Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wM6-_W6uMm9s85eFfP1gedH9Yjg.roa
File: wM6-_W6uMm9s85eFfP1gedH9Yjg.roa (raw, json)
Hash identifier: maZyUH0Zhw5ql3UduVmMzQfbqZAyJ7ayKHNFs1sss3I=
Subject key identifier: C0:CE:BE:FD:6E:AE:32:6F:6C:F3:97:85:7C:FD:60:79:D1:FD:62:38
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 8A5BAC4F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wM6-_W6uMm9s85eFfP1gedH9Yjg.roa
Signing time: Mon 06 Jun 2022 08:10:20 +0000
ROA not before: Mon 06 Jun 2022 08:10:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:181:22f:7a99/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2321263695 (0x8a5bac4f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 6 08:10:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c0cebefd6eae326f6cf397857cfd6079d1fd6238
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:9c:58:47:68:16:50:73:2a:70:81:3a:42:bf:
e0:b8:17:03:63:2f:05:79:1a:9b:b4:33:c5:b2:95:
06:9e:9b:b0:85:bd:2a:7c:94:ed:35:11:99:5f:4a:
1b:a8:e2:e4:6b:7e:33:8e:a5:be:fb:86:0a:b0:95:
28:73:2c:50:94:20:00:f7:54:9c:72:88:9c:86:20:
0e:27:81:9c:a5:81:21:de:ad:4b:d2:28:b4:7f:a6:
5f:e0:08:c2:b4:93:e6:64:5a:59:e9:99:e4:9c:6b:
eb:13:3a:2c:f1:ea:a0:9d:98:35:68:e5:5e:9b:95:
65:a6:c1:f8:b8:ff:c5:05:81:37:70:f5:cf:96:62:
0c:9d:df:95:dd:d4:fd:e8:41:b6:d2:10:1b:e6:ac:
13:23:52:84:48:46:4f:3c:b1:40:a9:0c:48:f9:6d:
23:c0:3d:88:63:c4:0b:27:63:4a:63:8e:ed:a5:7e:
b2:1a:d6:0f:cd:74:99:c5:b3:3b:6a:ff:8f:b0:6d:
8c:c7:ac:5f:bb:af:a3:f0:d7:27:5c:54:f8:16:62:
31:aa:ce:ec:bf:22:da:33:7b:ff:b4:ea:23:8c:46:
54:40:7b:65:c2:74:b5:05:c8:5c:3b:4d:52:24:a1:
bc:20:03:4f:9e:1f:a4:17:97:6e:43:f1:8f:0e:15:
ea:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:CE:BE:FD:6E:AE:32:6F:6C:F3:97:85:7C:FD:60:79:D1:FD:62:38
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wM6-_W6uMm9s85eFfP1gedH9Yjg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7f:59:55:20:4e:be:a5:f5:56:16:19:0b:7d:0e:a7:90:99:91:
0e:46:53:f9:56:f1:94:be:34:4f:18:48:d9:ef:11:c9:4f:2f:
99:76:ac:79:a2:af:b6:c0:ff:2e:21:03:73:0d:86:a0:b4:bf:
f2:06:9a:b0:f5:0e:e2:5d:13:8a:9c:eb:03:c2:10:2f:15:fc:
76:36:0a:4d:be:5d:d1:e0:22:28:5e:c9:d4:05:65:b9:a9:00:
28:a1:f1:1d:cf:48:19:90:13:e1:b9:76:19:73:3d:52:63:d3:
8e:b1:b0:a1:93:81:46:4c:68:c4:78:cf:c0:77:f3:ac:d5:94:
7c:1f:1d:09:91:0c:e0:28:cf:98:40:4e:1e:fc:c7:99:69:34:
9d:b8:b3:83:e0:d2:ae:c5:fb:b6:02:a9:bb:a1:e8:d0:56:6f:
89:69:fe:32:fb:60:aa:21:c6:26:e1:e7:0a:ee:aa:d0:cd:98:
90:ee:2c:e3:11:82:25:f0:74:a8:45:97:44:4a:77:4c:2d:b6:
b1:c8:44:32:b3:72:a0:98:cd:4e:3c:57:81:04:34:0a:26:89:
22:60:0b:62:85:f5:c5:dd:5f:f2:39:41:63:d4:be:fc:80:b4:
d4:71:b9:d0:92:0c:29:26:ff:1c:00:e6:7b:bf:dd:2c:1e:d2:
d6:14:99:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 23:51:53 2025 by rpki-client