Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wjhi7RuIhsdOORA_m6-I1RgVo9E.roa
File: wjhi7RuIhsdOORA_m6-I1RgVo9E.roa (raw, json)
Hash identifier: V3e6KWDnyRqdh25ngSqZMyZw4WNdUeWZQdgG4SP03zM=
Subject key identifier: C2:38:62:ED:1B:88:86:C7:4E:39:10:3F:9B:AF:88:D5:18:15:A3:D1
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187066AADAB8B9CD4FF53B66620F6FD01E7
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wjhi7RuIhsdOORA_m6-I1RgVo9E.roa
Signing time: Tue 21 Mar 2023 23:04:27 +0000
ROA not before: Tue 21 Mar 2023 23:04:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:66a:9e01/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:06:6a:ad:ab:8b:9c:d4:ff:53:b6:66:20:f6:fd:01:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 21 23:04:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c23862ed1b8886c74e39103f9baf88d51815a3d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:5e:6a:f6:ea:6d:a2:ae:78:78:e7:6f:3e:f2:
09:77:07:c4:47:78:83:f8:d1:b3:2a:eb:2e:94:ba:
9f:69:db:8c:11:b5:13:8d:75:ac:10:c9:78:ab:9d:
83:f9:42:5f:b1:a4:78:3e:eb:da:a4:6c:da:80:56:
91:17:6f:af:a5:99:00:78:b7:dd:bf:bf:59:e6:22:
7d:27:48:3b:4e:61:7f:5d:83:07:ff:e1:af:0a:61:
d6:e7:94:5b:87:96:54:46:a4:c7:4b:38:8f:0e:cb:
5f:ac:37:c0:5e:bf:8f:52:1c:73:11:d9:6b:98:3c:
44:ea:84:d2:ef:f8:ff:41:30:73:ad:eb:80:11:50:
50:c2:c5:82:5e:dc:7e:1d:f9:7f:4e:aa:38:7f:45:
ca:ce:e2:ad:12:53:3a:b3:2a:83:f9:2b:3b:15:ed:
e5:43:12:02:52:4e:74:f2:64:32:f3:10:f5:c7:a2:
5f:f0:a1:3d:d0:2c:fa:d3:c0:0c:5b:1f:d4:ed:73:
13:22:93:5b:3c:1c:f8:3e:3e:cf:a2:62:8a:f7:c0:
02:d7:99:cf:64:a0:69:c2:aa:e5:8f:05:e2:4c:1c:
70:7f:37:81:12:7a:7f:5b:fa:72:4a:7a:f5:68:a8:
83:5c:cc:af:15:c6:f6:c2:3d:68:54:fe:37:0f:d5:
4e:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:38:62:ED:1B:88:86:C7:4E:39:10:3F:9B:AF:88:D5:18:15:A3:D1
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wjhi7RuIhsdOORA_m6-I1RgVo9E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
94:1e:4e:8a:19:44:38:44:ed:29:58:26:10:d5:e4:15:fd:a6:
c7:47:90:0a:ff:c7:9c:56:17:11:9e:4c:71:02:0e:e8:4c:2d:
90:dd:06:53:ee:ba:40:ce:43:c4:77:dc:f9:9f:e6:5f:89:9e:
21:ba:81:26:ed:5f:c4:4a:5b:89:f1:78:10:81:69:41:27:f0:
ac:93:01:cc:ee:63:9d:2a:fa:2e:26:7f:e6:ad:82:d9:ae:9a:
f3:ce:3b:c8:b3:a4:99:a3:53:e1:fb:b7:ad:c0:ea:42:9f:a6:
ec:25:5f:cc:35:c9:3f:a2:90:d2:93:72:b9:ec:fa:6b:a4:c4:
a7:10:ed:69:b7:c5:00:f5:d6:ab:09:2e:9f:e8:34:41:12:be:
d4:da:87:de:07:f9:a5:d8:89:88:30:1b:6c:d3:e5:f4:32:bc:
e7:2f:a6:8d:4b:b6:1e:c5:1b:3b:57:34:de:d2:5d:8a:9c:8c:
72:ab:e8:9b:ad:16:32:f0:ca:f1:c3:39:a1:9c:49:72:9a:f6:
3b:38:a4:ec:53:a9:ac:38:8f:08:af:12:b2:55:68:da:59:84:
34:d1:8d:dd:88:31:83:65:b0:9c:44:1e:d2:64:28:ae:05:07:
cc:88:0a:ab:e5:7d:85:59:28:14:b1:9e:b6:c6:11:0f:c9:f5:
15:13:e1:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 06:58:43 2025 by rpki-client