Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wsWztyVnIHbI_EHWaP4PkBJTE3s.roa
File: wsWztyVnIHbI_EHWaP4PkBJTE3s.roa (raw, json)
Hash identifier: VGKy0hXJsaCEPvmw4az9mW5f0mvZ+vP0VBSWSfF7J3I=
Subject key identifier: C2:C5:B3:B7:25:67:20:76:C8:FC:41:D6:68:FE:0F:90:12:53:13:7B
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018783C24C74B613C7C85CF4007C0486ACEF
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wsWztyVnIHbI_EHWaP4PkBJTE3s.roa
Signing time: Sat 15 Apr 2023 07:12:41 +0000
ROA not before: Sat 15 Apr 2023 07:12:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:83:c2:4c:74:b6:13:c7:c8:5c:f4:00:7c:04:86:ac:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 15 07:12:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c2c5b3b725672076c8fc41d668fe0f901253137b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:16:2c:95:f6:b4:8d:6f:7b:f6:5e:58:de:d3:
83:e6:d1:b0:da:1b:76:f6:8f:d2:d0:aa:27:06:77:
ca:90:83:60:fb:95:17:de:1c:6d:7c:bb:de:a7:dc:
a1:9e:40:95:83:e9:be:bf:17:68:dc:a4:f3:65:a1:
3a:b3:7e:8a:59:7d:aa:7e:39:eb:5b:dd:4f:9e:7a:
71:fe:1c:56:2e:fd:b2:1a:6e:17:ab:5e:f1:b7:70:
22:d2:a6:d4:2c:76:33:1b:14:99:4a:1c:de:7b:20:
90:da:cc:d4:5b:2c:eb:13:e1:55:e1:54:7d:20:45:
49:eb:86:ad:a2:19:1d:8c:09:9b:3b:5e:7b:31:c6:
88:7d:18:64:f5:22:34:5c:cc:2a:33:74:7e:dc:26:
25:26:38:ba:35:26:6a:9c:d0:34:c6:62:7c:dc:ac:
98:30:8f:34:68:f3:04:eb:9e:78:58:c9:96:cc:d4:
b5:ce:8d:a4:bc:e1:5d:12:20:8e:c2:6d:80:25:8d:
34:37:92:2f:cc:e2:14:c5:0f:dc:72:d1:b7:7d:d9:
b1:9a:ad:9c:ba:ed:16:2c:57:3a:93:c8:b0:10:cd:
39:14:ab:cf:e3:67:81:08:b6:04:a6:56:91:39:55:
87:1d:d2:ab:b0:82:9c:4b:0c:b1:24:1d:bb:37:67:
de:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:C5:B3:B7:25:67:20:76:C8:FC:41:D6:68:FE:0F:90:12:53:13:7B
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wsWztyVnIHbI_EHWaP4PkBJTE3s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
62:f5:da:ac:b3:a3:eb:9d:06:c5:77:a6:3a:5d:58:4d:8c:16:
88:7c:5d:87:ac:b6:8a:55:84:02:19:9f:d6:4c:70:ac:ea:5a:
7e:0a:de:80:62:b1:5f:10:85:7b:85:e1:40:ad:8c:d5:16:13:
1a:7f:0c:11:6a:f3:ae:2d:03:77:08:4c:65:cf:69:eb:3a:21:
f6:d2:19:97:3d:ee:cb:79:dc:a5:ba:ac:9e:4c:67:76:2a:f1:
05:a3:58:41:35:9c:ee:8a:c4:42:60:8b:ae:fe:c8:bf:65:4f:
c1:89:52:c3:03:cf:06:d3:03:0d:f6:2f:08:03:72:12:41:99:
d2:96:4c:fa:57:05:07:c2:66:d1:78:1a:a9:5d:f2:21:9f:27:
9e:7c:23:a0:e3:ab:e9:f2:46:c0:b4:ea:cb:ae:0a:7a:6f:85:
ef:73:9d:0e:a2:50:96:c3:c0:ec:e0:21:38:8c:1c:cb:30:76:
27:bb:82:6e:e0:e4:02:82:21:ec:38:ee:ce:94:3f:ac:6f:c6:
73:f8:11:ad:99:fd:46:ef:56:02:e6:41:88:20:20:e4:1f:7e:
9a:46:10:91:b8:ef:c3:74:a5:6f:44:63:f0:b5:7c:a4:c1:23:
77:fe:48:c4:2e:0d:b2:25:fb:e1:90:f5:fd:b5:30:e6:67:2d:
ae:3b:56:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:42:11 2025 by rpki-client