Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wvmSyUMg9mMfpWD8LMhfy7Sq-sY.roa
File: wvmSyUMg9mMfpWD8LMhfy7Sq-sY.roa (raw, json)
Hash identifier: LP14g7BYwa0WiJjWxW52wrZdgVsXhWk1a4lHuD5nhTg=
Subject key identifier: C2:F9:92:C9:43:20:F6:63:1F:A5:60:FC:2C:C8:5F:CB:B4:AA:FA:C6
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01869B59988DF5D06FDCAA4042DD47A47446
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wvmSyUMg9mMfpWD8LMhfy7Sq-sY.roa
Signing time: Wed 01 Mar 2023 04:06:25 +0000
ROA not before: Wed 01 Mar 2023 04:06:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9b58:ac56/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:9b:59:98:8d:f5:d0:6f:dc:aa:40:42:dd:47:a4:74:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 1 04:06:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c2f992c94320f6631fa560fc2cc85fcbb4aafac6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:0c:f2:2f:21:96:cc:20:1e:67:22:62:5b:e1:
d7:f9:fb:a7:e3:88:22:eb:76:64:89:a1:f6:4f:3d:
46:e2:f7:59:62:67:26:d7:19:60:bf:63:04:df:4c:
4b:b2:39:1f:ba:70:31:fa:94:2c:35:a7:3f:50:34:
a0:f5:3a:40:00:69:01:49:57:0f:0c:87:64:d1:ff:
ea:42:80:96:c6:5b:2b:16:aa:14:3a:d7:62:9e:8d:
a8:98:cd:dd:e3:c3:63:68:33:69:dc:72:39:09:96:
0b:a6:4f:f6:51:00:d6:10:6b:49:9b:77:78:bc:c5:
15:f1:91:a0:8a:66:93:16:60:8a:50:f7:a7:4f:52:
3b:74:b4:e4:ec:6a:c1:95:d5:bf:33:f7:97:bb:7f:
50:e4:58:c8:a7:db:62:bb:f5:01:3b:48:10:1f:34:
65:51:9f:84:dc:dd:d6:3d:88:1e:c7:89:73:6a:c0:
5c:69:4e:4c:46:ca:a9:97:30:9c:77:43:50:4d:fe:
f8:64:bb:90:35:17:b3:97:60:db:e1:e2:ed:2f:2a:
36:a1:2d:5e:5d:b5:60:21:8a:f3:87:18:8d:f1:65:
e4:cb:ef:2b:59:59:13:2a:60:eb:f1:8a:d2:75:e3:
0b:2b:ff:4d:73:97:a2:f0:a2:13:7c:36:57:89:c7:
c6:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:F9:92:C9:43:20:F6:63:1F:A5:60:FC:2C:C8:5F:CB:B4:AA:FA:C6
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wvmSyUMg9mMfpWD8LMhfy7Sq-sY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3a:04:f3:9b:eb:01:35:2a:c8:a7:50:df:db:77:45:36:a1:ae:
1f:2f:6b:ab:4c:d4:be:2a:f2:6a:c4:d4:5c:63:8c:93:f4:c0:
4c:ca:c8:24:05:da:92:47:e5:21:f9:85:ff:e8:6c:f9:81:bf:
08:66:db:95:60:8a:70:2c:e7:a7:71:2b:a2:66:5b:46:f3:90:
81:c8:a4:13:c6:4e:8c:70:bd:13:8e:a3:d1:81:d2:f9:05:55:
31:29:f5:8f:5d:3d:96:52:86:10:dc:2f:53:ad:22:b0:72:d3:
20:04:0a:b2:70:83:60:ec:2d:ce:37:be:80:f4:c8:cb:f4:02:
50:8d:08:c2:97:77:73:bd:f0:cd:a9:e4:07:45:34:57:11:c3:
e1:64:65:0b:96:6e:94:fe:29:33:97:64:3e:0f:30:26:70:64:
ef:27:97:04:9d:85:44:38:97:af:ca:c3:ac:69:ce:05:65:08:
58:22:9d:c1:2b:57:ac:cb:32:a2:b9:ea:94:60:c3:cd:8d:dd:
51:52:9a:e0:38:f5:c8:6e:bb:8d:7b:0c:59:ca:b4:42:e4:3d:
49:16:ec:01:2f:37:32:bb:6a:4f:ab:5c:a2:49:c8:bc:f9:49:
bd:3b:d0:77:39:63:2c:27:b6:21:c6:6f:06:e9:94:e2:73:10:
f5:6d:62:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 18:00:41 2025 by rpki-client