Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wNzSHUYCU0ik-3E8DLXREJRAlSU.roa
File: wNzSHUYCU0ik-3E8DLXREJRAlSU.roa (raw, json)
Hash identifier: lg1N3U2yNyAXinZBrKVVEAWA+ZZLi12qzvMwSH+JZAM=
Subject key identifier: C0:DC:D2:1D:46:02:53:48:A4:FB:71:3C:0C:B5:D1:10:94:40:95:25
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A11C25BADDAB8972781E2803A80A763D8
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wNzSHUYCU0ik-3E8DLXREJRAlSU.roa
Signing time: Sun 20 Aug 2023 07:04:24 +0000
ROA not before: Sun 20 Aug 2023 07:04:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:18a:11c2:5634/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:11:c2:5b:ad:da:b8:97:27:81:e2:80:3a:80:a7:63:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 20 07:04:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c0dcd21d46025348a4fb713c0cb5d11094409525
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:fe:68:d5:29:c8:5c:a5:b6:d6:b1:74:f1:99:
e0:5d:2b:58:24:71:46:1d:8f:fc:01:c5:cf:5d:a3:
de:16:21:4a:f7:f1:80:5c:3d:01:ef:31:0d:6d:4f:
45:1f:67:7b:2c:30:8b:3c:ae:f2:06:81:d9:0e:15:
ee:2a:43:4b:19:6f:74:ee:46:d7:59:17:9b:3a:c8:
67:27:d9:e1:59:3e:5e:1a:98:6f:ca:0c:d2:02:73:
c7:6a:7d:54:50:3e:ff:b2:ac:37:7e:d2:69:a2:29:
2e:4f:e2:9c:b6:7a:4f:f1:3e:f4:f8:32:7e:7a:71:
a7:37:5e:5b:92:e1:72:51:31:e0:f3:10:7e:fc:f2:
98:49:9a:6d:4e:af:77:63:2f:a6:bc:57:c6:91:eb:
ad:23:5e:4d:1c:37:b7:bb:8d:59:4c:fc:79:fd:c9:
c1:08:28:0b:29:5d:fc:f0:4b:0e:0d:17:08:c2:ce:
5d:2d:0d:4c:9d:2c:22:13:e0:40:2d:7a:9c:02:0a:
98:c0:af:62:c7:3a:be:4f:60:e5:df:de:d9:41:1d:
6c:72:41:2a:7a:c0:d2:e8:37:d5:0f:c4:ff:42:ee:
aa:a8:dd:39:30:7a:67:7f:56:76:7b:00:c6:b3:eb:
a6:4c:db:b4:5a:42:10:ae:5f:b1:49:9c:a6:f6:df:
ea:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:DC:D2:1D:46:02:53:48:A4:FB:71:3C:0C:B5:D1:10:94:40:95:25
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wNzSHUYCU0ik-3E8DLXREJRAlSU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9c:8b:19:63:c4:14:6b:68:be:f3:9f:92:13:4a:51:14:c9:9c:
78:e8:8f:44:8c:45:fc:36:0b:4d:f2:27:27:73:94:fe:c2:40:
20:c9:0e:1b:d9:06:b7:a4:76:a9:d4:3f:ef:f8:fb:2b:4c:e2:
0f:61:ab:8e:5a:fa:1a:bb:90:dd:b6:cb:72:96:9f:6c:cd:09:
4f:03:2b:f2:7b:da:0b:4a:5b:8c:b6:51:86:59:28:5e:6a:16:
cb:e5:e0:f0:26:da:9c:b3:89:3d:14:3d:7c:0c:0b:f2:87:83:
8c:78:8d:f1:57:b3:08:85:c9:a0:8b:8f:43:de:c1:93:e9:78:
f0:17:e1:0f:1b:35:79:89:8e:e0:20:11:40:bb:20:13:75:6c:
fa:0f:ae:60:4f:72:54:f5:cb:60:25:66:38:10:33:d8:0c:4b:
64:0a:4e:0e:0a:d3:05:4b:3b:93:3c:8c:79:f5:55:04:ff:9c:
64:2a:3d:cc:2d:9f:a0:4c:8f:32:ad:34:58:0c:8d:bb:e3:3d:
13:c2:7d:a2:c5:e8:32:fe:31:c0:ea:8e:83:f6:b7:c7:76:70:
bd:79:e8:14:89:e6:6b:0a:dd:4c:24:d6:11:7c:0b:6e:b1:df:
4e:b0:a0:d2:ce:52:83:ba:5a:1a:90:45:ad:d5:a2:b4:b6:d2:
30:14:df:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:41:20 2025 by rpki-client