Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/WygJhuT7LR5I6H6dCbwC6_zR8Ug.roa
File: WygJhuT7LR5I6H6dCbwC6_zR8Ug.roa (raw, json)
Hash identifier: 1hM27qf8wLvYBOm/WINrJ+PA5GsDfLewjLa6CazgMCw=
Subject key identifier: 5B:28:09:86:E4:FB:2D:1E:48:E8:7E:9D:09:BC:02:EB:FC:D1:F1:48
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01874D7178635A6FA8F889E5F05BBBCD6B79
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/WygJhuT7LR5I6H6dCbwC6_zR8Ug.roa
Signing time: Tue 04 Apr 2023 18:04:54 +0000
ROA not before: Tue 04 Apr 2023 18:04:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:4d70:edf5/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:4d:71:78:63:5a:6f:a8:f8:89:e5:f0:5b:bb:cd:6b:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 4 18:04:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5b280986e4fb2d1e48e87e9d09bc02ebfcd1f148
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:96:23:f0:07:79:e8:83:9b:c9:47:69:a7:cb:
a4:cc:44:24:af:2c:d2:14:b5:65:0f:c6:38:0d:23:
f6:ea:19:25:b4:dd:33:35:cf:eb:1e:b7:39:51:cf:
df:30:bf:6c:fa:b5:4d:df:46:13:e5:6c:c4:c4:e1:
ac:ec:9c:4c:8e:9d:7c:72:40:6e:8a:a8:d1:a5:21:
f4:c2:1a:27:a9:25:ea:d5:0e:d6:b9:ec:30:7c:f2:
25:27:05:9f:43:f9:64:d3:2f:ff:e9:77:9b:fd:9e:
a2:bb:df:8e:0e:d1:60:94:97:97:d6:2c:37:2f:d1:
28:36:24:11:3f:9a:5b:34:2e:65:36:11:4a:ee:f9:
b8:8e:cf:89:6c:54:8c:4d:f0:ba:ed:73:00:64:a2:
20:ef:a1:2b:21:fd:13:d5:a0:97:fe:58:05:ea:b6:
18:78:e1:3b:6a:23:4c:d3:72:e3:b0:de:53:47:bd:
bc:e3:97:d6:07:4f:f9:b5:90:c7:fe:84:d4:dc:9c:
04:f5:a2:72:fd:ff:c2:79:ce:63:77:ca:28:37:e5:
34:6f:0f:f0:8f:72:dd:fb:25:49:79:99:32:66:3f:
1a:01:d8:d1:d7:83:e6:c5:f3:d7:a8:0c:96:cd:6a:
ad:bc:1d:83:6c:e0:5e:fa:0b:48:39:e2:65:b9:b3:
a7:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:28:09:86:E4:FB:2D:1E:48:E8:7E:9D:09:BC:02:EB:FC:D1:F1:48
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/WygJhuT7LR5I6H6dCbwC6_zR8Ug.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6c:ed:fe:b4:e6:34:e6:64:6d:dc:bd:1a:03:13:c0:d4:05:1b:
0d:d2:c0:e6:70:16:8c:f0:ed:3f:af:ba:f3:df:14:db:ee:9f:
bb:31:3b:fe:60:5e:20:13:4c:83:93:7d:b1:34:6b:71:6e:22:
2e:36:b4:92:93:b5:ff:bf:33:56:02:8b:75:00:ff:f6:11:54:
96:cf:0b:62:9f:4b:3f:1d:17:96:77:3c:66:c2:6b:24:24:db:
5f:6b:99:bb:5c:d1:60:f8:fd:98:96:05:44:52:65:e0:f3:f9:
a8:9d:57:bf:92:67:5f:4c:12:b3:f5:f4:ff:99:dc:9f:24:c9:
82:e1:e9:3a:88:23:bb:0a:d7:61:5e:bc:52:18:ee:03:09:23:
fa:45:fa:1a:11:84:d9:4a:2e:5e:d5:98:1e:82:26:a3:06:45:
d1:a0:3a:0b:4b:b5:6a:e7:64:ff:d3:f4:ba:a4:47:f6:d9:eb:
ee:8e:c5:50:b2:94:98:f2:79:4d:39:6b:c0:f4:f0:18:0c:12:
a4:a9:8e:5c:de:27:83:c9:ba:d2:c3:0e:af:ba:dc:04:97:d0:
ed:51:10:8c:51:c2:88:47:f9:cd:7b:78:58:ed:c9:e9:6c:22:
67:4f:9c:9a:89:63:2a:c5:07:69:3f:2f:f8:b6:dd:de:3b:d6:
81:96:a2:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:50:47 2025 by rpki-client