Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/woyNgE6Z18gkmA3MiV-c0_IkDKs.roa
File: woyNgE6Z18gkmA3MiV-c0_IkDKs.roa (raw, json)
Hash identifier: kg6yJihrzB/0HCyJCEins73q6R28GJTM1IgADmW3YPE=
Subject key identifier: C2:8C:8D:80:4E:99:D7:C8:24:98:0D:CC:89:5F:9C:D3:F2:24:0C:AB
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018940557ABD5A44AD2CEB199A7C554DCAA0
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/woyNgE6Z18gkmA3MiV-c0_IkDKs.roa
Signing time: Mon 10 Jul 2023 15:04:51 +0000
ROA not before: Mon 10 Jul 2023 15:04:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:189:4055:277c/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:40:55:7a:bd:5a:44:ad:2c:eb:19:9a:7c:55:4d:ca:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 10 15:04:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c28c8d804e99d7c824980dcc895f9cd3f2240cab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:07:47:8b:9f:0c:86:e7:8f:d4:a2:cf:e6:12:
6c:48:bb:1a:6f:50:03:1f:db:f4:bb:f8:f5:27:bb:
a6:95:89:83:d4:0b:6b:94:44:9a:07:1a:db:a9:bd:
f9:68:f2:3b:e5:8f:6c:06:d8:94:c5:58:28:d2:fa:
ef:f5:07:ff:1d:86:0a:0e:6f:9f:53:09:3e:c9:f2:
19:51:2b:e6:e2:1c:fa:1d:db:b4:5d:40:26:cd:c5:
94:0b:2e:7b:f3:f2:04:d6:40:8f:4d:71:56:95:c3:
2c:77:68:f7:e5:d1:57:12:eb:12:6e:d3:8d:b6:30:
d5:15:ab:10:ec:04:6e:da:94:ec:fa:bf:b4:87:18:
7a:ae:bd:52:6d:77:65:c5:39:62:c8:f4:e4:89:93:
a7:e7:fd:27:09:64:2e:fd:fa:66:cc:d4:5b:da:d7:
3f:31:9b:2b:ec:ba:d6:82:59:9e:2e:d6:fc:ed:e6:
f3:3d:96:7b:72:87:24:bc:66:39:ba:69:81:cf:97:
ea:6a:f7:03:44:70:1e:ef:8d:d2:ab:51:19:1e:93:
2c:b9:ef:74:c3:db:71:8c:4b:3b:00:52:bc:90:84:
43:ef:da:15:6e:ac:3f:70:ac:3a:e6:75:f7:de:53:
e7:04:6f:1c:fb:d2:d9:83:2f:86:1a:f7:a6:28:10:
f0:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:8C:8D:80:4E:99:D7:C8:24:98:0D:CC:89:5F:9C:D3:F2:24:0C:AB
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/woyNgE6Z18gkmA3MiV-c0_IkDKs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2f:98:45:f4:d6:a8:40:c7:a3:33:71:a3:ab:ee:79:31:e9:fb:
4f:5a:50:c7:e5:b9:c1:5b:53:12:1c:da:eb:19:05:4a:e2:6c:
37:49:c5:ce:06:d5:71:f6:9b:f5:d2:6e:dd:e8:da:68:35:a1:
37:a0:de:4a:4e:97:ab:63:f3:63:07:67:80:38:e9:57:b9:e1:
de:22:89:a9:69:11:d5:23:23:4b:44:2c:88:67:dd:9f:3a:9a:
23:54:05:db:0d:39:89:36:3f:82:4d:b2:61:3b:d1:50:8e:46:
e5:15:aa:ba:24:42:1d:c8:c8:f4:96:9f:36:25:c2:87:13:b3:
0b:52:66:3b:6a:c1:29:a5:1f:73:b5:e7:6e:31:89:3d:25:54:
0c:2c:4a:f4:2f:18:69:0d:e3:68:07:29:83:41:f5:61:da:aa:
8b:c7:72:2a:f0:47:9b:3c:f8:d6:6e:ac:d3:73:12:3e:5b:9b:
a2:c3:90:a9:a6:8c:e0:44:3b:f7:a4:08:a1:ee:4d:fe:34:68:
77:36:91:31:16:10:ef:eb:0a:e8:fe:1a:b4:d3:39:3c:53:8a:
9c:57:de:c5:b3:de:35:5b:c8:a2:55:8b:93:1c:1e:9f:f1:b7:
7e:e4:94:4c:50:2e:40:c1:43:10:9b:9b:90:85:61:8e:fe:f5:
0e:38:bd:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 10:26:53 2025 by rpki-client