Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wP0b2KgSxEkf7kdNCeAsgcGDp48.roa
File: wP0b2KgSxEkf7kdNCeAsgcGDp48.roa (raw, json)
Hash identifier: Imwe0abIE1Ta6nMjhyAzZ7vVZzxvgcO/PxdYvZXUHcE=
Subject key identifier: C0:FD:1B:D8:A8:12:C4:49:1F:EE:47:4D:09:E0:2C:81:C1:83:A7:8F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189AF8307D94279209C7E0FEB21E86A36EC
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wP0b2KgSxEkf7kdNCeAsgcGDp48.roa
Signing time: Tue 01 Aug 2023 05:12:27 +0000
ROA not before: Tue 01 Aug 2023 05:12:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:af:83:07:d9:42:79:20:9c:7e:0f:eb:21:e8:6a:36:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 1 05:12:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c0fd1bd8a812c4491fee474d09e02c81c183a78f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:78:15:8b:f0:69:20:bc:18:d0:37:8f:86:bb:
72:d9:a0:01:58:83:82:61:9d:b6:3e:48:f1:e4:99:
90:45:21:e0:ee:a3:dd:78:ca:31:94:05:82:3d:46:
4e:dd:a8:7d:ed:98:7a:f1:e7:97:e7:22:26:b8:27:
a8:12:1a:cc:5d:a3:1e:65:48:27:99:38:28:a3:36:
0e:d6:a8:f8:5c:e0:8a:fe:29:55:df:86:56:f3:23:
2a:f0:d0:fa:90:9f:c4:87:12:17:c4:93:f3:01:61:
de:3f:6a:5f:0a:75:51:cd:e2:bd:34:dd:9d:fd:e8:
56:10:c0:25:89:5a:1d:e9:1a:67:77:73:20:60:77:
5c:33:bc:b1:f3:44:25:82:9b:65:d6:1f:08:2e:71:
2a:df:b2:71:c6:66:40:07:79:c6:d6:d0:74:40:9f:
1e:06:c2:4f:a1:ab:e2:6e:5e:c7:a8:62:6d:6e:48:
66:39:0e:5a:2d:43:bf:f5:1e:48:4f:6b:27:52:ef:
ed:32:14:34:cb:97:03:86:7a:76:ed:ea:6d:59:cf:
7e:26:ca:ec:d2:4e:89:a7:a8:08:e7:e1:b1:15:75:
c0:a3:e2:42:34:a2:4c:4c:7e:0e:2d:03:a6:54:73:
38:2c:2a:21:82:8d:b2:c8:04:43:99:f7:60:a6:1d:
bf:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:FD:1B:D8:A8:12:C4:49:1F:EE:47:4D:09:E0:2C:81:C1:83:A7:8F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wP0b2KgSxEkf7kdNCeAsgcGDp48.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
94:89:8f:66:c2:ac:17:4e:9e:32:f7:d2:39:b1:3e:1a:b2:3b:
3e:ca:71:48:4b:d6:62:72:a4:49:ce:d4:85:eb:28:b8:92:24:
33:62:b4:96:d7:8b:34:c2:a7:46:25:01:b0:da:ed:0f:57:84:
8b:81:43:2f:ce:78:df:9d:19:84:2d:95:d3:bf:96:33:2a:49:
3f:04:11:d8:9e:a2:35:36:82:28:fd:40:d8:7c:1f:dd:dd:2b:
e9:cc:8d:a6:c1:46:ea:23:d6:5f:da:d9:68:99:34:ae:56:4e:
3d:23:8f:9f:85:bc:34:f3:a6:7c:79:f4:f4:65:8d:92:89:0a:
f6:0c:bb:1f:03:74:de:73:26:1a:6e:07:55:18:01:10:32:e7:
37:19:10:cb:06:ea:7a:19:a0:ee:67:51:ef:04:c2:9d:57:04:
19:e2:33:90:41:27:31:76:ef:b6:9d:65:88:63:45:41:e4:bb:
28:90:e6:14:b7:e5:99:6b:3e:c9:35:12:44:d5:61:a3:87:b7:
8f:8b:2f:6b:2b:0b:eb:f9:5b:1b:ee:90:8b:53:a4:4e:8a:ed:
b6:bd:80:b6:66:b5:e7:d1:9f:92:5a:51:d9:77:eb:cd:ab:cc:
2f:f2:40:92:df:79:65:c9:f6:c2:fe:ee:e6:da:9b:34:79:64:
17:ca:30:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 23:00:33 2025 by rpki-client