Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wxZZUM0qebqqXh4uSyjwH7GuuTw.roa
File: wxZZUM0qebqqXh4uSyjwH7GuuTw.roa (raw, json)
Hash identifier: CdMD0kqByIcyLpKi5jCWJYzpr1uUUWtRf5SW9Zi6BO0=
Subject key identifier: C3:16:59:50:CD:2A:79:BA:AA:5E:1E:2E:4B:28:F0:1F:B1:AE:B9:3C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188D57D63C5C6C9F38034BD7E34DAC3B32B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wxZZUM0qebqqXh4uSyjwH7GuuTw.roa
Signing time: Mon 19 Jun 2023 21:09:04 +0000
ROA not before: Mon 19 Jun 2023 21:09:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:d5:7d:63:c5:c6:c9:f3:80:34:bd:7e:34:da:c3:b3:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 19 21:09:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c3165950cd2a79baaa5e1e2e4b28f01fb1aeb93c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:9d:98:1e:b5:4a:92:9a:85:df:24:11:ef:d7:
65:01:5a:30:95:b4:71:bd:2c:ca:6f:3e:d7:e9:73:
c7:06:2a:3c:7a:d6:2b:43:ca:52:e6:4c:cc:d3:05:
47:7e:0a:bb:7f:48:09:ca:91:87:af:ff:9d:fa:d2:
29:86:25:13:c9:94:50:18:67:4b:f0:cd:4e:2d:c5:
d3:2d:25:c7:83:02:b4:ba:19:b0:1b:a2:76:77:cb:
fc:ab:5f:5a:e9:c8:81:d5:95:8d:38:62:d5:ac:cb:
28:dc:be:4d:01:9c:5a:23:10:b2:f9:31:0d:e9:38:
a9:56:64:41:ce:ca:b5:b8:ec:86:90:74:51:38:0e:
4d:03:cc:01:43:1b:ce:aa:99:cb:e5:8e:0f:0d:9d:
8f:a5:42:87:c3:00:e1:e3:3e:cc:22:10:ae:a5:6b:
f5:76:cc:a5:f2:28:41:8e:46:f5:9e:af:b0:1b:33:
bb:26:28:50:e1:76:6a:c3:d6:7f:1f:f2:f0:0c:82:
64:36:32:e6:c9:ce:32:0b:04:81:e2:76:37:ff:c3:
57:19:0b:b2:00:d3:c7:1c:6f:67:d6:a5:43:f2:34:
5d:45:f1:88:67:d4:c9:e7:62:24:52:2b:28:a0:3e:
2d:c8:ae:3b:07:2d:df:c3:b5:a4:34:06:1d:59:4e:
ab:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:16:59:50:CD:2A:79:BA:AA:5E:1E:2E:4B:28:F0:1F:B1:AE:B9:3C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wxZZUM0qebqqXh4uSyjwH7GuuTw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
94:45:32:b2:27:5c:20:74:fa:d1:2e:cb:8d:49:c1:eb:e6:bc:
32:19:8a:9a:e8:3d:b7:33:61:98:9f:7f:d6:19:24:bb:69:f5:
2b:c8:af:4c:e2:19:f8:b6:37:5f:6c:0a:80:56:20:4f:05:a1:
ff:13:6f:40:93:e6:51:a8:a5:ca:f6:9d:b6:d0:4b:2e:5d:11:
82:ca:35:fe:7c:07:98:b0:4a:4d:2b:57:9c:93:59:60:64:08:
a5:10:3b:5d:59:d9:86:99:81:06:5b:f6:44:37:66:a1:7c:fc:
b7:a0:31:62:85:3a:3a:ed:30:91:3b:9c:df:e3:b0:56:9e:0c:
2c:e8:2c:70:96:25:45:db:7d:4f:80:09:84:c0:9a:27:53:8e:
92:97:58:16:33:55:a9:d8:a5:bc:0e:78:a6:24:35:f6:c6:d6:
7a:aa:9c:ce:f0:86:68:0a:64:9d:a4:7d:71:02:ac:84:dc:c1:
a8:8b:db:a9:0c:0b:ee:9b:de:46:88:10:c1:d2:f2:e3:d8:55:
7c:3a:cf:27:2a:88:2e:0d:6d:95:bb:91:f0:15:4a:42:ec:26:
71:14:77:8c:bd:ce:b3:86:e8:96:d4:40:e5:2b:89:37:3a:17:
98:5a:e5:1a:03:47:53:6c:5d:5d:cc:09:97:85:82:0a:04:20:
71:74:19:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 20:52:05 2025 by rpki-client