Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wBcSra454Cwv3DRfYPEqO8qrsOs.roa
File: wBcSra454Cwv3DRfYPEqO8qrsOs.roa (raw, json)
Hash identifier: 2cqdQ40kAB8kgOLJl+RJJKSkOJo6Dlpsa6BufezvCHU=
Subject key identifier: C0:17:12:AD:AE:39:E0:2C:2F:DC:34:5F:60:F1:2A:3B:CA:AB:B0:EB
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 679694E1
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wBcSra454Cwv3DRfYPEqO8qrsOs.roa
Signing time: Thu 03 Feb 2022 19:09:20 +0000
ROA not before: Thu 03 Feb 2022 19:09:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17e:a0dd:2f5b/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1737921761 (0x679694e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 3 19:09:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c01712adae39e02c2fdc345f60f12a3bcaabb0eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:54:c6:ec:3c:d1:09:15:fc:7d:e9:a3:03:22:
f2:00:0d:ef:56:5f:a3:83:1b:4d:25:a7:04:73:56:
75:c7:6a:87:82:69:20:05:e8:d3:ae:7c:6f:c5:c6:
89:f6:2d:fc:1d:fc:89:94:a7:c3:de:fe:f5:e2:f0:
9f:e4:1e:aa:aa:e9:83:7d:91:d3:10:10:64:ce:f1:
80:a9:ef:08:2a:95:ca:f8:dc:62:14:28:42:04:f9:
74:c5:21:f7:8c:be:80:6b:e9:30:8e:c5:1e:d7:46:
a7:d0:62:b3:11:de:95:32:3d:25:99:3d:d4:23:24:
22:74:92:07:4b:b5:dc:c1:2c:ee:23:b0:08:5d:98:
d3:f0:6a:ec:9e:1b:70:50:f8:fa:61:de:4b:c8:44:
a9:23:5b:56:ed:52:c0:83:84:62:1a:85:46:3c:78:
5d:83:53:d7:00:52:e6:7f:13:71:95:13:8c:d1:52:
c0:74:3f:22:1d:bc:85:df:ed:cb:9a:16:a4:3b:a6:
b5:49:80:18:a6:06:61:8a:71:c7:f5:4b:9d:84:58:
43:3b:1f:4e:69:9d:f9:a6:9a:84:e7:61:fb:e8:b4:
24:35:8b:bc:31:f4:aa:23:62:4d:dc:09:73:e4:06:
27:07:ad:3c:fe:e9:1a:d1:0c:ba:c4:d5:a2:e2:1d:
12:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:17:12:AD:AE:39:E0:2C:2F:DC:34:5F:60:F1:2A:3B:CA:AB:B0:EB
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wBcSra454Cwv3DRfYPEqO8qrsOs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b2:26:1e:11:9d:25:8b:17:5b:ee:18:d1:fc:7a:fb:88:8c:d7:
2b:97:bb:7e:9a:de:4d:26:65:b2:3e:a2:8c:5d:6d:c2:60:82:
0d:ea:58:2b:4f:a6:e7:84:61:c3:46:7a:30:8f:d1:eb:23:3e:
3d:3c:85:ab:97:13:62:44:6e:a8:c6:eb:58:9f:f3:bf:cc:a5:
99:e4:d2:d2:3b:fa:46:b0:46:aa:cb:77:2c:18:a8:c0:39:63:
c1:3b:d1:ae:5f:3b:fa:76:a7:c9:51:c8:f8:91:cb:de:76:ea:
fd:b0:28:09:0c:17:b6:30:25:1c:6d:aa:fa:b5:a0:d0:9b:8a:
f9:a5:7b:85:6c:40:1d:ab:73:39:c5:53:50:77:d3:bf:b5:94:
97:d5:80:31:d1:f7:a1:0e:48:84:0b:e6:2a:4e:cb:15:58:78:
5a:2c:bd:18:d4:3c:dd:56:44:fc:f0:aa:2e:37:c1:71:74:54:
ec:98:88:a0:7a:78:12:7a:96:69:4c:97:3f:58:8f:33:40:c5:
2d:d3:2a:33:10:31:12:26:e4:3a:2c:53:58:80:9d:24:db:83:
8b:d6:e2:d1:ce:3e:5f:56:66:66:ae:05:5c:91:6e:05:3f:90:
89:88:39:12:34:dd:e6:45:41:18:e3:f3:ec:f7:47:eb:30:81:
91:ac:8e:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:41:26 2025 by rpki-client