Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/w-rgMJeCX2o2cyfZzYfceZvt5wM.roa
File: w-rgMJeCX2o2cyfZzYfceZvt5wM.roa (raw, json)
Hash identifier: SkfFnCjQmoBleIPiAIafn+430ORDXRuByjlz0R50y4c=
Subject key identifier: C3:EA:E0:30:97:82:5F:6A:36:73:27:D9:CD:87:DC:79:9B:ED:E7:03
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018293B0EC740904F47907F94769C70E7036
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/w-rgMJeCX2o2cyfZzYfceZvt5wM.roa
Signing time: Fri 12 Aug 2022 20:13:41 +0000
ROA not before: Fri 12 Aug 2022 20:13:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:93:b0:ec:74:09:04:f4:79:07:f9:47:69:c7:0e:70:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 12 20:13:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c3eae03097825f6a367327d9cd87dc799bede703
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:5d:d0:61:90:7d:c2:8d:14:da:1f:78:cd:0c:
23:38:22:c8:0f:2b:ff:dd:95:fe:24:d4:20:f8:04:
88:bf:50:a8:8b:78:aa:76:7f:70:0f:ba:23:4f:d5:
a2:86:ff:a2:04:ef:f9:88:1c:d9:f0:b7:fd:68:09:
78:a2:b9:10:c4:6a:80:20:af:3f:f3:89:5a:6c:34:
58:73:8a:cf:f5:ce:ad:11:1c:57:e9:e2:5c:df:fd:
79:70:14:b1:44:4c:57:2d:e0:ac:c5:e3:ea:5f:73:
2e:79:68:19:9a:64:34:26:c4:97:cf:eb:53:91:25:
e8:49:a3:1a:b5:1c:1d:ae:a3:e9:87:b5:d0:c3:c7:
61:99:7c:12:90:f6:be:f6:8c:63:67:b2:18:ea:1b:
a3:b7:68:5a:7f:19:61:b1:54:40:39:2b:78:85:ec:
9f:eb:bb:ae:7c:5a:ca:82:a1:71:c2:25:a2:70:4d:
0b:99:2c:bc:a7:33:6f:7c:5c:c4:8b:c6:df:83:4b:
04:d7:14:72:55:5e:2e:97:2b:27:9b:c6:2f:2f:4e:
1a:db:2c:5e:26:66:ec:96:f1:1e:8a:71:73:08:16:
a8:ea:fa:0b:27:2e:32:b7:f8:91:8d:6f:d8:76:f7:
fb:c5:7e:a0:7c:30:86:f0:df:fe:db:cd:c1:73:9a:
6f:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:EA:E0:30:97:82:5F:6A:36:73:27:D9:CD:87:DC:79:9B:ED:E7:03
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/w-rgMJeCX2o2cyfZzYfceZvt5wM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a1:58:c6:ba:f5:08:5f:87:f7:75:bf:4b:6b:e9:17:38:7a:af:
e4:57:ca:9e:a4:51:fe:b4:34:e8:f5:4a:d3:3a:2a:32:ff:1e:
bd:b9:52:af:10:75:db:6c:d3:a0:50:f1:50:28:b5:b6:ad:c9:
2d:cf:8e:4b:76:b2:02:1c:69:3b:90:d7:71:70:10:0e:d9:c9:
3c:a6:8d:cd:68:59:e1:84:39:1c:78:68:74:73:6b:ab:bd:7f:
38:99:e6:22:bf:3f:6c:3f:af:46:36:70:3f:a4:da:ae:8f:56:
33:26:5b:e3:98:2e:a9:df:98:eb:82:e2:aa:63:39:9f:14:a6:
86:bc:45:58:a3:4b:62:95:df:93:e0:3d:5f:65:1a:15:3a:10:
84:e6:c5:2a:41:e6:d1:16:94:93:cc:40:e4:6d:c6:63:3f:5d:
34:a5:d1:dc:03:ae:bd:13:90:fc:4d:4c:ef:21:6b:15:09:bc:
c9:e1:9e:c5:cd:d9:28:30:a1:2d:f8:d4:a0:f5:1c:d9:db:b6:
f4:b3:b0:a0:c8:9d:50:6f:92:ea:ad:45:4d:eb:44:8f:a4:a7:
81:10:cd:7d:36:ce:9b:4f:07:af:e0:fb:3e:af:fa:ce:2e:93:
7f:8d:12:80:16:c4:33:18:76:0a:c9:77:5d:06:6f:1e:2d:16:
9e:93:24:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 02:53:33 2025 by rpki-client