Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wKxfjPaKjIVXJprXIpLIRBRaeWI.roa
File: wKxfjPaKjIVXJprXIpLIRBRaeWI.roa (raw, json)
Hash identifier: 7nioAhxGPqwv4osZgqw982tnn9q/tqLaABdir9nMi3Q=
Subject key identifier: C0:AC:5F:8C:F6:8A:8C:85:57:26:9A:D7:22:92:C8:44:14:5A:79:62
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184BCDE35643CC1E70EDE116FADB6667F21
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wKxfjPaKjIVXJprXIpLIRBRaeWI.roa
Signing time: Mon 28 Nov 2022 06:13:10 +0000
ROA not before: Mon 28 Nov 2022 06:13:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:184:ae77:4719/128 maxlen: 128
2001:67c:64:ffff:0:184:9f03:9814/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:bc:de:35:64:3c:c1:e7:0e:de:11:6f:ad:b6:66:7f:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Nov 28 06:13:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c0ac5f8cf68a8c8557269ad72292c844145a7962
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:30:44:12:3d:2b:75:a2:72:73:ef:09:4d:44:
d2:bf:23:65:b8:0a:e1:f9:a8:1b:62:97:e4:c5:de:
60:9d:e6:34:e4:a7:92:e1:eb:8f:b9:34:4a:d3:a8:
39:7b:9f:e6:d7:92:12:7a:48:1e:19:06:17:ed:de:
f8:78:2d:96:db:bf:13:82:29:a7:a2:39:61:1a:0b:
86:cd:e2:a0:d9:94:20:38:7d:92:4c:8c:c6:d9:69:
f2:2b:ea:63:dd:52:de:d1:59:cc:ed:8d:0f:e0:88:
2e:1b:20:fb:f4:a2:7b:fe:44:41:a8:07:7e:eb:64:
2c:fe:9d:7f:22:a8:dc:84:bd:b1:26:57:e3:cc:d7:
1c:96:eb:46:5b:4d:d3:c3:a7:41:39:0f:02:28:be:
6f:0f:00:c6:08:be:0e:02:c2:53:a8:29:8d:65:86:
12:c2:87:3d:73:f8:a2:cd:3c:73:77:d6:c9:a7:b6:
11:2f:9f:75:a0:ea:14:fa:36:52:7b:b8:87:e6:93:
5f:da:b3:ba:cd:f8:4c:7a:e8:64:28:27:d4:24:b4:
01:2a:e0:41:69:77:16:f4:41:11:3f:e1:ba:6e:ff:
5a:a0:3a:09:e6:bf:d1:06:ea:3c:75:fd:e7:95:fd:
33:8c:42:1e:c8:59:64:5b:5f:95:be:33:e3:4c:74:
00:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:AC:5F:8C:F6:8A:8C:85:57:26:9A:D7:22:92:C8:44:14:5A:79:62
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wKxfjPaKjIVXJprXIpLIRBRaeWI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7c:4e:2a:20:b5:ff:00:ca:e4:54:8e:47:d3:ca:65:71:b2:d6:
50:23:ab:c7:13:c4:1b:b5:d7:fe:6b:70:e8:0f:af:77:dc:db:
c0:27:29:2f:ff:2b:e6:04:5f:69:7d:d5:89:10:82:b8:6a:88:
fb:10:3f:c9:5d:af:2b:29:c8:f6:e8:fe:4e:55:c1:81:da:ad:
9b:df:7b:5c:bf:9c:56:e4:e4:74:c5:29:a3:37:48:34:5e:c5:
95:42:aa:55:b0:82:df:85:f5:e0:b1:22:e8:4a:46:03:8b:cc:
dc:b6:72:4f:ba:88:44:8e:73:0c:4f:27:47:3b:0e:1c:e9:95:
da:ae:4b:94:5e:db:41:a7:98:fc:f3:a9:34:d7:22:02:16:1c:
74:52:a0:52:4b:74:49:9b:6e:16:4c:e2:22:08:1d:75:56:62:
b5:34:8a:b2:35:dc:a9:bf:aa:24:de:42:a8:69:5e:6b:93:72:
b3:af:54:7e:f5:1d:fd:12:bd:74:58:58:77:c7:a1:57:b3:c6:
74:df:39:76:ca:12:72:3c:3f:8d:25:9f:9f:60:ea:77:54:92:
e5:18:06:7f:42:b1:32:65:bb:75:1d:7e:e1:f3:ec:e1:d1:fd:
74:4e:3f:9a:1d:aa:5d:47:26:e5:d8:fb:2a:0c:88:b6:52:67:
3f:65:be:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:05:34 2025 by rpki-client