Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_w0oHg_8jVB0-JBNawZpg3Esm9Q.roa
File: _w0oHg_8jVB0-JBNawZpg3Esm9Q.roa (raw, json)
Hash identifier: f1dVW2ff02qfxP0SCNEohdQWzc1LoJnxlH4pdZEM6/I=
Subject key identifier: FF:0D:28:1E:0F:FC:8D:50:74:F8:90:4D:6B:06:69:83:71:2C:9B:D4
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186AE471C4D216626F4DF190EAC03DB48B7
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_w0oHg_8jVB0-JBNawZpg3Esm9Q.roa
Signing time: Sat 04 Mar 2023 20:19:01 +0000
ROA not before: Sat 04 Mar 2023 20:19:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:ae:47:1c:4d:21:66:26:f4:df:19:0e:ac:03:db:48:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 4 20:19:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ff0d281e0ffc8d5074f8904d6b066983712c9bd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:de:70:65:71:e2:c3:b0:90:bf:6d:57:95:66:
92:d8:19:dd:0b:13:51:ed:da:86:e0:08:b8:37:3a:
7b:0b:49:ac:a2:4b:15:28:4c:e7:f1:7f:54:fa:90:
11:37:9c:b9:40:ed:36:07:8d:24:d5:c7:98:6e:94:
3d:7f:f4:7a:df:33:4c:13:53:25:3e:11:c7:e2:86:
8e:b7:21:55:cc:5c:1a:f4:f9:ee:d2:96:ca:e0:62:
e6:49:fd:e3:82:45:fe:7b:2b:51:27:ba:a9:9a:fe:
11:bd:6d:13:04:77:a5:d3:2b:bd:ac:59:2c:ba:05:
e4:f1:cc:f3:32:bd:8b:c4:5d:65:f0:48:48:db:a4:
c4:54:d4:db:82:68:4a:59:9c:98:8c:33:e9:86:a9:
03:57:4b:58:c9:a8:7c:5a:cf:79:2a:e1:90:57:b2:
63:77:36:2a:76:e9:c1:cc:59:ec:c2:32:d3:2f:89:
d6:ac:5c:4f:d9:54:ac:ef:7e:ed:58:6d:e5:bd:c7:
d7:d2:ea:5a:36:28:b2:00:64:cd:95:32:00:1d:90:
7b:e5:a3:d4:b1:82:4e:2e:8a:83:1c:44:d3:f3:f4:
18:46:b6:66:f3:30:87:5d:05:af:00:1d:6a:e3:d1:
ce:82:5e:19:a5:87:92:28:8d:ce:8d:b2:b7:52:2b:
1f:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:0D:28:1E:0F:FC:8D:50:74:F8:90:4D:6B:06:69:83:71:2C:9B:D4
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_w0oHg_8jVB0-JBNawZpg3Esm9Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4e:25:12:75:45:9c:e8:2a:9b:30:09:74:47:12:10:2e:d1:60:
15:93:fa:9b:db:81:0a:eb:cd:9b:70:6d:ef:9a:db:55:22:62:
15:09:f7:e0:fd:54:7a:8d:76:de:c3:51:ea:14:93:64:c9:10:
95:e8:ba:35:1b:55:0b:d6:2f:20:55:7d:ef:1d:13:e4:e0:83:
3d:37:6c:f5:df:80:c1:79:11:36:4e:fe:87:c1:e7:7f:46:fc:
df:69:72:c1:7d:d8:5c:dc:41:31:6b:12:04:20:e1:e6:bc:ab:
87:14:59:11:db:44:bd:68:16:45:aa:3b:a8:fd:2a:ec:94:34:
4c:b1:71:12:ef:f5:a9:a2:fb:ba:0c:71:ff:11:52:72:15:3c:
5a:ba:64:db:39:3c:af:fb:a2:6a:32:59:3f:a6:af:24:cd:57:
77:9e:f8:39:68:e4:c4:00:cc:60:20:4a:66:2a:66:30:a2:e1:
c4:2f:52:d7:b7:e4:ed:50:b3:98:c4:92:2b:63:61:8e:70:92:
b6:3e:1b:c6:ed:12:c3:73:c8:08:fc:75:52:8f:c4:4a:1c:d0:
14:d8:c0:15:60:c1:45:ac:8d:95:a9:9d:29:b5:ee:4d:dc:02:
2e:8e:e7:a8:3c:ad:cd:bb:b5:21:69:fe:85:72:93:2a:75:ee:
38:b2:b4:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:34:58 2025 by rpki-client