Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wkZ5Gc7_8J7-d2XDunvC3KkAwag.roa
File: wkZ5Gc7_8J7-d2XDunvC3KkAwag.roa (raw, json)
Hash identifier: P92BQXG42WWIwNPc1biCRn97QP9mt33IaefEmj8oY5c=
Subject key identifier: C2:46:79:19:CE:FF:F0:9E:FE:77:65:C3:BA:7B:C2:DC:A9:00:C1:A8
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189C90E3514F9376FD44AC81AA9052552F9
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wkZ5Gc7_8J7-d2XDunvC3KkAwag.roa
Signing time: Sun 06 Aug 2023 04:14:58 +0000
ROA not before: Sun 06 Aug 2023 04:14:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:c9:0e:35:14:f9:37:6f:d4:4a:c8:1a:a9:05:25:52:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 6 04:14:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c2467919cefff09efe7765c3ba7bc2dca900c1a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:67:8f:0a:3f:7f:a9:b7:5a:2e:5a:7b:ff:25:
80:f9:89:7e:27:fc:8c:04:07:ad:be:d2:f1:74:69:
f1:99:cf:33:b0:71:d8:52:79:d5:db:f4:c1:ca:03:
11:5c:1f:4a:3f:c7:ae:6c:c8:d1:a3:a4:d5:28:90:
9e:b0:f4:ff:dd:19:c0:a5:f4:4f:23:36:55:d7:73:
80:9d:11:74:7c:ac:a5:14:da:d9:f5:ba:02:b1:e3:
51:95:ca:8c:ef:99:4b:e0:b9:c3:81:67:e0:78:dc:
0d:3d:e4:b1:1b:24:24:33:90:68:56:f9:78:8f:b2:
d6:c3:ad:26:49:e8:dd:bf:c4:0e:4f:37:fe:c6:02:
02:49:54:34:5e:bb:b5:4f:f0:a6:d1:7d:ab:9e:03:
99:df:b9:41:95:d0:4e:45:2c:9c:ee:c0:cd:b7:3b:
90:f0:c8:e0:65:04:ab:82:c1:08:04:36:60:f4:5f:
0a:2f:75:02:44:aa:44:55:1f:77:a4:2f:9a:7a:a8:
f3:43:26:7a:2b:0d:ac:25:b6:56:cc:15:90:63:4e:
9b:ae:78:3c:20:3c:7f:de:7b:f0:5c:d4:91:c4:3c:
6a:4a:ce:35:d5:7f:cc:ce:b3:4e:35:b6:2f:ad:5c:
9b:a1:4a:86:6b:65:38:df:43:f3:f2:63:e1:bd:7d:
40:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:46:79:19:CE:FF:F0:9E:FE:77:65:C3:BA:7B:C2:DC:A9:00:C1:A8
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wkZ5Gc7_8J7-d2XDunvC3KkAwag.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
ae:16:8b:d0:76:18:29:7d:95:24:12:47:2f:52:d5:99:ff:f7:
0c:82:c5:7a:1b:e3:52:04:bd:6c:de:2e:f8:fb:c9:c6:d4:b0:
7e:b1:ec:7f:6b:db:04:46:7a:99:7f:f0:3d:71:05:8a:b6:bf:
df:cc:77:88:3d:8e:fb:26:90:99:b9:8f:01:4c:84:37:f3:59:
f7:f7:ee:5d:84:46:0e:a2:b0:4c:53:80:d7:bc:7b:61:96:79:
c1:c2:ff:77:6a:08:60:d7:13:ba:41:fa:b0:22:1c:66:34:25:
24:ad:01:5e:4f:c1:af:5e:2d:fd:65:c7:74:12:6d:eb:4d:03:
1f:05:28:71:26:d6:4f:29:71:83:59:14:60:c5:f4:0c:fd:da:
b7:7a:ba:37:ea:a3:75:65:de:b1:84:d4:25:3c:0c:a4:0c:0b:
94:50:1f:bf:dc:03:4d:73:94:51:20:93:8d:04:4b:b5:f5:87:
f8:bc:44:84:40:4d:0d:83:ec:6d:94:18:1d:e7:a1:82:91:da:
38:a9:01:74:98:d0:16:28:25:b3:c2:6b:fe:9d:7f:04:38:6e:
0f:3f:5a:68:b7:87:c0:1a:f3:85:ac:6d:6d:c9:f7:89:c9:3a:
5b:7c:52:22:96:bb:72:f9:83:40:6f:57:d4:ff:9e:1b:3e:19:
c2:f2:c8:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:35:57 2025 by rpki-client