Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wVSo8_PH78jkBmG9Xvyq_eTGeHg.roa
File: wVSo8_PH78jkBmG9Xvyq_eTGeHg.roa (raw, json)
Hash identifier: ua+DLmIA3Omg3Yz14bkOwmm1qFE7dTRP9LnpsZ+Qbck=
Subject key identifier: C1:54:A8:F3:F3:C7:EF:C8:E4:06:61:BD:5E:FC:AA:FD:E4:C6:78:78
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01871B3B5B2EBAC144B853632AF4683A7985
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wVSo8_PH78jkBmG9Xvyq_eTGeHg.roa
Signing time: Sun 26 Mar 2023 00:04:47 +0000
ROA not before: Sun 26 Mar 2023 00:04:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:1b3b:21e8/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:1b:3b:5b:2e:ba:c1:44:b8:53:63:2a:f4:68:3a:79:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 26 00:04:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c154a8f3f3c7efc8e40661bd5efcaafde4c67878
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:29:32:e5:c4:ee:05:4a:69:24:93:99:a8:ee:
2d:ac:98:1d:d0:f8:68:05:c9:01:43:b2:9b:4e:af:
c5:75:e8:c1:e9:48:83:9d:c2:ae:c3:cd:67:03:6d:
ef:1d:b7:9a:90:18:a2:52:2c:bd:76:4e:c7:00:49:
4c:38:c2:11:54:44:4b:8a:2b:6c:7b:1f:23:81:9c:
54:5a:cc:e6:b4:ba:2a:d3:18:de:dd:fb:ba:25:ba:
32:3d:fc:7c:7b:37:7b:ec:65:e1:e4:47:95:c3:10:
ab:be:74:11:c5:10:7d:18:71:7f:bf:cc:fe:36:5f:
9d:ac:dd:48:cd:42:ca:67:24:96:a8:cc:d7:ba:8f:
52:2c:97:cb:b8:50:74:97:33:63:58:3f:bb:82:80:
06:87:8a:37:3d:85:c6:3c:37:e2:56:fb:d7:61:79:
2a:39:bb:4d:b0:fc:11:98:94:fa:01:0e:49:9f:10:
1a:ee:6d:da:7e:6c:63:a4:96:c4:29:13:63:7f:e7:
d7:6d:3e:01:ec:e3:52:7d:ef:59:eb:d5:2c:f4:03:
79:3d:b7:ce:24:e7:9d:7e:30:7a:62:ab:24:d9:9a:
3f:b4:87:4d:2b:63:50:58:f8:6e:57:58:ac:37:b5:
92:86:54:22:9d:a3:01:f1:ef:98:fa:17:fa:17:08:
2c:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:54:A8:F3:F3:C7:EF:C8:E4:06:61:BD:5E:FC:AA:FD:E4:C6:78:78
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wVSo8_PH78jkBmG9Xvyq_eTGeHg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
19:fc:e9:55:dc:58:20:88:04:c4:69:c9:cf:99:65:7e:8d:42:
c7:b5:7e:3f:54:6b:cb:8e:c2:a9:ed:45:b0:b4:3a:c1:20:9a:
ed:7d:92:61:4c:b7:c4:fe:83:c8:be:13:f7:4e:62:b0:95:ba:
01:0e:ba:2b:f1:df:db:b7:69:55:19:f1:ca:bf:88:18:a5:f1:
f7:67:f6:72:35:99:32:06:2b:70:14:54:29:08:75:e9:38:22:
ee:fe:d6:1f:24:ff:b3:da:69:e2:18:b1:ea:5b:69:9b:a9:51:
04:10:30:d9:c3:9b:ad:94:7f:99:d1:10:3e:a4:ad:95:1f:32:
a0:97:ec:de:67:4f:f2:1c:8c:41:34:06:0a:b0:ae:96:02:c2:
31:de:03:19:f7:bd:ad:be:20:3d:6e:6e:1e:ce:4d:6a:e4:ae:
aa:64:f8:df:17:c0:48:89:2c:0d:1f:10:32:27:c1:c5:1e:5e:
ea:0e:c8:d2:fa:0a:a6:69:79:06:4c:7b:f1:3a:1b:e8:a4:28:
32:09:20:74:e9:38:13:bf:86:ab:6a:57:1e:ea:9c:b9:5d:8d:
85:82:48:32:a6:78:a0:93:0b:7e:05:dc:31:0a:06:c0:57:5b:
ba:bb:94:ff:cd:25:d1:69:d7:b3:4c:1a:42:59:73:0c:43:48:
ca:37:cb:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:36:28 2025 by rpki-client