Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wEqMNk8o63hF6aA5D2WUTHWwHD8.roa
File: wEqMNk8o63hF6aA5D2WUTHWwHD8.roa (raw, json)
Hash identifier: 46eNvf9rGCZ5VtpGEADyUjX2RwRHS8FYqnvF3+FPrZ4=
Subject key identifier: C0:4A:8C:36:4F:28:EB:78:45:E9:A0:39:0F:65:94:4C:75:B0:1C:3F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018228D59EAB9D60A4CD08D5C170EF54C954
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wEqMNk8o63hF6aA5D2WUTHWwHD8.roa
Signing time: Sat 23 Jul 2022 02:14:24 +0000
ROA not before: Sat 23 Jul 2022 02:14:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:28:d5:9e:ab:9d:60:a4:cd:08:d5:c1:70:ef:54:c9:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 23 02:14:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c04a8c364f28eb7845e9a0390f65944c75b01c3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:56:68:3b:11:a8:bc:1d:7c:00:c6:4a:a6:30:
0c:7f:33:56:d1:3b:c4:fb:6c:b0:af:45:86:5f:38:
17:2a:b0:27:ae:84:84:84:2f:e6:aa:c5:a8:28:6d:
d4:b0:5d:c5:16:6a:cf:7c:b1:92:c6:b0:b5:d8:c6:
44:de:41:34:b9:6f:4d:a6:9d:71:12:94:97:30:f3:
cd:93:c9:dd:39:e7:32:72:8f:8e:38:36:2b:dd:dc:
ba:f1:ea:99:5f:f9:12:80:4c:73:cf:8b:33:de:82:
da:a5:1b:af:2d:d5:ba:1e:72:57:21:77:9e:c0:08:
1e:78:9a:4a:7b:a8:3d:f7:21:b7:89:4a:6d:dc:68:
9d:f3:d9:cf:af:59:c0:f8:00:7d:7b:e3:16:4f:5b:
55:ed:6a:c3:da:79:65:18:95:e0:0d:ce:21:e6:bf:
d2:6f:05:97:5b:8b:75:47:ea:c6:fb:17:08:91:4d:
46:25:b1:15:bb:8b:b1:45:c0:96:2b:d7:41:aa:7f:
ec:16:37:13:e4:34:08:b0:cb:5a:86:fd:59:ad:66:
da:07:34:8b:36:53:e0:5a:50:f0:e8:36:b8:84:f3:
1e:64:b2:ff:87:61:1c:19:ac:0c:4b:96:da:a5:19:
87:27:85:5a:f8:61:d4:9a:07:a7:fe:66:7f:56:79:
c8:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:4A:8C:36:4F:28:EB:78:45:E9:A0:39:0F:65:94:4C:75:B0:1C:3F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wEqMNk8o63hF6aA5D2WUTHWwHD8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9a:23:85:d5:d2:6a:bf:55:17:0b:00:4e:24:62:4b:50:94:1e:
e1:c6:29:ae:08:3f:0e:6a:3c:0f:fe:7b:98:90:d4:a2:21:d1:
f2:ad:72:d4:8d:db:42:ae:fc:80:11:d3:42:c5:6d:70:31:04:
d9:f4:aa:ac:c2:97:d9:77:d5:2f:c5:41:5f:2a:10:a0:61:6b:
48:d8:5d:70:77:11:d7:15:28:1d:15:3d:bf:8e:11:b6:4a:09:
ea:44:72:48:15:c9:17:37:67:b7:b1:fa:0d:c6:61:37:8c:cd:
e4:ab:17:d5:5c:4f:ad:8c:6d:94:d5:c2:57:70:0f:42:df:97:
85:60:a7:98:c0:82:b3:d2:e4:0a:a4:ce:ec:c7:33:35:de:5c:
89:e1:af:75:30:55:bd:cb:8d:1e:9b:c1:a1:3b:f2:ee:1f:bb:
62:8d:7d:6c:71:a2:c4:da:21:ae:0c:48:12:c9:0c:b0:17:11:
9a:6d:2e:96:4e:e0:8d:e6:96:3b:8c:5f:42:57:12:89:03:32:
5a:cb:be:3c:dc:7c:7f:5c:ae:95:32:ab:4a:83:9c:d5:4a:e5:
e0:79:b8:dd:ec:c9:25:43:30:aa:06:a0:fd:fb:92:33:b3:41:
86:e9:a3:32:d2:e9:cb:91:f0:ab:4e:57:f1:3c:ad:62:a8:ea:
5d:08:9e:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 02:53:44 2025 by rpki-client