Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/w1NL08ZOLi04GH4n1EMZ6arrhb4.roa
File: w1NL08ZOLi04GH4n1EMZ6arrhb4.roa (raw, json)
Hash identifier: gkfaMqcAr0uJ7wmAZbx+mHz1I03cc7YtQS13EUZdaRQ=
Subject key identifier: C3:53:4B:D3:C6:4E:2E:2D:38:18:7E:27:D4:43:19:E9:AA:EB:85:BE
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01896807D7A1F4DD8FCE190D00CB7CEF5EEE
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/w1NL08ZOLi04GH4n1EMZ6arrhb4.roa
Signing time: Tue 18 Jul 2023 08:04:51 +0000
ROA not before: Tue 18 Jul 2023 08:04:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:189:6807:5036/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:68:07:d7:a1:f4:dd:8f:ce:19:0d:00:cb:7c:ef:5e:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 18 08:04:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c3534bd3c64e2e2d38187e27d44319e9aaeb85be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:68:41:e5:f7:1d:02:24:09:a5:cf:4a:ed:fa:
f6:ba:66:6f:62:12:a0:00:c4:13:99:4a:83:b5:df:
fd:72:1e:81:4f:5f:e8:16:9e:6c:65:7f:05:80:2b:
ff:9e:fe:8c:ad:13:11:7c:d1:b0:3e:37:cc:26:52:
d1:15:ec:c4:f4:9c:aa:bd:6a:12:ac:3c:41:41:65:
91:00:df:c7:b7:12:b3:4e:1d:b9:da:93:82:37:1e:
01:78:e8:8e:55:ec:85:9b:46:df:65:ec:4c:f7:d1:
1a:be:ef:61:83:eb:e0:08:38:80:2e:cf:e1:6f:11:
bc:fa:54:39:61:28:58:19:2a:91:49:02:2e:95:ae:
44:e1:44:f3:7b:71:93:cd:9a:35:16:9f:19:01:72:
5e:d3:2f:c4:1e:74:fa:51:fd:96:bc:b0:b3:10:79:
7a:63:1d:1e:d3:80:b3:40:1f:3b:d5:61:1e:4e:d2:
14:1c:c7:78:13:c9:ad:aa:13:96:96:ec:20:f6:4c:
0f:e3:be:16:9e:58:2a:70:21:f4:d0:08:22:4b:22:
b9:15:02:1e:82:e7:cf:b4:b0:48:f7:10:86:99:1a:
98:bb:3b:26:48:d8:45:94:d7:7f:0b:65:2f:b7:37:
1a:39:f5:9d:d3:21:99:0a:f1:0b:e5:d2:36:89:bf:
16:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:53:4B:D3:C6:4E:2E:2D:38:18:7E:27:D4:43:19:E9:AA:EB:85:BE
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/w1NL08ZOLi04GH4n1EMZ6arrhb4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
59:c0:47:f3:03:03:a9:97:7c:83:bf:c2:29:ed:a6:6b:e6:81:
b6:2b:41:0f:2a:c3:e5:b7:6a:5a:28:98:d8:eb:72:a1:28:92:
cc:35:bd:ea:65:53:06:ae:75:68:cd:c7:d6:26:55:8a:d6:7b:
f0:32:fa:1a:bc:f9:c6:04:9b:03:02:70:4c:53:99:e2:32:12:
81:6b:1c:60:88:1d:23:f8:30:06:97:43:0b:b9:10:b4:84:ba:
c6:df:62:d4:50:6a:53:34:e1:10:e0:0d:c9:92:89:ae:ef:f5:
18:34:54:5c:a3:2a:08:0c:5c:91:93:14:bf:16:44:26:dd:a9:
7b:66:a7:7a:ce:64:b0:5b:e5:68:bc:57:3d:8c:39:67:3b:ea:
6f:ad:2b:53:3d:91:9f:95:f9:d5:74:de:02:4e:ba:cd:05:f3:
a2:2d:40:56:ec:57:16:68:49:d5:8e:36:26:25:34:0d:aa:72:
67:de:70:c8:ad:2c:c3:13:74:69:7e:5a:f0:28:5e:57:5c:1e:
9a:48:fc:3b:83:11:63:e4:1f:d0:f7:c9:fa:f6:22:c4:1d:ac:
1f:e0:9f:2f:fd:a8:28:7c:19:6b:2b:c0:8b:1d:1a:ea:94:a7:
28:27:95:eb:5d:76:70:f3:48:f3:a3:da:11:96:40:e5:16:1d:
32:53:f6:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 22:00:03 2025 by rpki-client