Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/WN9ABC43xQqLjKOP1IL08xJL2Gc.roa
File: WN9ABC43xQqLjKOP1IL08xJL2Gc.roa (raw, json)
Hash identifier: fj74Jcq95Pxusi7PXoGFGCV+Waq91plhyBz7rhOA7wI=
Subject key identifier: 58:DF:40:04:2E:37:C5:0A:8B:8C:A3:8F:D4:82:F4:F3:12:4B:D8:67
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186DB8110FD69A97F209B19D1129C815756
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/WN9ABC43xQqLjKOP1IL08xJL2Gc.roa
Signing time: Mon 13 Mar 2023 15:05:14 +0000
ROA not before: Mon 13 Mar 2023 15:05:14 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:db80:73ed/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:db:81:10:fd:69:a9:7f:20:9b:19:d1:12:9c:81:57:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 13 15:05:14 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=58df40042e37c50a8b8ca38fd482f4f3124bd867
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:e4:e2:45:52:7f:50:be:d6:e9:91:a2:fd:0c:
4e:e7:c3:c3:84:9a:94:8c:55:ef:86:12:90:72:3a:
fb:8b:e8:06:4c:c5:d4:80:ef:6d:85:f3:47:b4:46:
4a:d6:10:19:02:9b:67:9b:d9:2a:c4:9d:7d:97:13:
a7:15:47:5f:83:77:e3:03:ea:d1:b3:27:dd:5c:ab:
02:e6:9c:dd:65:4c:07:09:2a:26:5a:f7:a3:80:cf:
7c:ec:78:ae:fa:f3:17:45:65:1e:98:89:7a:6d:bc:
95:07:ef:c2:41:c7:9e:2d:da:fc:9f:27:1f:d9:c3:
b9:d5:25:46:77:9d:8b:7d:64:bd:73:12:0c:1c:d9:
aa:59:9b:ea:d1:fb:ed:5d:21:3a:84:ff:85:75:93:
ac:19:b8:d1:74:b4:56:f0:b5:03:ea:e4:fc:2c:38:
b3:38:d0:97:5e:ab:5a:7c:33:8f:20:8d:79:1a:26:
90:ed:e9:fd:c1:fc:41:3a:af:f8:ad:b4:e2:2b:d4:
22:b5:28:7e:bf:c1:e8:fe:0c:1d:dc:59:3e:99:c2:
2c:92:4a:e0:2f:8a:e0:85:56:8c:57:c0:68:2a:e6:
bb:98:0c:91:23:0b:b2:e4:ae:9c:fb:76:cc:f0:4f:
33:8f:eb:6e:59:0d:eb:86:b0:24:d0:4e:20:13:04:
d1:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:DF:40:04:2E:37:C5:0A:8B:8C:A3:8F:D4:82:F4:F3:12:4B:D8:67
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/WN9ABC43xQqLjKOP1IL08xJL2Gc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7a:dc:9a:5f:3f:73:90:4d:5f:02:af:a0:b7:0c:ee:48:bd:bd:
25:96:91:5e:33:2d:7d:77:c6:f7:ed:e7:e6:ec:b4:00:51:aa:
aa:7f:61:86:89:95:d9:dc:b5:85:7a:5a:38:17:6a:22:7c:89:
3b:d3:f9:01:1e:23:f8:03:77:d3:67:c3:66:fc:54:9f:c0:ba:
0c:1c:60:0a:55:a1:24:93:28:f1:74:36:19:bc:1a:b7:41:86:
8f:25:b4:7e:cb:8b:2f:3b:a5:1d:40:51:63:ba:4e:05:46:b8:
05:2a:08:00:e0:c9:e1:af:a0:6b:a2:64:b7:38:7a:4d:fd:73:
98:0d:a2:4d:20:16:89:60:3f:85:79:26:5d:b2:d7:50:22:b9:
c3:a0:17:ba:d7:34:f8:18:ea:61:e0:41:15:b1:c7:c8:ec:f9:
22:dd:e8:8b:c8:b9:ef:66:b4:0a:2f:0e:8e:cb:c2:bb:90:2a:
4c:19:15:7f:17:45:0e:13:2b:e6:60:80:2f:14:7c:52:5f:3a:
4f:25:1b:51:07:a9:09:13:ce:10:0a:d1:e9:e8:b1:ff:47:67:
34:98:18:97:0e:fd:bf:1c:7c:a0:5a:31:ba:75:60:9a:d5:8a:
d0:6f:49:87:cb:87:83:81:a9:0b:9a:30:7f:28:b3:83:e0:f5:
9b:07:83:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:12:29 2025 by rpki-client