Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wi3VcxMHzEow5_04j0o_On46_A0.roa
File: wi3VcxMHzEow5_04j0o_On46_A0.roa (raw, json)
Hash identifier: s7Uzl2AE/sxYWPp70Mp6KNsdEsTXGQ51bOV+SqHWykY=
Subject key identifier: C2:2D:D5:73:13:07:CC:4A:30:E7:FD:38:8F:4A:3F:3A:7E:3A:FC:0D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186A736057896071DB71C145DEFCB091A58
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wi3VcxMHzEow5_04j0o_On46_A0.roa
Signing time: Fri 03 Mar 2023 11:23:00 +0000
ROA not before: Fri 03 Mar 2023 11:23:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:a7:36:05:78:96:07:1d:b7:1c:14:5d:ef:cb:09:1a:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 3 11:23:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c22dd5731307cc4a30e7fd388f4a3f3a7e3afc0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:98:66:24:0d:05:a9:42:ba:39:e7:76:dc:e7:
77:13:cd:72:d7:60:81:a4:8e:d3:4f:f9:95:c7:99:
5a:ae:26:9c:69:b3:6b:a3:3e:82:29:ad:e3:81:bc:
96:35:d7:e8:4f:e7:fc:34:e5:2d:bb:06:dc:ac:58:
33:62:6a:0c:bd:83:6d:49:4e:c6:0b:0c:4d:91:3f:
65:e3:9f:fa:11:ad:cc:e0:81:b2:38:9a:04:44:06:
08:8e:ac:17:97:e9:4c:a6:1d:01:87:5b:68:91:cd:
31:8c:00:d7:67:b7:a5:e1:6f:e5:03:ee:9a:11:d9:
c1:2f:b7:78:57:cd:51:66:9a:c9:5d:a4:56:df:36:
86:be:2b:b6:2c:63:52:bd:90:c9:ef:73:1a:b4:fd:
63:f7:f1:3a:0d:37:ed:8b:12:63:02:bb:e1:70:bb:
e8:81:61:b9:65:21:6c:50:64:27:e0:7d:c2:28:48:
fa:dd:3a:20:3d:04:16:e3:f1:7f:1f:a3:b7:a2:c6:
f3:f2:f0:17:2f:59:a9:11:6f:44:82:d1:6c:28:e1:
a0:38:ce:8f:d7:15:7f:b1:e1:cd:8d:2b:37:1e:c5:
79:14:fd:d1:bc:9b:44:4c:b6:9f:98:df:09:6f:4d:
8a:af:8b:37:63:9b:43:74:33:79:21:f7:f2:b7:11:
24:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:2D:D5:73:13:07:CC:4A:30:E7:FD:38:8F:4A:3F:3A:7E:3A:FC:0D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wi3VcxMHzEow5_04j0o_On46_A0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8c:4d:20:15:0b:33:6b:06:13:64:cf:e6:4e:64:d1:e7:6a:8a:
b9:ae:39:21:ac:ef:ec:b7:54:98:de:fa:02:6e:c8:38:81:e0:
26:46:83:4c:64:66:e6:b2:6b:40:32:4d:b3:8d:0c:fc:9c:f9:
0b:d2:12:24:52:cc:bc:1d:f7:32:b5:ad:12:67:8b:63:ae:0c:
7f:eb:d0:83:5f:6b:11:a9:0d:8f:17:a3:32:d5:99:9d:58:d1:
c8:35:ea:75:35:89:be:83:b7:56:15:37:08:95:5f:dd:44:d8:
d7:4d:7d:fa:0a:d9:09:33:b7:77:e9:4c:2b:e1:85:af:a3:41:
3c:42:c2:7b:f7:d2:53:95:3e:9c:c9:05:cf:8e:3f:3e:81:c8:
99:79:a2:62:48:e6:4d:2e:a9:1a:46:7c:45:65:ca:2a:7b:3b:
c9:30:b6:f6:7a:b2:03:80:73:b4:77:79:56:3a:6f:77:cf:a1:
7d:fc:52:9a:a3:a6:52:24:e6:b3:db:f8:e5:ff:41:52:1c:f8:
d3:25:c3:03:9e:da:fd:db:48:7c:f1:a3:00:7a:b6:49:4a:c5:
60:1c:ff:96:d7:40:cf:4a:53:55:8c:f0:d4:48:8e:66:37:41:
41:45:c1:23:37:11:23:9a:37:17:36:7c:14:b6:e9:4d:aa:b6:
cd:9a:02:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 19:49:25 2025 by rpki-client