Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ws-rOd_7x-nzdOWGIVkxiHAB3RU.roa
File: ws-rOd_7x-nzdOWGIVkxiHAB3RU.roa (raw, json)
Hash identifier: PBLfVa6cXgpmCSrR0avZpUlQpholpbB8hURh8+Hx8Pc=
Subject key identifier: C2:CF:AB:39:DF:FB:C7:E9:F3:74:E5:86:21:59:31:88:70:01:DD:15
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186A76A35D4C2B818035A36FA7D74654832
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ws-rOd_7x-nzdOWGIVkxiHAB3RU.roa
Signing time: Fri 03 Mar 2023 12:20:00 +0000
ROA not before: Fri 03 Mar 2023 12:20:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:a7:6a:35:d4:c2:b8:18:03:5a:36:fa:7d:74:65:48:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 3 12:20:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c2cfab39dffbc7e9f374e586215931887001dd15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:a0:68:d4:8c:05:b3:1e:ce:e0:1e:12:90:65:
9c:89:90:61:fc:f9:94:e5:70:04:8a:1c:f6:c6:1d:
9d:cf:d1:f4:ba:61:7b:45:45:72:cc:f2:dd:3e:23:
b0:b9:12:67:26:91:72:b1:1f:ea:f1:81:42:52:2f:
c6:e1:60:50:15:3d:8d:97:7d:b0:a5:8b:d1:c9:df:
d8:cd:a5:e8:4d:47:54:fa:d6:f2:f0:e8:2c:c8:09:
cf:57:4a:81:7d:a7:2c:86:9a:5b:5b:9b:c4:f5:f4:
e8:93:5f:c8:d5:31:26:ab:3b:9c:b3:b9:ac:c5:8e:
f5:2a:1e:d8:80:db:37:e9:b6:93:ac:c9:07:86:3f:
8e:80:57:53:f1:ff:5e:20:a6:bd:19:70:dc:c1:e0:
24:9f:4a:19:6c:8b:4c:90:78:d5:f9:64:9b:64:c5:
82:6f:42:fe:04:81:7d:27:3a:54:b1:f8:c6:49:b9:
53:7b:fc:8e:f6:5a:97:56:08:75:e4:2e:89:d2:1c:
e2:66:5b:7e:35:e7:3a:40:af:97:b5:f5:5f:c0:2f:
0d:8f:3d:ac:92:f8:49:a5:44:12:5c:4e:56:cc:b5:
b4:e9:76:b4:2a:3e:9a:65:2b:13:9e:4e:08:a4:b3:
36:87:05:6f:67:2a:94:99:c8:a4:9d:cc:53:5f:f0:
b8:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:CF:AB:39:DF:FB:C7:E9:F3:74:E5:86:21:59:31:88:70:01:DD:15
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ws-rOd_7x-nzdOWGIVkxiHAB3RU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
32:fb:33:56:7e:a6:0a:e1:d8:40:21:ba:c5:6a:ef:bb:bd:d8:
2b:75:0c:0f:c9:9b:e2:0b:1d:48:d0:80:97:2e:3d:57:27:49:
df:cb:c8:1e:2c:ce:2c:92:57:09:60:dc:aa:ed:8a:64:29:f0:
df:a9:f3:1a:91:94:18:94:f3:01:ac:0d:d5:a5:1a:12:11:60:
61:b1:2e:5b:97:e3:9a:04:92:58:dc:42:53:69:ab:1e:9c:01:
08:e0:5d:b7:9e:24:ef:b8:5f:c1:b7:ca:96:11:5c:2a:f9:19:
61:55:36:9e:73:f4:b1:ba:ca:a9:b4:af:7a:5f:e4:cb:ce:bc:
f5:28:09:1f:54:fe:cf:f2:e6:7c:d3:30:38:c9:27:96:8c:fc:
f6:e9:02:0e:eb:fb:95:1c:54:08:2a:ac:25:71:a0:47:bc:a2:
26:d0:26:b5:db:04:59:fd:f7:6e:6d:f2:05:4c:cf:6d:69:2f:
99:4e:47:f7:de:06:6b:99:56:77:23:4b:02:c2:4d:95:fb:b2:
76:55:1b:ac:ca:d1:47:86:9f:bb:dc:74:a7:17:8e:77:3c:c3:
74:9b:58:ae:e1:0d:2c:f4:0a:e7:a7:64:6b:28:23:7d:52:c0:
b5:cd:d4:c4:4a:1d:d0:2b:4f:ca:97:3e:86:fc:fd:eb:f7:0f:
9c:27:9c:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 19:32:51 2025 by rpki-client