Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_wXm4Sm0Tnrlc-foDPU3Van2nUY.roa
File: _wXm4Sm0Tnrlc-foDPU3Van2nUY.roa (raw, json)
Hash identifier: nt8kJ2fJuCU8LzEz1NXEDFrKm/yXNoRjSmkd3y9DkcM=
Subject key identifier: FF:05:E6:E1:29:B4:4E:7A:E5:73:E7:E8:0C:F5:37:55:A9:F6:9D:46
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018948F2FD7FB4F23087A9186C4500508222
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_wXm4Sm0Tnrlc-foDPU3Van2nUY.roa
Signing time: Wed 12 Jul 2023 07:13:51 +0000
ROA not before: Wed 12 Jul 2023 07:13:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:48:f2:fd:7f:b4:f2:30:87:a9:18:6c:45:00:50:82:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 12 07:13:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ff05e6e129b44e7ae573e7e80cf53755a9f69d46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:7a:bc:6b:4d:00:6d:ae:7c:81:ea:09:98:f2:
03:c8:74:59:cf:0d:3e:68:90:0f:3a:05:7d:92:c4:
75:bb:f8:d6:3e:aa:b4:92:4a:cd:c9:58:c1:a0:c1:
42:9b:99:1e:10:51:e1:e0:5b:37:03:91:90:b0:da:
5a:04:c9:bd:6f:f4:69:53:d9:16:f9:7b:eb:4b:4e:
7e:93:91:27:17:4b:9c:ef:69:a8:76:a1:14:23:6d:
fe:83:f7:9b:09:79:c5:85:dc:63:1b:83:fc:5b:b7:
7a:a0:65:2b:b9:29:43:d5:72:48:3f:fb:69:85:2d:
7e:c2:aa:a8:4e:f1:3d:8d:33:94:41:32:6f:55:fc:
0b:fb:3d:39:00:0b:14:7e:ee:58:69:7c:8d:a2:87:
40:13:24:24:81:6c:be:de:f2:2f:02:00:30:fa:ff:
db:a0:c7:cf:93:1c:cd:1f:ab:ae:ed:a4:3d:97:5d:
0e:32:2c:28:92:1c:a3:8d:45:6f:06:1e:2f:5e:66:
dd:58:1b:ff:b5:2d:84:89:15:66:35:ec:6d:a3:aa:
67:98:e8:db:c0:d1:6a:b8:02:f3:2a:e5:ae:23:f8:
8a:af:91:eb:f0:fe:5b:ef:b8:b7:50:b2:68:1f:e3:
91:3e:08:43:ea:9a:28:4f:c8:0c:43:a8:c9:10:56:
c4:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:05:E6:E1:29:B4:4E:7A:E5:73:E7:E8:0C:F5:37:55:A9:F6:9D:46
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_wXm4Sm0Tnrlc-foDPU3Van2nUY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
30:cc:f5:34:1e:56:f6:c1:b0:d0:e3:ae:71:53:6a:57:8d:24:
ac:8f:83:9b:56:ba:66:d5:07:6e:9b:ac:08:05:8b:fe:5a:28:
e7:ed:7d:b9:62:24:d1:a8:ae:38:5e:81:8c:1d:9a:d3:c3:df:
1c:94:34:a9:9b:04:86:0e:4c:80:d7:59:60:2d:03:7e:df:88:
53:7a:a0:2d:27:38:12:7a:44:4f:e7:10:f6:02:af:16:77:a2:
c1:06:4c:b2:40:1e:47:35:92:ce:5d:c6:32:42:ee:11:22:41:
56:13:22:5d:80:db:25:e5:04:32:fa:ba:ea:3c:20:fe:e7:63:
c0:d2:4d:1a:a4:0e:c7:5a:2c:bc:7e:f3:57:62:e1:2b:3a:5c:
27:31:6b:f6:93:8c:9b:99:9a:e8:ee:be:ed:e1:b6:dd:72:c3:
fb:ff:49:71:cc:af:e5:2d:b1:be:4b:8f:eb:59:f7:52:58:8a:
72:24:ea:bd:25:9d:e0:b7:6f:20:46:8c:3d:20:3b:28:b1:15:
e5:75:cc:6f:a0:8e:f6:cb:97:a1:9b:bf:c4:2a:74:a8:e7:6f:
d1:7e:78:65:96:b7:a4:c4:74:74:1b:97:0b:38:58:06:d1:23:
6e:d6:6c:03:e6:fc:89:01:b8:c9:07:3b:e4:b2:ff:45:c0:69:
3d:d2:32:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 06:05:43 2025 by rpki-client