Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Wyny1ujXcNTjvHUnPb0btFWH49s.roa
File: Wyny1ujXcNTjvHUnPb0btFWH49s.roa (raw, json)
Hash identifier: YURD+OyQT+7k6Hyr1K/6Q56MQRwH6NzJw/hKRwID09E=
Subject key identifier: 5B:29:F2:D6:E8:D7:70:D4:E3:BC:75:27:3D:BD:1B:B4:55:87:E3:DB
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189FA3116B28256DB28B1DFBF0C62901310
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Wyny1ujXcNTjvHUnPb0btFWH49s.roa
Signing time: Tue 15 Aug 2023 17:14:28 +0000
ROA not before: Tue 15 Aug 2023 17:14:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:fa:31:16:b2:82:56:db:28:b1:df:bf:0c:62:90:13:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 15 17:14:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5b29f2d6e8d770d4e3bc75273dbd1bb45587e3db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:bc:76:5e:96:50:fa:fd:55:a7:bd:7c:f8:cd:
90:2f:d1:6d:be:f2:3d:2c:a5:3c:75:19:c8:d2:81:
0f:51:57:c6:4c:9e:2f:f7:bf:f2:43:d8:06:e1:d6:
25:19:da:2a:70:ea:c5:46:ff:fc:29:18:c1:13:6e:
6d:4e:40:08:0f:de:be:ad:f9:4b:5f:33:28:04:3f:
3b:41:ae:6e:96:5e:c0:8b:b3:b9:18:df:e4:37:88:
21:6e:66:f1:0a:63:4f:09:55:d5:12:84:e4:b1:f9:
df:e3:81:35:56:82:e0:76:36:11:93:35:2d:45:86:
29:96:12:66:ea:13:ee:3c:b1:28:b9:25:cf:b7:6a:
b0:a6:df:68:1d:2c:df:9d:ba:eb:c3:8c:36:87:a4:
6f:de:be:85:45:70:2d:b9:6b:39:e7:2a:02:ba:71:
93:40:01:e0:91:15:de:42:c7:12:a0:06:5c:82:68:
b5:60:2f:1a:15:1e:d7:31:8e:b2:a9:75:40:4c:d5:
b1:7d:b2:be:7d:a2:64:3f:49:d0:5a:79:50:b7:30:
71:f8:87:9c:50:f5:c5:69:d8:e0:5c:02:ce:eb:7f:
7f:8f:86:93:a9:67:84:bf:3a:a9:45:b8:48:ec:10:
ce:79:19:21:ae:4b:ae:6e:8a:3b:ff:bb:33:1c:10:
af:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:29:F2:D6:E8:D7:70:D4:E3:BC:75:27:3D:BD:1B:B4:55:87:E3:DB
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Wyny1ujXcNTjvHUnPb0btFWH49s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
68:74:1a:38:1f:df:cd:76:7f:1c:c4:b1:94:17:0f:df:14:64:
20:fa:ea:67:f7:6a:51:f5:aa:61:9e:26:d7:c8:a1:b7:60:58:
10:c2:03:b0:b9:4b:11:8e:89:c5:d8:70:d1:7e:38:26:b2:db:
2c:47:54:36:b4:33:12:73:99:a5:47:1b:cd:c5:90:4e:a6:95:
3d:39:52:7f:e1:5c:47:02:7d:0e:83:87:3f:be:94:0a:2d:dc:
6e:72:a0:44:92:0b:62:bc:43:29:8b:7b:b2:f4:d2:46:31:ed:
a0:0a:0f:84:68:54:ee:57:6f:8d:37:06:e0:d1:9d:74:b5:8c:
19:8e:58:eb:d0:8a:6e:82:49:b3:a5:33:33:51:ca:52:f9:a7:
18:92:f1:7e:3b:8d:35:78:61:91:bc:38:ce:fd:44:36:25:34:
93:e3:af:0c:95:ec:b7:e5:82:a0:c3:e7:c9:bb:c9:37:ff:27:
d8:e9:ad:b3:ac:d0:d5:13:2e:e7:96:f8:63:59:4d:51:62:ca:
da:cd:6b:76:34:ab:e5:71:35:14:8c:b5:bd:9d:0f:cb:61:93:
57:8e:49:5a:bf:81:66:70:e7:b6:3f:39:d6:cf:f4:6d:bb:65:
d9:1f:66:d9:ae:ce:1c:66:4e:e4:95:58:e8:b1:16:00:1d:e0:
9f:93:0a:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 20:09:02 2025 by rpki-client