Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/m0whyV1-CdGhDXbCp9w_xPrXrE4.roa
File: m0whyV1-CdGhDXbCp9w_xPrXrE4.roa (raw, json)
Hash identifier: Aj7bVFkz1hEBY2hUcXhJveW+2TmEBXqeUdSO6fgll9w=
Subject key identifier: 9B:4C:21:C9:5D:7E:09:D1:A1:0D:76:C2:A7:DC:3F:C4:FA:D7:AC:4E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A2881F3334280F5A74B4027C72665AAF4
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/m0whyV1-CdGhDXbCp9w_xPrXrE4.roa
Signing time: Thu 24 Aug 2023 17:05:19 +0000
ROA not before: Thu 24 Aug 2023 17:05:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18a:2881:21b3/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:28:81:f3:33:42:80:f5:a7:4b:40:27:c7:26:65:aa:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 24 17:05:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9b4c21c95d7e09d1a10d76c2a7dc3fc4fad7ac4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:20:2c:91:d6:48:0e:9a:7f:ab:7d:c1:65:3e:
a4:b8:5b:53:41:43:8f:1e:6f:8b:b8:db:fa:ec:85:
d7:63:e0:65:e5:d1:69:3c:14:00:6f:a9:c6:1b:83:
e7:5a:d9:a1:09:f3:14:4b:ea:a7:0d:08:77:6f:e7:
eb:f4:8c:f1:65:5f:53:8a:01:9e:37:e8:0e:1e:43:
7f:11:ce:1f:20:9b:5f:70:ef:8c:3c:b9:68:2f:ee:
21:f6:4d:a7:dc:f7:2b:05:0c:c2:fe:82:99:5f:6e:
eb:2a:5b:69:2c:57:9e:8e:a9:e8:60:07:ed:87:25:
e6:23:f0:33:57:72:15:11:b8:6d:7c:53:3a:15:bd:
aa:44:ae:c6:39:7a:4f:f4:10:94:17:c9:8f:18:93:
00:d8:1c:5c:e7:d8:af:46:92:64:64:2a:49:92:e9:
53:cd:c5:48:c1:4f:94:67:63:a5:c9:bd:7b:30:b5:
98:7a:7c:e9:d4:8d:1b:4a:bc:b1:d9:1a:ea:d3:da:
8b:f3:8d:16:45:92:c3:fa:51:13:e2:05:6e:ce:96:
bb:8c:a6:73:d6:7f:98:63:ce:aa:5c:42:36:e5:70:
e9:47:eb:00:3f:ca:1f:39:11:94:93:3d:6e:2b:7d:
fb:68:00:d9:ae:22:c9:b9:ce:2d:9d:da:50:5b:f0:
e6:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:4C:21:C9:5D:7E:09:D1:A1:0D:76:C2:A7:DC:3F:C4:FA:D7:AC:4E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/m0whyV1-CdGhDXbCp9w_xPrXrE4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
43:71:1c:ee:01:4c:3e:b6:bc:88:bd:f0:70:02:5b:75:f7:bc:
ea:19:6e:b4:dd:ad:bc:9a:ce:84:e8:cf:99:4b:0e:e5:8f:df:
b8:82:f7:7a:56:f9:70:38:73:e2:b0:47:fa:ab:43:88:b8:54:
9f:66:59:ee:6b:31:25:de:4d:65:30:51:be:f5:cd:f7:f7:1d:
be:af:57:ab:e5:16:9e:86:ed:d2:f5:df:41:26:54:db:52:2c:
33:46:91:1b:77:29:df:75:19:c5:21:60:fa:5f:fe:4e:36:d9:
72:e3:ca:83:a9:3f:16:e9:47:c8:79:96:3e:a2:e0:6a:52:3d:
66:e7:8b:e0:f9:06:5d:0c:06:03:19:28:81:c9:eb:b3:0f:33:
f8:ef:46:54:5b:9e:44:24:fc:88:f5:e2:d3:71:ec:19:54:fd:
90:35:f8:08:40:ac:5c:59:b6:06:4e:21:b4:c1:5c:da:03:77:
c6:0b:09:f5:63:b1:db:91:14:0a:97:9c:e6:56:87:cb:7e:58:
8c:42:44:f8:f9:b4:39:df:ef:68:43:9d:ce:ae:d8:7c:6a:21:
20:e5:87:fb:f4:04:e8:17:28:28:00:eb:76:f2:a0:98:bb:03:
f4:50:c8:85:86:e0:51:79:e7:6c:17:63:54:10:18:8b:ec:dc:
12:22:10:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:13:48 2025 by rpki-client