Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_WipHMlMTC7CeQmHxbRRmmJPPRM.roa
File: _WipHMlMTC7CeQmHxbRRmmJPPRM.roa (raw, json)
Hash identifier: BIn2XNAsRLx0qjh4H25s1uzRoGyMohQ3GL631+4DvV8=
Subject key identifier: FD:68:A9:1C:C9:4C:4C:2E:C2:79:09:87:C5:B4:51:9A:62:4F:3D:13
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018356C193CEB329DF574D1B5DD1C7119BCF
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_WipHMlMTC7CeQmHxbRRmmJPPRM.roa
Signing time: Mon 19 Sep 2022 17:17:50 +0000
ROA not before: Mon 19 Sep 2022 17:17:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:183:50b3:5643/128 maxlen: 128
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:183:1279:659d/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:56:c1:93:ce:b3:29:df:57:4d:1b:5d:d1:c7:11:9b:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Sep 19 17:17:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fd68a91cc94c4c2ec2790987c5b4519a624f3d13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:42:cb:ab:7b:92:40:c7:2c:8f:a4:01:cd:07:
4e:7d:30:3e:16:72:dc:8e:a7:08:54:0c:66:3a:fa:
0d:d1:90:64:62:10:31:31:77:04:84:e1:95:be:0a:
1d:7c:7d:87:10:e5:5e:60:c5:1a:1e:e3:c3:ad:9a:
86:33:b9:74:6f:d8:2f:57:7e:c5:72:03:9a:07:36:
24:d0:b2:68:ac:d0:90:b5:7a:7f:2d:98:b6:7b:6e:
65:3c:62:9a:12:b4:c9:5e:be:2d:df:07:f0:d9:34:
66:89:d2:7a:42:55:5f:42:3e:de:53:4e:03:bb:01:
c1:6a:83:48:f8:c2:fb:94:fa:a8:66:f3:a3:70:fe:
04:48:ba:22:90:c1:99:4c:a9:59:63:e5:33:f3:d1:
4f:b8:60:a3:ce:96:43:1a:e2:6b:7c:3f:0d:6b:cf:
f5:23:38:ac:fe:4d:f6:eb:94:27:a5:93:04:20:c8:
9f:05:86:f4:8d:f0:bd:cc:b3:f2:28:1a:a8:5b:8c:
3b:85:28:0c:ec:4e:b3:cd:e4:3d:55:4a:54:b3:3b:
81:37:d4:c8:f9:a7:da:c3:cf:ca:22:87:17:86:33:
75:a3:fb:ab:87:a6:ee:d2:60:a7:d6:1a:59:e9:b0:
f9:a1:82:49:5a:72:6d:5c:02:53:7c:4d:fd:80:71:
ba:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:68:A9:1C:C9:4C:4C:2E:C2:79:09:87:C5:B4:51:9A:62:4F:3D:13
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_WipHMlMTC7CeQmHxbRRmmJPPRM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
83:08:31:74:74:0a:45:13:17:43:78:95:a5:d5:fe:7f:21:a7:
a5:93:58:5b:32:4f:70:ff:47:51:b6:53:c1:29:8d:15:d4:1a:
6e:fe:ce:e4:7a:ba:ae:10:a6:8b:f7:c0:d7:1b:e8:d5:3f:a3:
4f:55:62:95:db:ee:d0:d1:45:00:57:4d:f8:ae:82:7b:52:99:
42:e1:56:74:ff:c5:fa:7e:0b:5c:97:50:dc:68:1f:cb:c2:31:
ca:24:74:06:97:90:32:f1:f7:81:21:32:3f:e0:af:fe:1b:aa:
a4:2d:00:fa:12:60:7d:d0:44:bf:3a:52:25:bc:c8:b4:7a:e9:
12:7d:ca:86:64:97:88:56:c0:d3:ba:29:c4:b7:3c:42:4f:48:
3c:62:a0:9c:f5:ed:36:5f:39:86:3b:fb:7a:f8:41:fb:db:df:
83:11:97:3d:bd:76:e7:00:3e:43:dd:c3:05:cb:8b:f9:ba:61:
3d:48:e5:b7:6b:8e:6b:00:a7:d7:c3:1d:7a:59:78:c4:a3:85:
eb:3a:57:6c:b4:32:5a:01:86:df:34:23:7c:2e:b0:84:2a:1f:
c8:1e:62:19:ba:ad:ab:40:8d:96:89:32:52:af:96:53:0a:85:
8e:f4:17:06:72:16:c3:52:6b:3e:cb:af:6e:45:78:40:78:77:
7b:17:51:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 12:06:33 2025 by rpki-client