Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8WGFIKVso9jI2fsthklKXgvZQg0.roa
File: 8WGFIKVso9jI2fsthklKXgvZQg0.roa (raw, json)
Hash identifier: 2YAUzu8CA6e0jr7EkKzVJaKHoGTYGeQwbeaORnsuYCY=
Subject key identifier: F1:61:85:20:A5:6C:A3:D8:C8:D9:FB:2D:86:49:4A:5E:0B:D9:42:0D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189AFEA799760A0134760CBF35A8893DD6E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8WGFIKVso9jI2fsthklKXgvZQg0.roa
Signing time: Tue 01 Aug 2023 07:05:26 +0000
ROA not before: Tue 01 Aug 2023 07:05:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:189:afe9:a56a/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:af:ea:79:97:60:a0:13:47:60:cb:f3:5a:88:93:dd:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 1 07:05:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f1618520a56ca3d8c8d9fb2d86494a5e0bd9420d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:38:34:e5:da:44:5f:ef:28:7b:4a:6e:7a:27:
88:0f:2b:ff:1b:08:59:90:a8:2b:38:cb:23:9d:b8:
2f:f5:6d:75:8d:c7:46:91:a8:7c:d5:18:57:54:e5:
b5:2e:dd:18:32:19:19:4f:7a:78:57:ae:d6:a9:cb:
c8:98:37:52:48:74:69:f2:2c:6a:46:46:72:99:21:
23:cf:ee:8a:b2:7b:7a:64:70:dc:10:33:c1:f3:d8:
04:ed:c6:8d:b0:40:59:08:75:d1:61:3b:90:6a:1e:
ab:71:29:83:99:33:fe:e6:b9:95:1e:0a:ac:58:33:
6b:e4:4b:23:16:e5:df:5f:3d:77:f0:5e:70:1e:b4:
05:b6:9b:ad:21:c2:eb:91:51:a5:f5:8f:8c:9d:17:
b3:b6:22:50:15:1d:d6:6a:b2:b9:40:7f:a8:8e:c8:
b6:92:b5:50:a5:cb:4a:72:42:dc:b8:c2:df:55:04:
6d:30:33:46:8e:36:ea:61:30:b2:52:8a:77:63:64:
7b:a4:05:84:d1:5c:4e:d3:cc:cd:d0:06:4f:2f:28:
18:cd:49:09:4e:cd:9e:bd:17:01:dc:7b:09:e2:7c:
e7:40:2c:f2:56:24:4e:6e:f5:ca:0e:24:06:5e:c5:
fd:e7:88:bf:34:19:d5:37:0b:6e:d7:76:0d:60:6e:
a5:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:61:85:20:A5:6C:A3:D8:C8:D9:FB:2D:86:49:4A:5E:0B:D9:42:0D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8WGFIKVso9jI2fsthklKXgvZQg0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
45:55:9e:c4:63:8b:e4:2d:06:e9:1d:b0:e7:4e:8c:17:19:b7:
ad:4d:f6:ea:33:5b:6e:10:c2:f9:a0:cb:db:67:04:93:6c:0c:
a7:1b:2b:0d:21:56:51:5b:a5:12:a7:9c:fd:a3:65:11:e8:62:
77:c4:66:ef:21:c9:17:49:1f:ee:e4:cc:f7:c4:43:58:7d:8a:
95:ec:70:3b:f3:5c:03:8c:e3:5c:35:5a:9b:e6:53:56:fe:fd:
2b:25:ec:45:f0:9e:e7:a9:d7:bc:b8:07:79:98:7d:05:80:51:
f6:38:b1:0a:51:47:27:72:01:b8:45:8e:ca:dc:6e:fe:30:c9:
ce:c1:11:76:8a:6f:cc:db:e1:0e:60:a4:b1:ba:c5:e5:9d:25:
79:ef:dc:a3:44:c5:29:08:ff:7b:f1:f9:d0:03:ee:c7:22:cb:
09:c8:4a:1e:ae:dc:24:c1:51:86:bd:42:c9:63:30:3b:c0:d5:
4f:d5:b4:e4:eb:7e:cd:b5:9e:df:f9:91:16:2f:27:0b:6d:98:
11:80:d5:e2:ec:b0:37:1b:69:65:5c:c9:ad:29:b2:d5:ff:d6:
98:57:88:cf:29:a1:e5:2b:a1:c5:05:59:0a:04:cf:67:4c:03:
84:c6:02:bb:a6:04:5a:d4:93:64:af:5d:0c:91:65:b9:1d:09:
53:74:d2:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:12:37 2025 by rpki-client