Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wQs41c10L3xySn9fjX_lLYY7Kd0.roa
File: wQs41c10L3xySn9fjX_lLYY7Kd0.roa (raw, json)
Hash identifier: h3gwz+vWplCOx1+8iyTk+NuVX90GW7MKxPg1OpjOh/s=
Subject key identifier: C1:0B:38:D5:CD:74:2F:7C:72:4A:7F:5F:8D:7F:E5:2D:86:3B:29:DD
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018653B3B9E5E06AFBA50AAA6CBA6D1E27C3
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wQs41c10L3xySn9fjX_lLYY7Kd0.roa
Signing time: Wed 15 Feb 2023 06:12:12 +0000
ROA not before: Wed 15 Feb 2023 06:12:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:53:b3:b9:e5:e0:6a:fb:a5:0a:aa:6c:ba:6d:1e:27:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 15 06:12:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c10b38d5cd742f7c724a7f5f8d7fe52d863b29dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:4c:54:b6:a0:af:74:2c:a2:59:da:55:42:8d:
82:f6:97:86:19:70:fb:e3:c4:9f:53:75:53:0f:b2:
11:a5:9f:5f:f8:c0:24:33:dd:d3:90:9f:c3:db:bc:
75:03:f8:a6:c7:be:fc:7a:52:c4:4b:ff:cf:c6:da:
41:00:3c:fa:a8:c4:69:f1:7c:23:0e:ea:f7:89:c7:
1b:a9:d2:bb:fe:57:c3:33:cb:ae:59:da:f7:b6:32:
58:83:03:20:ad:a5:c9:3f:c2:08:72:8d:f1:df:42:
42:2b:63:38:b0:9c:36:8b:af:a5:54:d6:bd:1e:2e:
2c:28:3d:1e:f3:f6:ad:33:88:ab:4f:88:0d:39:0a:
8d:61:b9:12:88:8f:cf:73:0f:de:68:14:e9:fd:9a:
7e:74:2a:20:2f:bf:f5:a8:9b:ab:d0:db:fc:0d:57:
83:c9:96:32:1d:6a:59:ac:c6:7c:e9:3c:e7:72:e2:
b4:39:8c:7c:de:8a:f7:6b:c6:b8:a2:36:e8:7c:9b:
42:c4:b3:0f:1c:55:9f:0d:b9:21:2f:b9:23:d2:04:
84:e7:fe:b6:a5:81:f4:9c:83:5c:ac:73:a8:54:8d:
73:9f:8f:3c:1e:c1:b8:80:72:9c:9e:de:a1:01:97:
61:32:f2:57:d2:14:7f:03:45:00:97:35:1d:01:cc:
60:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:0B:38:D5:CD:74:2F:7C:72:4A:7F:5F:8D:7F:E5:2D:86:3B:29:DD
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wQs41c10L3xySn9fjX_lLYY7Kd0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
97:66:44:d8:b7:9e:5f:b1:a0:78:be:8f:a9:32:f8:b0:25:3c:
96:00:78:bf:01:4a:4c:db:2e:dc:0d:84:64:5a:25:60:09:54:
69:90:60:0f:68:77:bc:da:e4:1c:9c:48:72:25:16:35:67:4e:
7b:d2:95:f3:ab:08:57:84:90:79:98:68:8a:ab:1e:60:af:7a:
b3:cd:f5:30:9d:50:c8:d8:fa:33:82:00:f5:65:27:22:ea:eb:
4d:5d:e5:e6:66:ef:df:26:cd:18:16:7a:12:17:97:db:59:3b:
12:b9:d1:69:75:af:ef:5e:06:ff:55:90:a7:a2:23:c1:f4:c0:
aa:b8:62:10:54:88:54:84:c7:f8:39:30:26:6d:ca:36:9b:0a:
1a:19:a4:00:22:7f:4a:0b:9f:6e:a9:58:44:de:d4:d4:b9:7c:
c2:ca:90:41:d9:52:9d:49:4c:96:c3:23:49:ff:c0:ce:85:3c:
bf:1a:c8:6a:02:47:57:ab:7d:f0:4d:08:bd:5f:a0:99:81:5c:
a1:27:2f:51:fa:83:7d:96:7e:b7:da:56:83:08:24:4b:62:4d:
96:ab:1b:47:36:bf:3e:06:8e:0f:13:57:02:85:35:3e:e8:c3:
9b:09:1b:f4:68:07:5e:7c:3b:24:dc:cb:d5:1d:2b:60:73:2e:
e2:1b:4a:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 02:51:47 2025 by rpki-client