81:45:bb:75:d6:dd:17:fa:6a:2a:27:af:93:17:1f:
9a:7b:d9:b7:09:0e:99:af:ef:2c:1f:73:65:23:ae:76:4e:39:
06:84:0e:a8:6b:ef:74:19:04:f0:ab:a9:9f:b4:21:25:1e:6f:
b4:e9:ff:85:cc:3c:73:d4:7e:94:e9:94:8c:38:98:f8:e1:83:
8f:05:07:93:b1:14:71:15:48:b5:22:86:6b:58:17:db:e0:b1:
4d:bf:23:d8:36:89:c2:21:b0:d7:fc:f7:2e:06:41:9f:79:f8:
c9:f9:c1:a4:f6:e1:60:8d:e1:01:47:25:cb:95:73:d9:26:f3:
8a:2f:3f:93:ec:22:8c:1b:21:ac:3e:07:23:5e:25:65:c7:f5:
35:d4:c7:d9:e8:cf:7b:46:09:21:ac:23:03:bf:c0:5e:d2:03:
2e:64:91:9c:b4:b3:c5:92:37:64:5a:a2:93:d7:87:03:c3:5f:
21:cb:90:69:cd:20:b9:ea:fd:38:2f:65:c2:fd:39:7d:d5:04:
c0:d8:f8:04:1d:24:ee:9c:0b:e6:34:f3:22:50:96:71:57:a5:
83:55:b0:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:24:57 2025 by rpki-client