Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wuJpmu08U7hVK5JLlAZaThn_Mmo.roa
File: wuJpmu08U7hVK5JLlAZaThn_Mmo.roa (raw, json)
Hash identifier: kHoMnrtkrZu1jxUWu6mVkMHwUdvWduozIHWOQs9D0Z0=
Subject key identifier: C2:E2:69:9A:ED:3C:53:B8:55:2B:92:4B:94:06:5A:4E:19:FF:32:6A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01823C5C615CDA55B64E2B2662AB7D5C6E5D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wuJpmu08U7hVK5JLlAZaThn_Mmo.roa
Signing time: Tue 26 Jul 2022 21:14:23 +0000
ROA not before: Tue 26 Jul 2022 21:14:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:3c:5c:61:5c:da:55:b6:4e:2b:26:62:ab:7d:5c:6e:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 26 21:14:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c2e2699aed3c53b8552b924b94065a4e19ff326a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:e1:8b:cd:6e:bf:e2:14:bf:49:95:10:81:00:
c9:3c:1a:d7:61:83:de:14:a0:94:df:7e:47:77:6f:
fc:25:0d:f7:34:77:06:e1:7b:6e:2d:7c:4d:d6:b1:
05:34:8f:ff:92:29:a5:57:84:66:50:69:d3:c2:90:
a7:c0:65:c7:0f:5a:ec:86:96:c8:1b:6c:10:31:b6:
b9:78:f3:92:fe:96:5f:fb:27:99:f1:ee:9e:2a:e6:
97:f2:a4:71:90:0c:c3:91:c9:3c:87:8e:87:47:f6:
b2:d7:4a:1d:69:0e:4a:49:2b:7e:be:af:22:12:db:
f1:cb:0b:d6:7e:34:fd:19:cc:5a:cb:8e:54:7d:5e:
db:87:ed:e9:40:68:f4:c4:39:2b:2c:43:d0:f1:de:
5a:81:1f:ad:21:d9:6f:1c:a9:4f:f0:62:f7:7c:46:
df:cb:c4:8d:a9:36:1d:00:1d:af:b5:11:97:76:64:
18:cd:78:ad:47:19:3a:47:4f:fc:66:93:bb:dc:4b:
8d:68:c3:ce:07:a3:52:95:a0:ef:3a:e8:b7:9a:eb:
e2:14:28:6b:c7:ce:48:43:f0:96:5e:6a:54:76:24:
83:44:5d:b9:16:70:02:fe:bd:5f:dc:a7:63:80:22:
dd:00:ea:6e:ba:37:1c:f0:22:e8:5f:4a:9b:24:2c:
a3:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:E2:69:9A:ED:3C:53:B8:55:2B:92:4B:94:06:5A:4E:19:FF:32:6A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wuJpmu08U7hVK5JLlAZaThn_Mmo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a4:ad:cc:66:ed:52:b3:86:40:85:84:9f:b3:3b:6c:61:b8:59:
99:64:da:93:1b:27:49:93:3d:73:cc:a0:21:a5:09:76:ce:ed:
e7:d3:42:5f:e0:c2:ca:0e:fa:b9:39:aa:66:c9:d6:0d:5d:ab:
3d:7c:cc:76:49:95:41:02:fe:d2:e3:cc:36:f0:02:e0:47:7c:
9e:e4:60:85:79:2c:4b:d4:4a:8b:95:09:1e:0c:9d:00:7c:c2:
1b:ca:a8:fa:a4:1d:11:a4:3c:64:c0:9f:d7:af:4e:3d:ef:32:
85:69:64:5e:37:1d:e3:7d:00:ae:78:6a:cb:af:9f:f7:15:eb:
9d:6a:83:6d:7e:99:ae:bf:07:da:69:cc:d5:83:88:1f:d0:90:
29:bf:c4:99:c9:9e:50:21:2f:49:b3:f5:c3:b1:ce:2c:4b:53:
01:6d:29:ce:96:16:f6:58:4e:a9:23:19:c0:94:f8:43:d4:f5:
4d:2c:a3:25:01:30:d3:58:f6:b7:e4:7e:6e:6d:f9:0d:09:ba:
39:75:68:50:a7:29:8b:a6:e1:b2:d1:4d:11:a6:b6:72:cb:f4:
cc:1b:0a:05:bb:ca:6d:80:14:68:76:02:ff:97:70:30:ba:08:
b8:7b:28:49:e7:b9:1a:d9:36:eb:81:c9:69:5b:ba:05:3c:19:
46:f6:3d:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 23:36:25 2025 by rpki-client