Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wL-VunYc5CulXB2P2-iUilyGUUI.roa
File: wL-VunYc5CulXB2P2-iUilyGUUI.roa (raw, json)
Hash identifier: hCXx20jKc3RlfJvyoofb4l2sIUv+GXx8WqnpuFotgGg=
Subject key identifier: C0:BF:95:BA:76:1C:E4:2B:A5:5C:1D:8F:DB:E8:94:8A:5C:86:51:42
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A33F0E389F12654432D6E97FA2C99194B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wL-VunYc5CulXB2P2-iUilyGUUI.roa
Signing time: Sat 26 Aug 2023 22:22:19 +0000
ROA not before: Sat 26 Aug 2023 22:22:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:33:f0:e3:89:f1:26:54:43:2d:6e:97:fa:2c:99:19:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 26 22:22:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c0bf95ba761ce42ba55c1d8fdbe8948a5c865142
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:74:82:e8:10:06:87:2f:2d:75:db:43:c1:8d:
05:c0:bd:56:85:e3:96:40:fb:ed:86:f4:86:d7:be:
1b:7b:a2:80:fe:b6:b9:73:6e:f4:2f:9e:b4:c8:ef:
1a:33:3c:b5:63:7f:b5:25:b0:09:0f:b9:f3:b6:37:
23:fc:29:81:63:7a:fd:76:4e:25:bf:3a:f7:d0:c0:
07:6a:fe:d4:49:3d:23:f2:39:5a:76:ac:3b:df:3b:
4f:43:f1:a6:dc:22:53:9b:0b:2d:db:9b:fd:ff:80:
c0:b0:d5:a3:ba:ff:f6:37:22:5c:79:8e:47:f0:9a:
e3:b1:20:46:c9:2b:40:b8:2b:80:28:66:26:fd:b5:
b1:b7:e5:21:8b:49:81:fd:27:96:10:f8:63:a2:a0:
76:13:fc:97:aa:f5:ef:d0:e8:cc:11:a3:90:9c:f0:
27:60:7f:77:0f:37:5e:7a:72:1b:c2:92:e1:a6:b9:
5c:c2:7a:33:4c:49:92:93:43:fd:13:7c:0a:50:78:
ca:1f:a4:14:5d:55:9f:dd:73:2b:f8:ab:bb:78:38:
70:21:9b:f1:86:5c:49:54:d4:2d:68:28:b8:0b:9c:
50:7d:bd:8f:c2:56:c4:c8:c5:c6:13:a0:ad:9e:73:
32:54:8d:e0:64:c3:a8:71:6f:b8:98:69:65:0b:01:
d2:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:BF:95:BA:76:1C:E4:2B:A5:5C:1D:8F:DB:E8:94:8A:5C:86:51:42
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wL-VunYc5CulXB2P2-iUilyGUUI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2e:7c:ca:65:51:72:59:50:4e:d0:39:91:6c:98:53:54:ed:e8:
10:ed:d7:f4:70:36:a4:04:e0:e5:d4:b6:1b:2b:22:87:e0:27:
87:f9:a5:0f:42:fe:f7:bd:6f:15:6f:cd:08:d7:13:d0:19:d7:
7d:cc:b6:da:9d:49:3e:dd:c4:61:52:83:24:e7:48:e9:30:53:
6d:3b:b4:66:3f:27:9e:0d:10:2a:1e:e5:64:e8:66:68:9f:02:
4b:b1:5e:51:9b:3b:e9:0b:63:35:9a:94:0b:5f:f0:87:a3:17:
d4:e8:63:ef:70:a1:2c:e7:5e:42:c4:2b:b6:9b:00:cd:f3:69:
fb:ae:e4:b6:c4:cd:96:2d:f3:c6:d4:4a:63:54:6f:32:69:d9:
dc:42:8c:ea:59:ae:31:3b:48:dd:27:89:43:38:0f:53:52:bf:
a7:1c:b2:98:10:ff:26:fe:bb:20:64:05:60:ee:1c:2e:4d:4f:
99:55:3d:72:85:32:9c:ed:86:1a:f8:a2:c2:f6:ca:30:c6:9b:
93:dc:ca:65:ce:c8:fa:50:5a:f5:3b:0b:9e:10:c1:31:db:94:
11:1e:11:07:04:ab:63:f8:3c:9c:ae:43:71:a4:b9:df:0b:33:
4c:5a:c2:f9:5d:29:b4:4d:d0:af:8e:35:95:3a:fa:0c:da:73:
90:5d:7c:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:43:50 2025 by rpki-client