Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/WzuALZyYRf7-Sai6AAZT-wk2c4I.roa
File: WzuALZyYRf7-Sai6AAZT-wk2c4I.roa (raw, json)
Hash identifier: vX2bV3Z7hfrXwU5Jxi19vHnaYaNG31NmhdK5ABWMSv0=
Subject key identifier: 5B:3B:80:2D:9C:98:45:FE:FE:49:A8:BA:00:06:53:FB:09:36:73:82
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018750A970FDEABA74083D5901A82FD7CDDC
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/WzuALZyYRf7-Sai6AAZT-wk2c4I.roa
Signing time: Wed 05 Apr 2023 09:04:54 +0000
ROA not before: Wed 05 Apr 2023 09:04:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:187:50a9:57/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:50:a9:70:fd:ea:ba:74:08:3d:59:01:a8:2f:d7:cd:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 5 09:04:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5b3b802d9c9845fefe49a8ba000653fb09367382
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:b8:4c:cd:9a:04:53:13:77:b7:f4:2a:d1:8e:
0c:b0:b0:18:54:f3:52:2e:61:f8:b0:a1:20:92:8e:
03:4f:f9:87:bd:df:26:e8:32:f8:84:63:a2:d4:80:
cc:48:5c:de:95:34:a3:a6:a0:73:33:c5:e5:d3:26:
0c:68:10:0c:c9:a1:4c:f0:d0:5e:e6:69:86:95:aa:
30:37:b5:b5:13:fd:6e:3d:1c:10:c4:10:29:28:b2:
b6:06:ec:da:df:11:19:f1:3e:38:ad:5d:d7:7d:33:
91:08:20:79:e5:3d:de:f2:0f:ed:b2:81:6c:f9:38:
93:22:21:d5:86:cc:d7:a7:82:04:28:01:66:a7:3f:
5e:d0:39:4b:45:6c:a4:09:7c:01:65:08:b2:57:6d:
a2:68:f0:3b:01:92:db:7c:06:8d:e4:dd:52:7a:33:
e3:c3:18:c1:06:b4:53:17:60:84:6a:13:f8:c1:96:
78:cb:e3:f1:3e:76:09:1f:fb:52:43:71:61:7c:e9:
b3:eb:11:a4:0a:a7:43:64:1a:b8:61:55:8d:55:3f:
04:21:48:cb:a3:01:20:84:a9:e9:fa:4a:89:b9:19:
a6:90:1d:ed:93:3b:59:c5:78:f0:41:c9:8d:95:9b:
ca:a4:49:ca:49:2b:32:5e:c2:21:44:b7:40:df:98:
5d:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:3B:80:2D:9C:98:45:FE:FE:49:A8:BA:00:06:53:FB:09:36:73:82
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/WzuALZyYRf7-Sai6AAZT-wk2c4I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
00:e7:4b:45:7d:68:52:2d:13:f1:fc:cf:4a:10:1e:c1:bf:47:
ef:77:ad:e4:2a:9b:fb:06:99:0e:7f:84:2a:cb:b8:99:d2:f6:
ce:73:58:8f:5f:61:82:8f:51:ef:7a:00:17:75:91:fe:3d:d0:
bf:0d:98:af:05:c2:dd:d4:45:96:d5:9d:7b:8f:ca:61:5a:8e:
74:d6:7d:41:e3:1f:b1:5c:56:85:bd:ea:9b:2c:4d:96:bf:3b:
f1:9d:d7:b4:03:e9:3a:4b:1b:44:3a:60:b3:76:dc:b4:f1:84:
fd:6a:cf:0f:17:b2:a4:02:6d:63:b9:8a:fc:08:ae:15:9f:ea:
cc:50:d4:28:f9:96:ec:07:23:cc:bf:3a:d4:b9:47:86:f7:90:
6b:bf:e7:5b:00:dd:f7:08:fd:c9:11:61:06:9d:10:48:f8:c0:
4c:2c:3c:3a:f6:a8:30:aa:89:23:a9:5e:b6:e9:9d:fc:6e:2f:
c6:4c:46:f4:13:59:5a:b1:59:33:8e:d1:ba:5f:2f:d9:cf:92:
5a:e6:01:3f:ec:c3:15:5c:6b:58:cd:f5:d1:10:0f:59:68:7b:
48:07:79:ed:28:14:2f:e8:58:ab:59:73:80:f6:51:9a:2e:9a:
96:b2:09:ca:45:73:80:24:15:4d:31:56:b0:d6:4f:69:5b:e5:
fe:4c:ce:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:40:42 2025 by rpki-client