Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wE9mnWg7g1zLRPbE_Zu9HFR50GI.roa
File: wE9mnWg7g1zLRPbE_Zu9HFR50GI.roa (raw, json)
Hash identifier: JnXJyLR9hNANhcA7TXbAqy328t81TYkVL15MCszblDw=
Subject key identifier: C0:4F:66:9D:68:3B:83:5C:CB:44:F6:C4:FD:9B:BD:1C:54:79:D0:62
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01882CD14D02CF25ECE5F55EB676E564A617
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wE9mnWg7g1zLRPbE_Zu9HFR50GI.roa
Signing time: Thu 18 May 2023 03:04:54 +0000
ROA not before: Thu 18 May 2023 03:04:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64:ffff:0:188:2cd0:ded7/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:2c:d1:4d:02:cf:25:ec:e5:f5:5e:b6:76:e5:64:a6:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 18 03:04:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c04f669d683b835ccb44f6c4fd9bbd1c5479d062
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:24:69:f0:e0:f3:ef:19:34:9c:f8:c4:6d:97:
a0:35:23:17:ba:ed:3c:f6:36:db:f9:13:a2:b2:6a:
50:d9:f3:a5:ec:80:e0:b5:9a:26:74:04:83:28:da:
2a:71:1f:62:a5:63:1e:bc:e5:f6:42:6e:ce:4b:55:
df:b4:e8:6c:e2:2e:85:bd:d1:f3:6c:47:35:c6:5d:
74:90:33:cb:19:d8:fd:db:95:44:47:cb:04:cb:bb:
8e:32:de:d3:db:aa:d8:a5:0b:3d:80:d2:14:19:a3:
b6:ea:cb:c1:29:5c:f6:91:07:7e:45:40:d1:53:99:
08:87:58:81:26:a7:2d:23:8a:89:03:fe:c5:1e:f1:
79:71:50:34:ed:da:10:63:be:b5:37:0f:14:4e:ee:
96:46:d2:ae:a3:8a:3d:d6:1d:7b:f0:2e:7b:31:e0:
71:d4:2b:e2:79:1c:8a:d9:91:bf:f7:17:81:5c:96:
98:d2:50:55:7e:f9:a6:1d:2f:c0:d8:56:aa:b6:b7:
87:1e:1c:1a:cc:f4:89:cf:dc:6a:a1:00:02:64:1a:
06:ef:d8:f9:5f:bd:e3:05:cc:30:39:c7:b9:1e:7e:
75:3e:5a:9e:fc:fb:2b:ba:f4:77:ce:fd:87:8c:2c:
d0:70:69:b9:76:aa:2c:05:38:24:b6:fb:95:19:93:
16:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:4F:66:9D:68:3B:83:5C:CB:44:F6:C4:FD:9B:BD:1C:54:79:D0:62
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wE9mnWg7g1zLRPbE_Zu9HFR50GI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
04:1c:ad:aa:40:ae:cb:de:2a:3d:04:de:a6:0d:a5:c9:64:d5:
88:28:02:cf:53:f4:f7:90:e9:b9:9c:aa:df:6e:0b:24:bb:58:
c1:45:aa:f5:23:ea:79:95:34:af:48:b8:a0:db:9e:1e:fd:39:
6c:95:6a:3f:c1:30:e6:7d:de:2b:c8:13:8b:a1:cd:ba:fd:d0:
96:98:01:8e:fa:f4:12:d1:01:14:cb:09:3c:c1:5f:c6:94:43:
3a:f3:55:bd:e1:f2:b2:1f:12:f7:17:09:06:63:85:d1:d6:4f:
2a:fe:4a:ac:c3:16:cb:97:bf:1d:60:29:39:e4:0f:b2:98:d6:
57:a9:ef:02:a0:79:c5:c8:ed:6c:f3:ef:fd:30:2b:8e:c5:b8:
53:95:ee:6b:cf:ef:53:ba:b1:b8:68:be:0e:4a:d1:a2:be:9d:
dc:68:36:90:2b:6a:50:c0:57:35:79:bc:c0:f8:f5:1a:23:0e:
9c:b8:db:5f:f9:86:e7:c3:0e:56:86:3a:8c:cb:7d:0c:bd:d0:
18:3c:ba:b9:2c:87:80:08:4b:46:d8:96:1f:98:20:ec:0d:4d:
5c:8f:94:0d:3e:4e:8d:c7:07:40:d1:09:e2:74:e2:c4:b1:9c:
d7:0a:ff:49:d7:6f:87:ec:91:2d:21:21:f4:91:a6:0d:9c:dc:
87:70:d0:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 04:35:16 2025 by rpki-client