Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wL5s7WhRcZr_vXmIznTnFMGisRc.roa
File: wL5s7WhRcZr_vXmIznTnFMGisRc.roa (raw, json)
Hash identifier: /kzAigfT6/JGtY/jrbHKYsJjqy6d/JPkjhQK2iuWfpg=
Subject key identifier: C0:BE:6C:ED:68:51:71:9A:FF:BD:79:88:CE:74:E7:14:C1:A2:B1:17
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186470448E24BF84B66E144491C470E37A8
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wL5s7WhRcZr_vXmIznTnFMGisRc.roa
Signing time: Sun 12 Feb 2023 19:05:08 +0000
ROA not before: Sun 12 Feb 2023 19:05:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:4703:668c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:47:04:48:e2:4b:f8:4b:66:e1:44:49:1c:47:0e:37:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 12 19:05:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c0be6ced6851719affbd7988ce74e714c1a2b117
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:3f:d2:14:36:bd:77:be:60:8c:36:de:a5:b3:
52:e5:c1:3e:8e:53:7c:38:24:af:64:cc:87:6a:a8:
93:7d:15:01:31:02:59:6b:c5:a6:d1:c6:0b:47:01:
8a:aa:a0:03:5f:46:67:5e:a3:2d:f9:6e:2a:eb:f7:
3a:81:3d:a1:17:88:12:7a:21:97:b3:ac:5a:a0:75:
68:ac:1b:ac:9f:77:22:aa:33:f1:10:d4:69:f1:df:
7e:08:81:cd:3c:ea:0f:67:91:2d:77:03:8b:c1:36:
62:ac:fd:f9:4c:10:c5:65:99:a2:56:cd:66:a1:23:
43:13:bb:b6:07:c6:1b:5c:53:a6:db:38:ce:73:21:
94:88:a6:b8:f4:a9:f0:77:df:fd:3e:bc:ab:ad:c0:
f6:ef:7c:0f:65:8c:84:3f:21:07:1a:38:9f:e8:cc:
2c:5c:7e:be:cb:d6:95:95:91:95:09:b9:9d:d7:a9:
48:33:8a:75:e9:f9:c6:e5:ab:9e:2a:9b:64:d7:05:
c7:5a:e7:1a:3b:43:2f:e4:c7:38:b9:19:b8:13:2a:
88:9e:57:84:2a:8c:23:14:71:e7:e9:41:63:8c:8f:
25:6c:79:0e:fc:53:ad:47:d0:6a:91:24:05:52:19:
69:f7:aa:2e:31:6d:bf:93:92:c5:ea:70:cd:c9:cc:
d6:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:BE:6C:ED:68:51:71:9A:FF:BD:79:88:CE:74:E7:14:C1:A2:B1:17
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wL5s7WhRcZr_vXmIznTnFMGisRc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
26:12:48:88:38:64:71:aa:d0:83:b1:9b:77:d8:3f:a1:af:ff:
32:9e:05:5e:53:9a:06:59:46:fd:c1:a9:af:c7:0f:33:ff:e2:
5c:8a:11:7f:f3:f7:b4:e1:45:09:81:be:8d:51:3a:a5:6b:d2:
1b:6f:e5:16:ff:37:89:8b:1e:9c:16:11:0c:03:9d:aa:68:a7:
d2:b8:6f:2c:09:99:48:a4:87:bb:42:d9:7b:12:d0:24:23:f1:
0e:df:2a:05:5f:f6:3f:18:ca:bd:c9:5b:b9:5e:6f:13:54:a9:
00:89:0e:4a:df:f5:88:5a:31:da:0f:ea:92:4e:b8:f4:92:a3:
46:21:8f:67:11:b8:79:a1:7c:f6:4f:4e:a4:26:df:65:6d:47:
a6:58:50:dc:35:ee:72:45:bf:f3:28:b7:ab:91:3f:b9:da:2a:
c4:f7:0f:37:16:07:1d:55:1b:9b:91:c1:f9:0b:23:00:f4:f7:
d2:12:31:50:d5:6e:5d:82:50:50:d2:8a:9b:22:34:a1:1a:f8:
5b:cc:06:f8:d5:23:4f:53:b7:0a:a6:fc:eb:ab:28:75:72:b8:
4e:e0:fb:22:ea:fe:25:04:11:3d:65:b8:f4:a6:20:37:3a:6f:
d3:e6:01:1d:a7:22:46:bc:95:49:f4:39:8d:c3:1b:d1:d1:3c:
0a:0b:59:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 12:16:59 2025 by rpki-client