Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wVP_Igp62XLlybIkCpjXbZx2k8Y.roa
File: wVP_Igp62XLlybIkCpjXbZx2k8Y.roa (raw, json)
Hash identifier: jpjLbxQj+sPPBcMW7S4iuAaJL1IcEXmE6BCmjn/2Zmw=
Subject key identifier: C1:53:FF:22:0A:7A:D9:72:E5:C9:B2:24:0A:98:D7:6D:9C:76:93:C6
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01871FC3523AC1F07FEA3E3867D6B96F5F28
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wVP_Igp62XLlybIkCpjXbZx2k8Y.roa
Signing time: Sun 26 Mar 2023 21:11:46 +0000
ROA not before: Sun 26 Mar 2023 21:11:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:1f:c3:52:3a:c1:f0:7f:ea:3e:38:67:d6:b9:6f:5f:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 26 21:11:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c153ff220a7ad972e5c9b2240a98d76d9c7693c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:90:fb:bf:c2:c6:77:93:69:65:db:6e:e9:d0:
f2:88:31:50:08:65:f7:41:f7:f6:39:a9:10:d9:e5:
50:10:01:05:85:75:c8:ae:ee:c4:02:97:2b:77:0a:
d8:04:75:0d:69:30:4b:8f:74:70:1c:6e:83:3a:67:
02:16:a5:6e:23:f7:36:db:15:d4:56:55:c1:fe:10:
f8:35:98:3d:7b:96:ba:ca:c0:e8:f9:52:ea:34:92:
73:04:4f:d3:53:c6:95:31:64:b9:7e:23:b8:53:40:
79:08:b4:6a:38:d8:1e:a8:6b:a1:ce:ea:e3:47:a6:
a0:83:3b:87:7a:91:d1:e3:c7:9f:c2:e2:61:09:62:
28:6c:f7:93:51:74:36:21:f5:09:a0:62:ea:87:a7:
6f:19:33:c6:bf:b3:5d:c7:9a:c3:80:c9:60:1d:45:
87:08:27:6a:50:4a:5d:74:bb:0a:fa:92:78:ec:d5:
ad:a1:a0:21:e5:c7:ac:a3:62:10:b3:79:ff:67:18:
8f:25:32:1b:c2:e1:0a:bf:24:70:28:7a:c7:b4:d4:
c7:52:b6:39:ba:27:82:5b:bd:f5:82:7f:34:cd:a1:
b2:0f:94:a3:4d:ac:3b:21:91:f3:68:a1:dd:ed:84:
7f:a7:8a:bf:01:c3:57:e8:6f:ae:e9:62:5f:fc:1d:
23:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:53:FF:22:0A:7A:D9:72:E5:C9:B2:24:0A:98:D7:6D:9C:76:93:C6
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wVP_Igp62XLlybIkCpjXbZx2k8Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
86:66:9d:9c:da:ae:91:e6:85:73:49:19:81:6f:7f:73:54:1c:
6b:b7:95:2e:dc:9a:f9:2f:9a:8d:e3:6e:48:76:88:30:e0:8b:
5a:80:a7:7a:c7:22:97:bf:8c:b5:79:3a:2f:0a:10:ac:1f:ae:
79:2a:21:20:d0:56:1c:60:07:50:47:a7:64:37:90:b6:51:3e:
c7:82:10:f1:9c:9f:73:32:3c:71:8a:8e:4b:a9:98:cc:35:e8:
f2:47:b5:65:26:f6:ee:39:7f:b1:48:ab:e2:8e:87:6c:98:3e:
9a:30:1b:a7:38:d5:c8:48:4e:19:cb:e7:24:41:61:ec:f9:d6:
6b:93:f4:ea:86:b9:7b:4c:8d:19:a9:04:ca:c2:25:51:d6:00:
52:02:4f:fd:8d:1a:29:bc:d2:84:ad:b1:c4:85:88:6a:8a:b4:
c4:f1:5f:2f:3f:bc:bf:c8:1f:8b:de:30:59:64:d6:f8:1a:fa:
7e:2d:5c:0b:6d:05:ca:24:29:35:7d:f8:38:f1:04:e8:f6:97:
58:65:ba:4d:23:57:83:a4:32:6b:1a:76:61:d6:43:40:cf:65:
7d:d8:84:85:6a:7b:71:fa:55:90:67:c2:6c:c0:e1:64:67:b1:
3d:76:5d:14:84:5f:c5:da:7d:73:15:d2:3a:2c:d4:8f:3e:43:
f8:21:01:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 03:34:09 2025 by rpki-client