Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/W3ABj1_JI2lSh7EsTlerwF1v4CM.roa
File: W3ABj1_JI2lSh7EsTlerwF1v4CM.roa (raw, json)
Hash identifier: XSGBVhfgP1xZNevZEj/24+BzBxr5OtTUPmybvufm/Lg=
Subject key identifier: 5B:70:01:8F:5F:C9:23:69:52:87:B1:2C:4E:57:AB:C0:5D:6F:E0:23
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018519FA585E2EAC9FAB93660444D0680737
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/W3ABj1_JI2lSh7EsTlerwF1v4CM.roa
Signing time: Fri 16 Dec 2022 08:08:35 +0000
ROA not before: Fri 16 Dec 2022 08:08:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:19:fa:58:5e:2e:ac:9f:ab:93:66:04:44:d0:68:07:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 16 08:08:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5b70018f5fc923695287b12c4e57abc05d6fe023
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:81:c1:f7:4e:d0:8c:a1:46:05:d4:46:01:a2:
9c:2a:9f:4f:70:5d:d0:48:58:51:d9:94:1c:c1:0e:
d9:87:37:d5:9e:7e:11:fa:17:45:43:d2:41:b2:e0:
02:8c:85:ae:e1:d9:c7:94:94:42:1a:9b:c4:28:bc:
19:49:c5:dc:d5:c7:8c:d5:c0:1f:43:3e:45:1e:c3:
df:e2:71:09:fa:17:90:a5:1e:aa:c5:1e:32:3d:d7:
2d:29:f8:66:e2:56:97:59:c1:7c:e9:7d:ef:e3:09:
09:12:7e:a1:05:5c:cf:c2:bd:b4:db:32:f6:a1:4d:
6d:8f:54:3d:b8:87:ac:f7:55:2d:2a:a9:c7:45:83:
56:3e:fd:75:9b:58:b0:2a:d2:21:6c:76:e6:e7:4b:
96:29:43:2a:99:68:9d:a4:13:8b:9f:7f:8d:2e:dd:
4e:97:f3:5a:e1:20:5a:4c:fc:37:9a:2a:4f:06:b8:
01:54:c0:d0:95:6f:4b:65:fa:a8:2a:41:c4:c6:6c:
da:7d:d6:1b:1f:d3:eb:f9:41:4e:89:b1:63:dd:54:
29:9a:fe:ba:be:79:5d:e2:71:1e:fc:7f:38:ba:0f:
7d:53:14:1a:dc:d5:e4:91:30:c9:7b:ec:57:60:59:
ab:bb:4d:db:af:7c:8e:1c:02:da:0d:52:1d:b2:1d:
5f:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:70:01:8F:5F:C9:23:69:52:87:B1:2C:4E:57:AB:C0:5D:6F:E0:23
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/W3ABj1_JI2lSh7EsTlerwF1v4CM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
17:b7:63:c9:b1:ed:fa:35:c8:dc:84:4f:f6:5f:c0:08:3d:1d:
4b:40:27:3d:c5:b2:2d:bc:99:ad:f0:72:a5:d5:2b:72:06:1c:
fe:02:43:84:fe:06:63:67:65:4c:f0:05:1b:34:1e:79:47:56:
71:e0:06:82:ce:ac:84:20:31:40:a3:f5:5c:f4:15:70:2b:2e:
2f:9e:8d:50:88:86:53:58:08:7c:6e:4d:90:3e:4d:18:81:4f:
de:1f:59:3d:4e:94:14:d1:af:47:fd:3d:16:6a:12:5f:e0:df:
f8:2a:56:ca:f0:7d:bb:77:91:eb:5d:f5:61:a5:c5:f1:29:42:
f0:c4:d3:b6:79:d6:e4:7e:df:49:55:67:60:e1:03:81:3b:ff:
2c:5a:63:21:ce:64:c8:dd:cc:8c:64:9c:6c:fa:8f:fe:16:0a:
e9:9c:50:6d:2c:dd:3f:e7:9e:8c:73:05:99:3d:4f:a1:d6:df:
07:8e:b2:a5:56:29:09:74:a9:65:2a:2b:84:7b:b0:5f:11:40:
11:f7:01:92:cb:9a:b7:ca:f0:2e:52:37:22:34:cc:e9:18:4c:
cb:ea:95:4b:3b:30:ae:ab:b9:c2:54:cc:65:be:89:99:8a:ed:
2d:75:b0:72:06:33:53:49:0b:ef:60:b4:f2:7c:dc:38:ef:b8:
a9:ea:f4:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 22:26:36 2025 by rpki-client