Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wgpfdfF54pS6uXZV1DNGMOB5bT4.roa
File: wgpfdfF54pS6uXZV1DNGMOB5bT4.roa (raw, json)
Hash identifier: /FlIPgTu8HuxQRr6QbtxFcgA13WEvlxhib3X7MLoBpk=
Subject key identifier: C2:0A:5F:75:F1:79:E2:94:BA:B9:76:55:D4:33:46:30:E0:79:6D:3E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 695BF3AD
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wgpfdfF54pS6uXZV1DNGMOB5bT4.roa
Signing time: Thu 10 Feb 2022 07:16:23 +0000
ROA not before: Thu 10 Feb 2022 07:16:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17e:d600:60b0/128 maxlen: 128
2001:67c:64:ffff:0:17e:d524:ead9/128 maxlen: 128
2001:67c:64:ffff:0:17e:d9a6:5e4a/128 maxlen: 128
2001:67c:64:ffff:0:17e:ddba:7b5e/128 maxlen: 128
2001:67c:64:ffff:0:17e:db26:e5c4/128 maxlen: 128
2001:67c:64:ffff:0:17e:dab9:26f6/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:17e:da82:41aa/128 maxlen: 128
2001:67c:64:ffff:0:17e:dd83:3b9e/128 maxlen: 128
2001:67c:64:ffff:0:17e:dcde:5809/128 maxlen: 128
2001:67c:64:ffff:0:17e:d938:ba2e/128 maxlen: 128
2001:67c:64:ffff:0:17e:d85c:d348/128 maxlen: 128
2001:67c:64:ffff:0:17e:daf0:4034/128 maxlen: 128
2001:67c:64:ffff:0:17e:dc02:dc22/128 maxlen: 128
2001:67c:64:ffff:0:17e:d592:92a4/128 maxlen: 128
2001:67c:64:ffff:0:17e:d7ee:e040/128 maxlen: 128
2001:67c:64:ffff:0:17e:d6a5:23ae/128 maxlen: 128
2001:67c:64:ffff:0:17e:d901:fecb/128 maxlen: 128
2001:67c:64:ffff:0:17e:d7b8:3101/128 maxlen: 128
2001:67c:64:ffff:0:17e:a0dd:2f5b/128 maxlen: 128
2001:67c:64:ffff:0:17e:d826:2565/128 maxlen: 128
2001:67c:64:ffff:0:17e:dc39:b603/128 maxlen: 128
2001:67c:64:ffff:0:17e:db5e:7e8/128 maxlen: 128
2001:67c:64:ffff:0:17e:d713:9aeb/128 maxlen: 128
2001:67c:64:ffff:0:17e:d55b:c264/128 maxlen: 128
2001:67c:64:ffff:0:17e:d66e:8559/128 maxlen: 128
2001:67c:64:ffff:0:17e:d96f:7a13/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1767633837 (0x695bf3ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 10 07:16:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c20a5f75f179e294bab97655d4334630e0796d3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:93:d7:2b:39:4c:83:90:8b:30:93:1f:4a:71:
2d:0e:f5:0d:58:62:83:e4:e2:23:ca:b1:f6:59:f3:
14:99:d2:e5:57:fb:2e:51:e5:2f:df:f0:db:0c:8f:
82:ad:1b:77:d1:48:dc:6e:c2:44:b7:b6:e8:57:4b:
b5:c0:5d:45:bf:22:a8:dd:d8:27:2f:62:7b:7e:34:
28:19:e5:9e:8a:f0:d9:84:8f:21:c4:6c:90:16:c2:
8e:0e:62:bf:d8:0e:0c:d3:63:e8:30:83:81:67:1b:
78:0c:b3:3c:43:ce:79:80:a0:2a:21:64:f8:3e:b7:
11:48:dd:6e:bb:9b:e8:54:02:6a:0a:7b:a9:4e:57:
3c:88:b7:0e:20:d2:72:d7:e8:e1:d2:5a:64:ec:04:
13:de:31:86:c1:78:36:70:d4:2f:4b:b3:38:91:73:
96:c3:bd:b0:8e:80:28:f7:ec:3a:86:2a:a5:0b:57:
61:c5:9c:40:b0:d3:7d:0d:b6:ab:52:33:e6:31:fa:
c8:e4:e0:db:fe:79:5b:92:67:fe:eb:ba:cc:1f:ee:
5d:fa:bd:19:32:7b:48:e2:eb:05:cf:c8:9a:00:97:
be:84:af:46:3a:b9:45:e7:0c:bd:2f:64:ea:86:dd:
1d:f8:e6:84:af:ba:6e:b9:a6:67:66:25:a1:c7:ef:
43:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:0A:5F:75:F1:79:E2:94:BA:B9:76:55:D4:33:46:30:E0:79:6D:3E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wgpfdfF54pS6uXZV1DNGMOB5bT4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
17:b9:3e:00:ad:36:f2:b0:61:52:63:18:f6:47:d1:5e:5f:c4:
3a:98:b2:93:62:8b:2c:d8:3b:a3:a4:8c:11:41:f4:09:6d:f9:
5a:09:52:38:79:bb:a8:1e:c3:ec:16:64:ad:db:22:b7:e7:ed:
2c:ab:69:67:2a:8d:47:34:5c:0e:b3:8c:60:c3:b8:25:29:6a:
e9:3f:93:c4:b8:45:44:5a:e0:e4:3c:ec:85:36:69:45:a7:5c:
16:67:73:78:0f:1d:19:9c:db:42:f2:97:9a:e3:7e:3d:49:22:
05:88:3d:93:1e:4d:27:b2:5c:69:a0:b7:60:8d:20:e9:10:32:
ce:78:74:d3:42:0c:a7:28:d5:10:70:b3:c8:5c:7e:1e:47:bf:
cb:ee:84:89:f7:0e:97:1e:7b:e1:0b:4b:03:cb:ec:14:87:00:
6b:5a:f8:1c:87:87:2f:ff:f8:f4:28:69:2b:e9:3c:66:03:30:
4c:84:9d:c7:f6:f1:94:ca:06:4b:14:96:52:f8:20:3e:45:f8:
52:b6:1b:50:0c:4f:7e:a0:39:47:e4:1e:74:b4:54:4e:9b:2e:
c7:71:69:69:06:28:50:f7:15:3c:d3:3c:02:e6:89:7c:74:f4:
b9:a2:85:58:15:4f:c1:8c:55:e9:58:eb:83:ce:bd:49:cf:61:
18:28:91:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 19:49:20 2025 by rpki-client