Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wYFrv88E_y24WyQKpxUO_YjuWf4.roa
File: wYFrv88E_y24WyQKpxUO_YjuWf4.roa (raw, json)
Hash identifier: dn5S/rVdTFsi1nHi6TCeRM2WAnDrALGOHkwRPboPods=
Subject key identifier: C1:81:6B:BF:CF:04:FF:2D:B8:5B:24:0A:A7:15:0E:FD:88:EE:59:FE
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01888CF6D4E05047027821A1DFE6870C14A9
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wYFrv88E_y24WyQKpxUO_YjuWf4.roa
Signing time: Mon 05 Jun 2023 19:09:26 +0000
ROA not before: Mon 05 Jun 2023 19:09:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:8c:f6:d4:e0:50:47:02:78:21:a1:df:e6:87:0c:14:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 5 19:09:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c1816bbfcf04ff2db85b240aa7150efd88ee59fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:6b:bb:08:8e:51:57:60:83:4e:1d:b5:45:6f:
c9:bb:84:7e:e0:94:37:36:15:db:0b:28:a0:ab:a1:
35:87:dd:98:37:34:e8:c5:db:0b:87:d5:fd:4b:c7:
3b:36:46:07:02:b5:60:e7:76:1e:5b:5d:fc:cb:66:
0b:fa:a1:3e:81:96:8b:a5:d9:36:79:6b:c7:d8:3c:
26:fc:75:c2:9a:ab:15:94:31:09:00:4e:2d:04:82:
d4:cd:4c:ea:f2:64:bc:d3:a3:9b:5a:2c:79:ea:ba:
0a:4f:20:93:0a:c7:28:d0:1b:96:63:60:85:e1:4e:
59:ab:7a:e3:93:a9:98:0e:60:80:28:12:f4:29:8c:
15:8f:94:c6:b6:f8:ad:53:e6:92:e5:98:8f:04:0e:
d2:cf:a4:14:91:39:3c:1f:5c:b6:14:55:7e:6c:74:
15:35:54:52:74:76:86:3d:28:61:61:38:f7:f1:19:
35:16:ec:d7:88:2d:46:1d:46:2b:ee:b2:21:c3:5d:
6f:e4:0e:35:ae:4d:cb:b2:d7:c0:76:db:b6:cb:dc:
c2:2c:d2:c2:38:1e:7e:76:08:b3:a7:1a:da:5b:9c:
3a:52:de:16:49:95:2a:84:ea:a1:00:bd:ae:d0:e1:
fb:8a:c3:eb:f3:e6:2b:ee:32:68:d1:06:45:ad:73:
a0:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:81:6B:BF:CF:04:FF:2D:B8:5B:24:0A:A7:15:0E:FD:88:EE:59:FE
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wYFrv88E_y24WyQKpxUO_YjuWf4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
27:ef:a7:3c:54:8f:54:fa:15:3b:11:ae:a4:a0:16:eb:da:3e:
7b:bb:b3:a8:b1:3b:ce:df:b8:78:33:3e:18:c4:76:2e:ff:21:
cb:d4:31:fc:7c:7c:c4:59:a2:61:68:a7:8a:23:d9:26:90:cc:
6a:e4:64:b6:6c:5c:e8:a1:c4:25:c9:90:b0:f0:df:a7:f8:ad:
b9:0c:cc:b0:3e:c7:81:0a:00:75:2d:17:c2:6b:e6:6c:db:0c:
52:7f:c8:56:a6:8c:bf:6b:b4:91:a8:09:49:83:f0:92:0e:47:
13:69:a8:9c:4e:aa:e6:b9:3f:8f:39:1a:35:92:ea:94:f4:a2:
50:4c:16:8f:b0:cd:83:98:1d:b7:2e:2c:57:32:41:3e:0b:d5:
ef:29:be:df:26:06:d0:9f:39:e2:29:1a:dd:29:38:1f:2e:95:
dc:22:85:5d:c5:28:a5:85:8a:ba:2b:da:93:03:f0:1c:a2:56:
d4:cb:00:54:0b:4f:81:f0:b9:f5:a1:25:b0:44:3f:88:50:d3:
ec:29:5a:e6:90:16:4d:c7:30:ca:da:fb:6c:26:ea:d5:12:be:
ac:89:c6:10:41:e6:4e:d4:33:5c:b0:8f:f5:a3:ba:82:a8:96:
cb:57:c2:02:42:d8:9f:f7:aa:ce:db:9a:fe:13:fa:b2:2f:e3:
95:19:70:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 20:25:15 2025 by rpki-client