Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wnGFg5DZJWFBEwAsJLSIFA5ukn4.roa
File: wnGFg5DZJWFBEwAsJLSIFA5ukn4.roa (raw, json)
Hash identifier: MiDPyJuhkj9+tNbWmun58eS7z22oATAod3Yv/n6zyVI=
Subject key identifier: C2:71:85:83:90:D9:25:61:41:13:00:2C:24:B4:88:14:0E:6E:92:7E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018619F88F731A113D38A6264BA2C23B507E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wnGFg5DZJWFBEwAsJLSIFA5ukn4.roa
Signing time: Sat 04 Feb 2023 01:09:25 +0000
ROA not before: Sat 04 Feb 2023 01:09:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:19:f8:8f:73:1a:11:3d:38:a6:26:4b:a2:c2:3b:50:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 4 01:09:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c271858390d925614113002c24b488140e6e927e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:81:56:2a:67:5b:88:23:35:d1:1e:a0:54:02:
2b:e8:43:eb:4f:d8:1c:5d:c2:ea:48:77:1b:58:02:
b7:91:b5:96:19:83:36:0c:30:37:44:17:e1:b0:d8:
af:93:f7:ff:8a:b9:72:fd:65:ff:58:1c:94:61:a6:
da:f0:0d:f5:be:46:e5:a1:c1:0b:11:e9:1d:8e:b4:
d1:d3:2a:32:1f:2b:1f:89:0b:b2:b1:3c:a9:6e:cd:
1c:6b:0c:62:a3:34:8d:9a:df:f0:78:3a:9a:89:75:
aa:07:ef:cf:6c:14:7e:67:22:3a:e4:7b:7a:fc:45:
49:63:d8:df:30:4a:50:15:0e:21:25:db:94:7d:fc:
62:61:84:83:d4:94:d4:2a:f4:74:16:59:c6:93:88:
4a:ef:b6:7e:d2:ba:40:b4:ee:7a:de:b1:e9:44:e2:
ed:84:a6:b0:7a:e1:fc:a3:52:d7:ab:d3:66:c2:a4:
34:e5:e2:c5:14:0d:a3:8c:38:e4:2a:eb:89:e9:33:
e1:ee:14:7f:60:96:b8:0c:4e:bd:a8:ef:48:fb:e8:
d9:21:58:0e:fb:b9:29:8f:39:3e:5d:d8:d0:23:3c:
59:af:35:81:01:ac:8c:73:48:f6:ec:fa:5c:f2:45:
79:fd:36:63:f0:31:61:0c:d7:40:3c:f1:e5:a2:af:
81:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:71:85:83:90:D9:25:61:41:13:00:2C:24:B4:88:14:0E:6E:92:7E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wnGFg5DZJWFBEwAsJLSIFA5ukn4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4e:70:2b:e0:bc:73:26:7c:80:57:8e:a3:38:ce:91:c9:f5:a1:
73:64:ae:92:26:96:ef:b7:fd:ed:13:c2:10:55:7b:ef:82:c2:
59:71:c3:ad:3d:51:ca:c0:e1:0b:d8:4c:8b:bb:35:13:32:ec:
44:36:21:e3:e2:79:ce:a0:f1:19:19:79:c0:70:c8:0a:1a:00:
a5:fa:c9:b3:ad:fa:e3:4d:db:80:9e:36:de:11:a2:bd:57:62:
7b:75:ff:1e:e1:30:4c:42:e7:2f:01:71:21:18:ca:8f:b5:95:
80:1e:77:06:33:61:b8:7b:d7:9d:f4:0d:e4:23:09:2b:80:fc:
e1:0e:9d:11:6e:66:d0:bb:67:47:d4:be:e9:a9:29:81:2b:e0:
42:e8:87:5e:67:10:e2:57:53:ae:fe:db:ba:44:dd:a5:e7:40:
df:c2:cd:92:f1:62:d5:08:65:bd:44:7f:f5:0e:9a:b5:7d:8d:
83:38:42:23:24:1e:a6:a3:8b:49:d0:1e:2d:6e:b5:fd:6b:93:
6b:09:ae:96:99:d2:dc:4b:79:d7:4d:4a:61:f4:dd:ec:5a:0f:
c6:98:54:32:38:82:5e:39:80:b0:65:a6:40:40:81:10:1d:44:
03:d2:07:96:b6:c9:b8:54:9c:18:98:27:78:37:eb:4e:06:77:
57:33:cd:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:34:54 2025 by rpki-client