Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wlEPhSkbfz_dq7KZ4VKg2Vjbuws.roa
File: wlEPhSkbfz_dq7KZ4VKg2Vjbuws.roa (raw, json)
Hash identifier: JDca8Nt7DSskrXbPT9eUUa3YZ+LD0D538iYrb1dB4Qg=
Subject key identifier: C2:51:0F:85:29:1B:7F:3F:DD:AB:B2:99:E1:52:A0:D9:58:DB:BB:0B
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 801CB9F3
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wlEPhSkbfz_dq7KZ4VKg2Vjbuws.roa
Signing time: Sun 01 May 2022 10:12:46 +0000
ROA not before: Sun 01 May 2022 10:12:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:180:466e:42dd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2149366259 (0x801cb9f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 1 10:12:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c2510f85291b7f3fddabb299e152a0d958dbbb0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:22:6c:ed:b5:7d:96:dd:d9:2d:27:aa:7d:c7:
f5:6e:69:9f:d1:db:69:08:00:7f:e3:02:05:24:96:
87:9b:de:74:3b:d6:fb:30:26:29:0a:e7:77:60:c5:
96:e8:eb:97:a1:7b:83:4c:43:06:33:05:92:8a:ba:
8e:33:51:8e:e2:dd:dc:1e:b1:b5:35:11:81:fe:92:
7b:94:9e:38:5c:e4:c1:be:96:ae:75:b1:b0:51:6d:
ca:69:bb:be:67:47:0b:96:6a:81:f3:e5:80:53:ab:
a3:9a:e1:fd:09:10:a7:a0:99:71:57:ca:dc:f0:f9:
a1:cd:c2:c0:c0:17:5e:ca:84:da:cc:d6:ff:13:fc:
7b:95:84:c4:ac:cc:2c:14:de:14:19:1e:ca:18:6f:
63:4a:6e:1c:74:29:23:93:43:5f:5b:ea:2f:49:77:
50:e8:e7:11:4c:67:cd:ee:3a:17:85:dd:4e:5c:6c:
f4:4c:16:d5:cf:20:a0:4f:29:2e:ff:b9:6d:96:a8:
0e:fe:07:e1:7c:1c:92:59:3e:bc:51:53:51:52:45:
71:5a:ba:64:e8:69:c3:34:77:5d:8e:a6:2b:65:43:
4f:1b:1c:18:53:73:ed:2e:29:1d:b4:7e:af:7a:4f:
8b:5b:16:b9:fa:39:28:55:d1:8b:c2:66:e9:32:c9:
60:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:51:0F:85:29:1B:7F:3F:DD:AB:B2:99:E1:52:A0:D9:58:DB:BB:0B
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wlEPhSkbfz_dq7KZ4VKg2Vjbuws.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4c:98:d7:5b:6c:34:48:69:0d:b8:ec:bf:c6:44:21:13:35:a0:
eb:6a:c7:df:ff:ef:7d:3b:c5:de:d6:e4:75:29:5e:94:c3:d3:
76:46:4f:be:4c:e4:2c:c7:de:77:5d:2d:7d:85:55:11:06:83:
7b:0f:ef:b7:30:10:3f:52:af:e8:82:25:85:a4:4d:c3:38:2c:
cf:c5:ad:07:e6:b7:7b:d9:00:55:88:c5:4b:0a:36:17:02:e1:
a3:22:0b:f7:d1:d3:68:53:67:00:45:16:f9:f7:94:d6:ae:23:
d7:06:84:95:4c:d1:4e:c9:ef:4c:31:56:de:7b:68:59:9a:a2:
a9:62:e0:3c:65:82:a9:f5:8e:4b:6a:c8:a3:f3:b5:c2:3b:c2:
f1:25:29:b3:36:c8:fc:bb:9e:88:60:44:56:9f:51:87:6c:90:
e8:94:2d:95:88:40:b5:7c:30:9d:82:c1:94:e6:82:b9:dd:18:
d5:7f:58:b6:06:a9:da:74:2f:ca:55:f1:9f:f6:78:dc:66:ff:
38:7c:89:c0:b9:20:29:83:3a:ca:ec:ab:77:92:73:cb:1d:00:
a2:fc:88:bd:af:81:38:b5:0c:ce:45:11:33:8a:32:d2:0a:68:
10:c5:4d:82:d8:a7:06:5d:60:7e:4f:d7:c5:15:09:01:3b:e6:
a4:d9:44:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 01:15:06 2025 by rpki-client