Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wFuR4_VP1xsgw2IhMfq-x03MjXs.roa
File: wFuR4_VP1xsgw2IhMfq-x03MjXs.roa (raw, json)
Hash identifier: 1oeCWBNbjmttFR50J0X0fU7VT3RkymZSrI7taqz4MHc=
Subject key identifier: C0:5B:91:E3:F5:4F:D7:1B:20:C3:62:21:31:FA:BE:C7:4D:CC:8D:7B
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0182885276EACF20FE20690C191A35489117
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wFuR4_VP1xsgw2IhMfq-x03MjXs.roa
Signing time: Wed 10 Aug 2022 15:14:41 +0000
ROA not before: Wed 10 Aug 2022 15:14:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:88:52:76:ea:cf:20:fe:20:69:0c:19:1a:35:48:91:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 10 15:14:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c05b91e3f54fd71b20c3622131fabec74dcc8d7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:5c:45:b7:22:e7:a0:4b:f0:f5:38:d0:f1:89:
f0:ec:07:8a:29:49:22:65:94:6d:0b:4e:ce:40:a2:
51:e3:ca:3c:cd:f9:b3:96:25:2a:d5:6a:55:5c:c2:
7d:3b:51:1b:df:2a:e9:45:c6:f3:ac:a0:65:70:0d:
21:7e:a4:85:9d:ae:4d:10:d7:1a:27:b1:e5:1b:97:
24:11:3c:91:43:9b:40:f2:b7:ed:67:24:75:8a:38:
c0:27:12:c1:2f:06:bb:8a:d7:1b:06:c7:0a:b4:f4:
4c:b3:b2:95:bb:12:48:39:62:1b:e2:22:82:05:92:
d0:ab:7d:73:06:2a:cf:43:58:3a:d6:93:6c:47:c8:
73:37:37:28:3b:b5:0b:aa:cc:96:87:fe:15:e6:5e:
b6:f6:d0:fa:ed:75:86:fd:02:96:cb:17:a2:04:0e:
56:72:19:8f:af:6e:66:98:a6:a9:76:d9:6a:33:7c:
0b:aa:eb:b3:a9:37:26:71:58:6d:d1:2a:7b:42:66:
43:5c:38:81:0a:80:7b:bf:1b:76:f9:35:6f:ae:95:
41:36:11:72:55:36:04:33:a7:5e:da:c4:15:60:1d:
11:51:99:4f:52:61:ff:49:d8:89:de:8a:84:e5:e6:
48:b6:9e:38:a9:81:5f:bd:0a:85:ef:72:50:8f:c9:
70:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:5B:91:E3:F5:4F:D7:1B:20:C3:62:21:31:FA:BE:C7:4D:CC:8D:7B
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wFuR4_VP1xsgw2IhMfq-x03MjXs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0f:8c:89:4b:5a:ae:99:68:2a:9d:27:32:dc:1e:57:d7:5d:c2:
28:e0:d9:25:f1:6f:f6:6d:54:b8:98:9f:94:f8:94:8a:d6:f0:
fa:2f:76:fe:7a:5e:07:63:ad:75:89:cb:41:14:71:88:28:90:
00:ba:f2:5b:a6:ed:b7:9f:42:03:67:f7:9c:d6:b9:26:86:7d:
ab:d2:df:bf:00:b7:b7:29:8c:26:bc:20:ec:b8:62:14:39:c4:
d6:19:77:45:e5:1a:ef:a6:05:77:2c:20:77:00:e4:21:33:5c:
11:db:d3:a0:11:ac:32:7c:fc:63:2a:7d:79:df:3c:b4:1a:3b:
6a:28:4e:a8:92:52:dd:03:89:2d:03:fc:6a:cc:60:73:c7:fd:
98:b4:25:13:25:5d:df:15:25:36:26:9c:cb:40:00:56:1c:f7:
5b:a7:67:e4:71:f8:61:e0:a6:e2:8a:54:23:5f:38:65:9d:30:
fd:52:e6:f1:f8:5c:f9:6a:18:c0:e1:90:a7:8e:3d:ea:96:85:
fd:3c:ba:28:c8:9e:2b:65:2c:35:d4:54:c6:0e:05:c6:55:ed:
31:42:38:4c:03:02:3c:9d:56:53:32:8d:ab:f5:4c:34:94:b1:
9f:69:2b:8b:ee:9b:ef:59:65:cf:dd:8f:21:66:55:27:47:b0:
c9:33:b2:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 06:48:52 2025 by rpki-client