Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wL8DxpEbErvlpT71NGuLy1uQvhM.roa
File: wL8DxpEbErvlpT71NGuLy1uQvhM.roa (raw, json)
Hash identifier: ByQAhoItARiiqV3L1GJhvoW2yh0uBQClSSoxmIjoaNw=
Subject key identifier: C0:BF:03:C6:91:1B:12:BB:E5:A5:3E:F5:34:6B:8B:CB:5B:90:BE:13
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01877A4DA5F1DCA01A29F840054DD4D3CC99
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wL8DxpEbErvlpT71NGuLy1uQvhM.roa
Signing time: Thu 13 Apr 2023 11:08:41 +0000
ROA not before: Thu 13 Apr 2023 11:08:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:7a:4d:a5:f1:dc:a0:1a:29:f8:40:05:4d:d4:d3:cc:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 13 11:08:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c0bf03c6911b12bbe5a53ef5346b8bcb5b90be13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:fd:f0:88:78:51:73:2e:6c:f3:3a:69:2a:00:
4d:db:7e:fc:0e:75:37:58:e5:e6:64:66:cb:48:f4:
9c:76:b5:2c:3a:59:b8:32:21:05:32:35:4f:c2:2b:
14:7a:ff:08:76:82:84:23:53:5b:79:8a:1e:da:e4:
5f:aa:86:ea:24:78:9c:f2:c6:56:72:07:e7:3e:7a:
d2:c2:b3:84:e0:6f:0a:72:07:ad:b6:b0:b4:07:b9:
2a:6a:fd:91:7f:7c:54:5f:ab:63:e5:ef:7c:b6:5a:
64:31:01:cd:ab:92:b9:50:80:7b:8f:22:01:25:ff:
c4:a3:10:03:7c:de:43:90:60:2f:f7:8b:7a:01:23:
f7:4c:4a:f6:2b:c3:ef:82:6b:55:25:f6:36:ab:09:
a3:0a:b3:64:19:cd:4b:1f:b2:48:40:50:c0:20:71:
fa:70:d8:6c:a9:87:75:7f:ee:9c:a5:19:15:e8:f5:
b9:d5:5c:e2:c2:e9:03:a3:cc:0a:c3:28:8e:b8:b1:
ec:88:ae:6b:f5:c7:67:74:23:78:6a:4d:10:c6:c0:
69:dc:1f:6b:f4:cd:85:40:ad:cf:60:72:48:9e:f5:
6d:76:6d:71:b1:f2:9b:8d:6c:ad:04:26:49:63:25:
d6:a9:76:c1:54:58:65:f0:fa:b1:84:49:60:71:4e:
29:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:BF:03:C6:91:1B:12:BB:E5:A5:3E:F5:34:6B:8B:CB:5B:90:BE:13
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wL8DxpEbErvlpT71NGuLy1uQvhM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9d:cf:9d:bc:b1:b3:ab:18:bc:4e:95:e2:ff:4c:40:df:9d:dc:
3a:87:83:54:f2:e3:03:cb:14:92:0e:ba:1c:5e:b4:90:da:be:
ba:1c:59:a7:d5:25:de:5c:f7:1b:da:1b:39:f6:57:37:fb:2d:
68:5e:ad:da:7f:aa:0b:8c:07:fa:51:e2:46:06:d7:68:75:ee:
47:29:83:51:fc:a3:6f:d0:4d:a7:a7:d9:d6:65:c3:55:da:67:
3c:fd:fa:9c:fc:db:5c:6d:78:84:a0:31:0a:78:37:a2:f6:1f:
a6:8d:1f:5a:90:10:e3:2e:ee:65:8e:e7:5c:81:10:29:9c:71:
e6:b8:81:a1:6c:69:cc:a6:1a:09:48:45:93:7a:1b:4c:41:67:
8c:fb:ad:d2:c9:2d:7a:0d:46:d6:82:23:79:c7:3d:0f:62:03:
16:4a:fe:8d:9f:f2:5f:4f:cf:73:01:27:95:67:4f:b7:30:c2:
a8:83:30:e8:99:84:de:68:d3:d4:36:be:50:d8:4d:75:eb:0e:
16:8b:42:b9:b4:78:99:3f:d3:e9:e9:67:5c:31:f8:fe:ee:48:
b4:eb:f8:f1:52:d2:05:1e:5e:35:04:cc:90:ed:85:c9:58:ce:
bc:7b:be:98:59:51:af:5c:b9:c1:b2:7a:1a:db:df:9f:92:ef:
b2:d0:86:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 00:43:50 2025 by rpki-client