Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wmF8LdS4NNs1LLg2vg6ZQsz8HEA.roa
File: wmF8LdS4NNs1LLg2vg6ZQsz8HEA.roa (raw, json)
Hash identifier: Rvpn2vwNSAykAwCkHDlD2Hwm/52gWd/7Bf3RfmfvTfo=
Subject key identifier: C2:61:7C:2D:D4:B8:34:DB:35:2C:B8:36:BE:0E:99:42:CC:FC:1C:40
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01863F872AE898807AE0A307AB6ABFAAFD25
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wmF8LdS4NNs1LLg2vg6ZQsz8HEA.roa
Signing time: Sat 11 Feb 2023 08:11:08 +0000
ROA not before: Sat 11 Feb 2023 08:11:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:3f:87:2a:e8:98:80:7a:e0:a3:07:ab:6a:bf:aa:fd:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 11 08:11:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c2617c2dd4b834db352cb836be0e9942ccfc1c40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:84:29:d7:b4:73:3d:7b:16:25:d0:fb:f7:ea:
fd:74:4b:9e:2f:35:72:14:ad:04:ec:89:6e:da:6c:
27:e1:60:b0:aa:db:90:30:1c:4b:a0:98:5b:e0:50:
8b:98:23:b5:52:68:48:52:40:6c:f9:c9:63:fc:59:
7a:78:d2:7c:86:88:c6:0e:4b:f2:a0:b7:76:c1:25:
85:35:d6:a5:d0:b8:0d:71:a1:22:f6:15:9d:22:15:
17:f0:a4:ec:bd:f7:cd:41:a3:23:06:5e:1f:5b:65:
5f:fa:db:0f:35:27:85:6a:3a:31:26:40:40:9f:ba:
7d:b4:1d:f6:6b:d3:eb:b3:c5:81:27:31:02:30:d7:
66:b2:af:c0:32:b8:b8:99:fb:6a:df:87:cc:37:ec:
32:84:93:24:51:dd:9f:13:3e:5b:51:13:78:e9:92:
d2:40:48:c8:f2:28:06:a2:e1:5e:25:97:5d:72:18:
1b:8f:22:d7:fe:ac:36:ad:87:db:d0:b3:2c:6f:f1:
3f:60:66:7d:4f:80:a0:a1:16:a1:42:07:68:27:ea:
30:bf:35:38:15:f0:0a:d1:59:4e:a3:5f:7b:78:36:
c8:e4:25:69:d0:9c:d7:e3:4d:ba:9d:59:3f:0f:17:
c6:14:af:08:7a:d9:04:5e:b7:7e:07:65:15:a1:ac:
e3:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:61:7C:2D:D4:B8:34:DB:35:2C:B8:36:BE:0E:99:42:CC:FC:1C:40
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wmF8LdS4NNs1LLg2vg6ZQsz8HEA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
00:33:ab:81:e3:c0:c7:33:ed:22:e5:69:57:5d:fe:2d:a5:d2:
da:8f:5f:1b:a5:3f:92:7d:bc:04:c8:fe:e3:dd:5a:29:af:af:
f1:04:20:21:e7:ce:ff:58:d5:1e:03:fa:ea:6f:9d:fa:23:d9:
7c:49:a6:b1:af:08:55:7c:ab:6c:9b:4a:26:8b:d1:b9:d2:d7:
80:1b:01:c8:2b:7c:de:58:5a:23:c5:d7:81:bf:c7:de:72:f9:
52:6f:63:6e:7c:5e:e2:79:87:7f:42:98:53:56:2d:e6:2f:9e:
0b:d5:32:de:47:01:e7:28:32:9a:ce:a0:1d:d2:3c:ec:bd:27:
81:8e:14:5d:23:41:37:2d:42:f7:0c:e4:cf:fc:20:d1:94:2c:
08:ad:a6:1b:8d:94:7e:10:f3:c3:da:c1:59:75:16:86:04:14:
40:f9:8e:97:4d:1a:30:a7:73:9c:37:c9:49:04:25:05:bf:e5:
94:4a:3d:72:76:08:11:03:f2:6b:a1:ff:55:f6:56:04:71:82:
51:62:80:2c:4d:28:bb:d6:0f:e2:1a:91:8b:fa:da:91:b4:f8:
6e:ca:95:3e:17:15:65:af:1e:7c:1e:d5:ff:82:e9:32:32:60:
84:bb:f1:70:8d:73:b9:f0:7e:37:b7:6e:dc:bc:90:20:2f:35:
69:c9:6f:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 06:37:33 2025 by rpki-client