Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/waV75vO7NGh4zuTXXsb3ScaQP4Q.roa
File: waV75vO7NGh4zuTXXsb3ScaQP4Q.roa (raw, json)
Hash identifier: KWF/smYvNH8IRCBwg19oCTuX3oNX8OwLK2PI5oZHsns=
Subject key identifier: C1:A5:7B:E6:F3:BB:34:68:78:CE:E4:D7:5E:C6:F7:49:C6:90:3F:84
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A2B22DC74CC61D505AE6C25783183DB88
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/waV75vO7NGh4zuTXXsb3ScaQP4Q.roa
Signing time: Fri 25 Aug 2023 05:20:19 +0000
ROA not before: Fri 25 Aug 2023 05:20:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:2b:22:dc:74:cc:61:d5:05:ae:6c:25:78:31:83:db:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 25 05:20:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c1a57be6f3bb346878cee4d75ec6f749c6903f84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f3:25:07:6a:c9:1c:6e:9c:36:81:de:ab:a9:
16:f5:0c:52:e9:62:bb:0a:94:ae:32:ac:7c:2f:65:
e2:77:67:44:27:c6:ac:96:53:51:03:01:ff:ac:31:
da:5b:25:83:25:70:0e:71:05:17:0d:54:58:2f:f0:
08:1d:41:2f:72:ed:f4:34:20:50:8f:4d:06:c9:e5:
bc:d0:30:67:93:d6:bb:0b:b4:0e:a2:4f:26:94:a3:
a4:da:07:9b:bd:5e:82:12:c2:9b:ee:e3:44:5e:c5:
49:33:59:a7:2e:98:cc:08:02:58:c0:d6:91:29:32:
3e:22:72:7a:0b:3f:71:e1:6b:2f:d3:d5:64:72:68:
bd:f7:58:76:b7:2f:28:16:3c:5f:c1:4a:24:45:f6:
77:65:3b:1f:af:7d:6a:d3:42:0a:8f:8c:d3:0d:98:
5c:40:62:ed:02:ed:3e:5d:b3:78:b2:e9:ce:d3:b3:
64:d9:c9:9c:5e:7c:60:a8:63:dc:a5:cf:39:4a:03:
cc:5e:32:ae:df:35:02:41:a7:76:ed:03:44:78:33:
6d:a0:d8:94:3a:70:f2:10:83:dc:55:1c:e5:da:ff:
4c:3c:6d:b9:d4:1e:91:b6:00:bd:35:7b:5e:06:b0:
94:1e:31:75:e9:a1:fb:f8:32:71:bb:f6:d9:80:0b:
c1:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:A5:7B:E6:F3:BB:34:68:78:CE:E4:D7:5E:C6:F7:49:C6:90:3F:84
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/waV75vO7NGh4zuTXXsb3ScaQP4Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6d:34:18:ae:96:13:4f:1e:a0:bc:2a:49:e9:b1:58:b3:3c:c2:
88:b2:af:30:e3:23:aa:83:7c:68:63:13:68:86:4f:f5:5a:43:
57:2c:95:96:6a:cb:85:77:2a:e0:69:8e:10:14:7c:bf:47:16:
63:ed:10:fa:ff:e0:6d:1e:79:25:71:99:e6:c7:5d:22:ed:a6:
46:17:72:cf:1e:a9:1d:76:5e:79:5b:de:38:2c:96:88:ec:9e:
cf:e9:00:5d:d5:fa:ff:9b:72:07:68:6c:81:4d:bb:73:d3:e2:
40:c0:fb:9d:19:b8:ab:de:55:56:55:35:5e:ee:31:bd:5b:9e:
ec:03:25:a9:4c:78:41:24:05:b7:5f:96:ca:8c:dd:1e:bb:4b:
4f:98:0b:0e:4c:7d:76:20:db:48:ea:3a:77:ee:c0:53:84:b8:
78:38:06:a4:59:d2:c8:39:7e:d1:98:ce:ee:66:f4:13:38:0f:
99:97:e2:70:37:47:ae:d2:bc:e0:08:53:4b:cf:1b:ba:0d:21:
ee:15:bb:6a:2b:f3:17:cb:02:bd:9f:f8:a9:ac:32:88:22:ec:
f5:7f:46:de:65:41:01:ca:de:c3:99:1f:9e:81:4c:fb:d2:a0:
38:c1:56:85:3c:33:75:b5:db:b5:20:33:ff:c2:0f:8a:70:ad:
dd:da:9d:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 22:00:09 2025 by rpki-client