Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-wyo3gAqM47GxvJd9td259NupM8.roa
File: 1-wyo3gAqM47GxvJd9td259NupM8.roa (raw, json)
Hash identifier: JPjBqevUFFpQWed4JBlQ+XeyMeDONvyCp/v9+BFTXgk=
Subject key identifier: FB:0C:A8:DE:00:2A:33:8E:C6:C6:F2:5D:F6:D7:76:E7:D3:6E:A4:CF
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189A2002CBB6C4136F969299706E1EF6DDB
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-wyo3gAqM47GxvJd9td259NupM8.roa
Signing time: Sat 29 Jul 2023 14:14:27 +0000
ROA not before: Sat 29 Jul 2023 14:14:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:a2:00:2c:bb:6c:41:36:f9:69:29:97:06:e1:ef:6d:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 29 14:14:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fb0ca8de002a338ec6c6f25df6d776e7d36ea4cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:72:4a:3c:a0:6d:c2:d4:1a:25:b8:2e:47:df:
aa:59:36:7d:6e:88:bd:da:75:9b:72:d6:39:a8:5f:
01:b4:f1:3c:43:17:ea:f5:c8:94:db:c1:db:97:7b:
49:48:2a:01:4e:b5:20:78:ef:d8:a9:fa:06:15:e4:
61:8b:8e:60:7d:3d:45:74:e8:8b:64:61:e9:00:5d:
57:f7:bc:10:55:86:6f:35:4c:cd:dd:1a:53:94:ea:
50:cb:5b:44:ce:ff:72:8f:ed:80:c0:2d:b1:fa:9d:
48:ee:d3:9c:2f:7b:1f:d5:4a:15:42:c2:5c:18:55:
f1:3e:3b:ab:f6:c6:e1:5f:f7:91:fe:34:3d:d7:9d:
38:36:fb:63:42:11:55:2f:a8:1f:c3:9f:0f:3a:52:
5f:eb:0b:86:14:e0:09:4d:e7:8c:cf:f3:ec:d1:f4:
30:a9:59:83:43:4a:ff:b1:b7:4e:0d:d4:f8:23:33:
d6:fd:e2:71:3d:f4:58:7e:de:c7:49:6f:33:ee:56:
fa:fc:3e:63:9d:2d:97:5d:f5:ff:ff:8e:39:2f:4f:
c7:73:13:04:47:ac:8a:d1:19:08:ab:e3:18:b5:05:
23:19:cc:85:10:b8:88:e7:77:86:85:1a:69:0b:26:
48:62:d2:72:87:7d:37:84:9a:b8:e2:44:a8:ff:50:
7d:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:0C:A8:DE:00:2A:33:8E:C6:C6:F2:5D:F6:D7:76:E7:D3:6E:A4:CF
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-wyo3gAqM47GxvJd9td259NupM8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
25:79:5d:0a:4b:55:67:99:11:e6:ea:56:1d:85:bb:6b:82:9a:
55:44:61:d3:6b:57:57:e9:2b:4f:c0:d7:17:f8:3d:52:ef:31:
6c:b2:ba:0a:c9:ce:a9:e7:b8:a3:66:ae:17:45:92:da:d9:d7:
91:16:03:2c:25:54:78:21:d2:77:95:b9:94:1f:1d:36:42:77:
7a:63:ec:cf:1e:06:8e:06:e1:fc:ac:7a:91:b7:06:b8:56:df:
16:be:31:cf:35:df:81:02:b4:ea:a6:38:5c:1b:d4:65:85:67:
40:63:5d:f7:5e:fd:9c:6d:65:63:06:e6:0e:7c:2e:bd:52:ef:
47:d2:8e:5d:ec:3a:e4:42:2b:61:d3:82:c2:43:c9:63:10:db:
c3:22:27:6f:a0:ce:43:5d:d8:f8:a8:e3:49:c5:50:38:c5:2e:
20:df:eb:5c:97:fe:de:c3:89:6c:5a:c3:fe:88:60:b5:0a:f3:
72:d0:80:e5:66:f8:6c:c7:1a:c0:70:73:fc:a0:d3:39:f3:6a:
9d:07:4f:86:f9:e8:4c:00:74:e5:64:a8:cc:4a:a1:8b:35:57:
92:be:0a:8f:ba:4b:a0:44:66:ab:fb:44:df:91:a3:a6:7a:26:
8c:ac:40:df:0c:e6:2a:65:72:fd:b9:d9:60:aa:3b:fc:40:6f:
e1:e3:de:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 10:22:57 2025 by rpki-client