Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/w5Xrwg2wHCknH33OsUrDxOLFDFQ.roa
File: w5Xrwg2wHCknH33OsUrDxOLFDFQ.roa (raw, json)
Hash identifier: KyYMRCze0LLoDlsQ5EtKXA4Fjf1oOuKF1PEqkGG0G9s=
Subject key identifier: C3:95:EB:C2:0D:B0:1C:29:27:1F:7D:CE:B1:4A:C3:C4:E2:C5:0C:54
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188AF4E84C4DE38EDA76EF35F4C43C35619
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/w5Xrwg2wHCknH33OsUrDxOLFDFQ.roa
Signing time: Mon 12 Jun 2023 11:12:18 +0000
ROA not before: Mon 12 Jun 2023 11:12:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:af:4e:84:c4:de:38:ed:a7:6e:f3:5f:4c:43:c3:56:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 12 11:12:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c395ebc20db01c29271f7dceb14ac3c4e2c50c54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:09:8f:b6:95:00:74:e3:1c:63:ab:6a:5c:ea:
9c:7a:49:e4:16:62:3b:a2:d5:87:1e:d8:28:c5:4d:
0d:96:b0:ad:99:86:1f:69:eb:81:76:27:d7:5e:66:
16:91:2f:20:00:5b:e2:97:c6:f4:1d:b5:9c:8a:55:
5f:c3:b7:09:b7:42:b3:88:7f:e8:e1:f4:e6:3f:b9:
1e:92:52:3c:16:9e:b0:57:03:35:d8:4f:3b:56:66:
4c:9e:4d:07:84:64:69:66:67:ab:48:cd:06:5d:e7:
e4:41:86:3a:16:7c:1f:33:d3:11:a8:a0:33:0b:2b:
5a:90:ca:86:e1:4e:b9:9a:21:6c:2f:10:4b:af:b3:
7b:5b:bd:a0:ef:3a:3f:67:23:da:bd:44:c3:26:ff:
6a:f7:b6:e2:8e:51:8d:3f:db:f0:76:6a:cf:be:7f:
20:0d:d1:2e:dc:21:a5:f5:92:8b:41:cc:33:51:3a:
4f:b7:1e:24:36:23:42:7f:fc:b8:b0:96:81:1c:39:
94:f8:c6:96:75:13:03:bb:08:b2:79:93:f4:54:95:
b6:81:21:31:db:9c:97:27:a1:6d:76:6e:1a:d6:ac:
fe:d2:6f:0b:fb:d8:62:1d:9a:76:d9:64:e8:29:c7:
38:ee:4e:01:57:01:c5:fd:66:3a:0f:cf:d5:4d:6f:
01:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:95:EB:C2:0D:B0:1C:29:27:1F:7D:CE:B1:4A:C3:C4:E2:C5:0C:54
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/w5Xrwg2wHCknH33OsUrDxOLFDFQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b5:db:b6:dd:47:ab:b9:70:30:76:65:a8:be:18:24:45:07:42:
bc:76:17:66:1a:a7:fc:7a:ec:9c:35:7d:fc:73:c9:89:04:7a:
43:06:ce:f7:85:da:b5:f4:cd:f1:a2:ce:63:3a:b6:c6:4b:7e:
4a:23:2c:48:ea:ef:5d:85:7c:94:a4:a5:47:0a:af:cd:2a:90:
e6:64:13:3d:90:9f:17:a7:95:9b:e4:77:27:0e:19:b9:8b:68:
8c:49:da:76:6a:fe:92:84:23:f6:63:f2:9a:94:0d:2c:7c:d0:
9e:33:1c:bd:b5:e5:9c:de:c5:7c:19:69:2d:fd:2c:7b:e0:2a:
18:f2:a3:f1:5c:25:c5:5c:29:d6:38:75:5f:d9:72:11:e6:de:
7f:38:4a:fb:c6:60:bf:57:19:2a:e8:aa:c5:a1:c6:61:ed:ba:
96:b7:0d:1f:41:89:bb:06:a6:e1:5a:2c:37:2b:9c:c6:d8:71:
ea:76:0b:da:b5:bf:82:e2:9e:4a:81:21:81:74:58:02:86:61:
33:0a:94:02:61:4e:a7:e9:85:e4:a9:92:d1:5a:af:c1:b7:af:
d1:e8:da:5e:90:02:59:5c:e9:f4:29:5e:ac:bb:b6:0a:e7:5d:
b1:75:e6:11:98:8b:13:8f:33:45:f8:de:b4:72:82:e8:43:02:
ec:47:f8:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:36:18 2025 by rpki-client