Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wfV7jBO35yIVCSv_tjeAQMwiglA.roa
File: wfV7jBO35yIVCSv_tjeAQMwiglA.roa (raw, json)
Hash identifier: jevgYHzTjvhN5KoQlVi6Lp/5DcFCD04Js2EyE7JxvWI=
Subject key identifier: C1:F5:7B:8C:13:B7:E7:22:15:09:2B:FF:B6:37:80:40:CC:22:82:50
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018261B4504FA92808B84FC62E9BD82ABFAE
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wfV7jBO35yIVCSv_tjeAQMwiglA.roa
Signing time: Wed 03 Aug 2022 03:16:23 +0000
ROA not before: Wed 03 Aug 2022 03:16:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:61:b4:50:4f:a9:28:08:b8:4f:c6:2e:9b:d8:2a:bf:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 3 03:16:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c1f57b8c13b7e72215092bffb6378040cc228250
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d8:ed:56:b8:3f:29:62:d7:3c:01:fc:3e:7a:
b5:51:fd:24:f8:1e:6b:e9:8e:f6:d7:72:c3:e2:16:
8e:5f:a5:26:64:dd:ed:a2:97:5a:f0:5c:67:f4:cd:
05:d2:8b:f7:9e:e8:cf:d0:ba:77:cd:0b:0f:86:44:
c1:e4:8d:74:f0:e5:f3:a1:7a:59:ad:6e:d9:6c:13:
6b:20:42:16:6e:13:ad:c3:7d:88:5d:3e:f0:bf:2f:
ce:9b:30:0c:70:7c:e5:f5:b6:66:9c:94:23:38:b1:
5c:30:46:62:7a:75:42:ab:6c:48:13:71:47:47:a8:
63:49:d0:41:26:02:22:79:eb:87:9e:d2:54:7a:08:
4b:dc:e0:e4:a6:cf:f0:a8:26:ef:28:c9:4f:99:56:
a9:75:39:ad:20:b7:1e:aa:6b:13:c1:a5:16:a3:35:
cb:ed:b2:79:91:8c:bb:c1:54:d1:6a:6b:b3:fc:c9:
ac:f3:ca:1f:68:02:05:e7:5c:ad:37:3f:f2:53:a3:
7c:6a:9f:ec:1a:1c:cd:54:83:aa:a2:34:6f:2a:eb:
14:8b:05:af:ca:60:a1:42:3f:b8:aa:74:c8:c3:2c:
d4:ff:f0:54:63:6e:28:5f:27:82:b6:08:78:69:a8:
53:2f:e4:bb:85:0a:cc:9e:84:e0:8b:f1:d1:7f:5c:
28:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:F5:7B:8C:13:B7:E7:22:15:09:2B:FF:B6:37:80:40:CC:22:82:50
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wfV7jBO35yIVCSv_tjeAQMwiglA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
ae:ff:43:b6:f3:3f:1b:b2:92:08:8e:57:00:15:06:97:44:ba:
12:fb:e7:6e:3a:e0:49:ee:2b:43:7b:6a:32:4c:a1:9b:6e:74:
34:10:23:f8:38:3f:c2:66:bc:88:c5:49:1c:82:cb:70:e5:0c:
86:4b:67:03:da:4f:e2:7c:07:9b:2d:a5:a6:d8:25:b1:9a:c8:
15:cd:fd:4c:1f:ed:c1:2f:3b:35:61:60:40:2c:21:56:e5:bc:
e2:b6:09:16:18:1f:be:1e:0d:39:ae:0e:4b:36:a1:a5:b3:4b:
b3:df:0d:0b:94:59:60:11:78:1e:6a:53:2e:ff:b7:72:19:91:
2f:82:7b:74:91:3a:43:ea:99:54:1c:95:7e:0c:8b:39:a0:f9:
94:c0:00:82:06:85:38:2d:f3:e6:0e:56:af:07:42:2d:9e:ef:
de:65:7d:22:8b:ee:7c:7f:36:0b:1f:35:89:97:b6:e8:d6:cd:
7c:cb:06:19:6f:0d:77:ec:19:9f:67:4b:72:ec:78:fe:c1:32:
20:a1:9d:c9:02:d7:ab:75:23:ff:34:97:8c:1f:2e:cd:49:6c:
53:cc:c2:4e:f6:35:23:92:22:91:da:d5:b7:80:77:ca:64:43:
80:94:65:7f:fa:0f:1e:21:90:70:51:63:14:07:7a:a0:78:e1:
67:f4:91:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 06:57:06 2025 by rpki-client