Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/W5Om15YZrPn8uDgqPV_MKqWCBNU.roa
File: W5Om15YZrPn8uDgqPV_MKqWCBNU.roa (raw, json)
Hash identifier: /F+rCPOztiAIHFqTmRRACqL4hhaqv5QxjPE0inK8Sag=
Subject key identifier: 5B:93:A6:D7:96:19:AC:F9:FC:B8:38:2A:3D:5F:CC:2A:A5:82:04:D5
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01826FDCE33DC23C9EF8A431C35D33789A0E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/W5Om15YZrPn8uDgqPV_MKqWCBNU.roa
Signing time: Fri 05 Aug 2022 21:15:23 +0000
ROA not before: Fri 05 Aug 2022 21:15:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:6f:dc:e3:3d:c2:3c:9e:f8:a4:31:c3:5d:33:78:9a:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 5 21:15:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5b93a6d79619acf9fcb8382a3d5fcc2aa58204d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:58:bf:c5:ef:3b:e3:eb:b0:3d:c4:36:f1:bb:
15:9b:fa:eb:d3:0c:e5:1a:5b:a6:21:85:fb:e1:90:
30:ea:22:5f:88:2a:fd:14:cd:d0:51:27:58:aa:b4:
a4:0a:06:8d:70:07:07:af:3f:29:69:2d:6a:b9:d7:
c5:54:89:4b:28:75:db:c4:32:fb:eb:1f:61:06:f2:
e8:b9:9a:f0:0f:27:b3:b2:72:75:f9:9e:31:1c:14:
2e:2a:23:b2:d4:5b:6f:6d:87:3a:03:78:c5:14:9b:
18:96:a0:4c:f1:69:eb:34:2a:f8:76:b1:bf:68:34:
39:7c:48:f5:cc:1f:d2:33:b8:9e:ab:34:bc:ac:eb:
7f:b5:0e:7a:4f:31:6a:32:05:6e:57:ba:f8:f4:93:
16:3d:4b:c0:b6:7e:5e:9c:1f:d1:8b:26:44:6e:98:
42:a9:e3:84:9f:94:7e:0a:31:f3:fe:5a:1b:fe:30:
2f:34:08:ce:1f:4e:a0:06:a6:e2:92:0d:65:d8:3b:
c8:8c:dd:ae:3e:d4:50:03:7a:09:44:31:39:d2:e2:
da:83:ed:64:b1:3f:24:d5:58:60:5b:11:87:5a:7f:
c7:4a:48:d6:cc:2d:d3:4a:98:89:d1:2d:26:ef:8e:
80:d9:76:b5:2d:0a:93:91:28:02:d4:71:f1:6e:32:
4b:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:93:A6:D7:96:19:AC:F9:FC:B8:38:2A:3D:5F:CC:2A:A5:82:04:D5
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/W5Om15YZrPn8uDgqPV_MKqWCBNU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6a:a8:1b:cf:a8:bf:ba:64:15:bd:95:8c:83:28:d2:62:db:6f:
2a:b3:0a:af:0c:46:07:41:5f:41:9c:5c:3a:ac:c0:83:36:62:
2e:72:0d:33:93:b6:07:0f:c1:79:a6:56:ad:bb:2a:39:83:04:
24:33:da:6f:df:18:91:4c:e1:f9:c1:30:00:31:7a:e5:6d:ec:
73:3f:08:44:58:4e:e4:d7:d8:67:16:1c:69:a5:db:27:7b:11:
5b:ee:a7:19:32:ce:ea:4e:bf:2d:5c:51:35:37:a4:0a:3d:4c:
c9:f6:fd:68:8e:4b:56:31:6e:87:87:be:70:6f:13:19:bb:1c:
79:ba:de:90:1d:92:cd:8b:72:22:3e:57:b9:72:f8:d4:98:31:
5f:3c:06:ae:ea:64:dc:f4:a2:45:4b:34:15:ca:0a:92:82:60:
33:f6:36:d7:92:74:60:71:d8:b9:97:f0:d6:5d:82:03:b2:81:
b8:09:23:2c:45:ce:a8:87:06:dc:82:02:ca:c8:e4:16:f7:2f:
25:9a:71:6c:1e:23:2e:f8:3a:70:4c:c4:62:4a:0a:0c:33:c2:
11:e1:6d:f7:8b:ff:b2:c4:e6:f9:4a:8b:61:39:29:c9:01:cd:
e5:a1:ca:97:a1:1f:50:a4:3c:bb:d5:80:27:7a:94:8c:35:39:
1a:e3:53:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 06:51:45 2025 by rpki-client