Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wlaHJ76k5e6ASmCE9pqGAYNni0I.roa
File: wlaHJ76k5e6ASmCE9pqGAYNni0I.roa (raw, json)
Hash identifier: B6Yh1/7JlfA7ZKkPKRVgvgp3njixxRxzrE1auTn3QQo=
Subject key identifier: C2:56:87:27:BE:A4:E5:EE:80:4A:60:84:F6:9A:86:01:83:67:8B:42
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01869D4635B843F83B98351ACB543AD22A61
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wlaHJ76k5e6ASmCE9pqGAYNni0I.roa
Signing time: Wed 01 Mar 2023 13:04:29 +0000
ROA not before: Wed 01 Mar 2023 13:04:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:9d46:c68/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:9d:46:35:b8:43:f8:3b:98:35:1a:cb:54:3a:d2:2a:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 1 13:04:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c2568727bea4e5ee804a6084f69a860183678b42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ac:3d:14:a3:8f:87:48:04:d7:6f:36:b6:46:
63:18:71:07:2d:61:3e:a0:18:b5:d7:5b:bf:35:9b:
90:79:30:aa:4a:28:87:49:63:1f:f4:33:3b:37:23:
cf:00:66:44:6f:a8:54:d8:24:0a:e6:42:5e:34:02:
11:6d:c3:d8:1b:fa:46:81:dc:c2:95:c9:08:45:e5:
a4:62:4c:9e:19:26:7d:d9:f3:20:91:8b:e8:a8:5f:
ce:b7:f1:fc:32:c9:8d:10:2f:35:8a:cf:3f:2e:18:
c9:4e:11:ee:f4:7e:da:67:67:e6:ef:93:6b:be:76:
c6:41:59:d6:16:e4:86:61:b4:25:38:f0:6b:78:1b:
0a:0f:13:d9:27:b8:a2:2e:26:fb:fc:83:33:d8:83:
31:b4:cf:7c:fd:15:3b:a4:a7:1b:c5:b8:36:95:15:
fa:7b:3f:35:66:b9:c8:20:87:89:90:3c:f7:79:7c:
cd:a3:41:45:9d:c3:b8:5c:a7:de:a4:a1:d2:3b:e9:
57:d6:16:9f:2b:b4:b3:aa:66:ce:ad:0b:cc:39:75:
f0:6d:dd:1e:08:a3:3a:14:e4:8a:f9:fe:6e:6a:e7:
57:b3:9d:5c:3e:d1:11:cb:c1:a7:0e:fe:75:7a:b0:
35:b0:e1:15:17:f5:aa:bb:0f:f9:be:9f:7f:71:5c:
3e:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:56:87:27:BE:A4:E5:EE:80:4A:60:84:F6:9A:86:01:83:67:8B:42
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wlaHJ76k5e6ASmCE9pqGAYNni0I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
90:41:39:44:80:f2:52:ae:d9:24:7d:ef:44:48:17:87:aa:8d:
91:83:80:0d:4b:98:3a:ea:87:ec:81:c2:e5:39:0f:10:8d:9f:
03:ec:03:95:be:39:de:db:9d:94:28:e5:8b:6d:96:2c:85:18:
3f:e9:3f:f2:30:b2:c9:ce:87:73:02:9c:11:90:02:15:65:27:
f0:3a:e7:71:8d:b6:ac:d3:16:f9:ef:78:3c:f7:ec:2f:17:23:
69:29:23:cc:cc:24:eb:d7:55:ef:68:76:ea:e0:8e:44:88:bc:
a9:eb:25:47:4c:69:f6:4c:dd:22:b4:44:d9:12:84:3f:1b:4d:
0f:78:44:9a:48:0a:2f:73:12:aa:1a:9a:27:8d:ed:66:b1:b2:
e2:1f:59:75:8c:51:14:8c:e5:09:b6:ed:cb:a2:5c:3b:27:95:
6f:32:62:2d:96:d8:8a:9e:29:f1:f4:8f:a1:e4:b1:e4:95:0f:
80:27:6e:89:32:78:a9:68:1a:05:19:48:59:89:ec:f9:14:d8:
68:bf:31:df:c4:a3:4f:71:62:8e:75:a9:d9:fb:8e:f7:aa:44:
a5:83:18:e2:a7:5c:ea:20:ae:82:b5:52:cf:64:6b:65:00:a5:
38:ce:d3:56:d8:4b:5c:f1:5f:04:e1:a7:bd:3c:23:c4:e0:16:
cb:54:6d:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:30:40 2025 by rpki-client