Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/rWoZMp2PzvDc0EF-rTSzE1HiG8c.roa
File: rWoZMp2PzvDc0EF-rTSzE1HiG8c.roa (raw, json)
Hash identifier: ywbLrGzbm0MW10hppTvdHdd+ypkbJLdMSjUNN6iKkcg=
Subject key identifier: AD:6A:19:32:9D:8F:CE:F0:DC:D0:41:7E:AD:34:B3:13:51:E2:1B:C7
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01869DB4135C20D2EFCDBA2B93E7553CCD24
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/rWoZMp2PzvDc0EF-rTSzE1HiG8c.roa
Signing time: Wed 01 Mar 2023 15:04:29 +0000
ROA not before: Wed 01 Mar 2023 15:04:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
2001:67c:64:ffff:0:186:9db3:dc27/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:9d:b4:13:5c:20:d2:ef:cd:ba:2b:93:e7:55:3c:cd:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 1 15:04:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ad6a19329d8fcef0dcd0417ead34b31351e21bc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f9:93:37:8c:16:1d:98:dc:0e:e0:3c:fa:ed:
9a:fe:86:5a:bb:e5:9c:29:9f:6e:ee:01:8b:db:5e:
8a:40:c3:fd:45:c9:4e:f3:df:7a:ce:33:9b:29:5b:
e2:bd:a0:25:0a:f4:58:ba:18:4f:7a:32:a1:9e:0f:
32:dc:bc:80:ba:cc:cd:d3:62:cb:96:5b:ec:79:c0:
ad:a2:a7:72:f4:27:9b:b3:a8:16:00:d8:d1:40:0d:
dd:58:6b:2c:c9:28:2d:2f:f8:55:1c:f6:ce:aa:c8:
a6:2a:d9:82:58:bd:7b:06:7c:86:77:e3:4b:ec:8a:
ab:da:01:74:b4:d2:84:8f:c4:b9:93:5a:04:76:07:
1b:0c:5c:29:11:51:99:a9:ab:0d:87:a7:30:7e:21:
4e:ed:1f:d8:37:8f:47:f2:27:f6:08:11:6f:01:5f:
ac:ad:20:17:20:52:d9:72:93:c8:1c:5d:35:4f:41:
27:27:04:4a:16:9e:d1:09:08:c4:8d:3e:b9:21:3f:
2e:98:cd:c6:83:a4:00:fe:ce:98:bf:de:16:c1:df:
e4:14:49:b8:b4:eb:b1:2a:b9:d6:9e:16:fc:ee:4e:
41:23:45:ff:88:da:0e:fa:a6:d0:3d:ab:2d:86:a0:
6e:e3:19:aa:07:05:85:95:53:3d:25:bb:77:23:3d:
70:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:6A:19:32:9D:8F:CE:F0:DC:D0:41:7E:AD:34:B3:13:51:E2:1B:C7
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/rWoZMp2PzvDc0EF-rTSzE1HiG8c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a3:2e:57:eb:85:52:63:4c:5c:89:b5:fb:75:67:e4:41:a5:2e:
5d:0b:1d:83:cd:14:96:76:5a:dc:63:23:67:c9:86:e6:9b:2a:
f1:86:68:f2:ac:40:f8:d3:55:af:fb:f0:18:f2:f0:b4:9d:9e:
ea:96:34:80:5b:0e:87:44:be:f3:f7:13:b7:70:26:f6:17:cf:
f1:ec:de:a9:b2:86:32:8b:af:95:bd:b2:89:26:cd:32:75:d0:
7b:85:c1:d0:64:d4:d9:fe:ae:a1:c3:11:50:af:55:24:3c:e4:
9c:4b:4d:f6:5c:28:5a:ba:03:e4:df:3c:df:ab:ef:b5:cd:3e:
95:fe:69:7d:b0:a0:07:01:39:5c:a2:84:6c:26:0c:5f:44:b7:
73:35:17:86:41:01:28:86:79:43:e8:25:3d:78:e4:61:28:b7:
d3:1c:ff:dc:85:ff:4d:23:e8:8f:94:2a:43:69:33:98:ad:da:
48:69:51:0f:4b:c1:b0:b5:a6:bc:95:ef:c0:b1:31:b0:04:d4:
7f:21:b5:53:1b:b8:23:1b:9a:25:3f:b7:23:09:f9:cf:54:4e:
96:b9:0a:1a:9e:1d:32:e9:21:62:ff:f7:ed:9e:63:b1:67:86:
1c:01:5d:80:3f:c0:bc:ed:8a:0d:1a:f4:84:b8:80:ba:00:e5:
3f:dc:22:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:39:02 2025 by rpki-client