Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/WQFg4BozogNXVLli9R5ZQ_DA3rw.roa
File: WQFg4BozogNXVLli9R5ZQ_DA3rw.roa (raw, json)
Hash identifier: obB+15Y34Glu3aTtqK63xOz9qwXkgOEgq5JpF2EtqSI=
Subject key identifier: 59:01:60:E0:1A:33:A2:03:57:54:B9:62:F5:1E:59:43:F0:C0:DE:BC
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018740919117E220BF62D1704A5F058C81EB
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/WQFg4BozogNXVLli9R5ZQ_DA3rw.roa
Signing time: Sun 02 Apr 2023 06:04:54 +0000
ROA not before: Sun 02 Apr 2023 06:04:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:187:4091:3232/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:40:91:91:17:e2:20:bf:62:d1:70:4a:5f:05:8c:81:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 2 06:04:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=590160e01a33a2035754b962f51e5943f0c0debc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:54:89:1e:63:94:ab:ec:95:a9:bb:3f:7b:ec:
43:54:2d:d3:b6:29:af:59:23:13:0b:dd:6a:dd:2f:
01:19:59:63:26:95:ec:73:b3:58:4a:4a:18:1a:fb:
6d:5f:1b:cf:6c:95:9a:00:16:f5:ba:be:fa:4f:6f:
31:be:b2:b2:7d:92:9c:96:73:35:72:2a:84:56:6a:
2b:4b:d1:2d:a6:e4:8e:1a:ae:bf:32:ff:63:03:85:
c9:6a:ef:d2:ec:d9:05:95:32:d9:eb:84:c9:9a:74:
1f:26:c8:f5:c5:2f:93:3e:1d:a9:64:4f:59:92:91:
c4:0e:c6:e0:29:81:f5:11:e2:e2:e7:e2:b0:4d:28:
94:9a:48:06:a4:7f:9e:71:7a:4d:11:d5:4a:35:2e:
c7:9d:53:30:6b:21:fe:18:04:58:e9:0c:24:83:5b:
71:4e:26:f1:26:05:51:18:cd:77:d1:f0:b3:cd:1b:
02:b6:d5:7c:20:fb:bf:1d:e8:ca:61:84:40:fd:ee:
71:11:d2:d3:1f:28:11:64:5a:aa:cb:57:4c:9d:3f:
e2:dc:46:d1:69:cb:9f:24:4c:8a:4c:2e:75:1c:06:
d5:4f:92:56:4b:46:45:bd:07:02:5f:fb:7e:76:16:
00:9a:5f:09:61:71:f2:08:bf:7f:a4:4a:f2:ee:ba:
5a:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:01:60:E0:1A:33:A2:03:57:54:B9:62:F5:1E:59:43:F0:C0:DE:BC
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/WQFg4BozogNXVLli9R5ZQ_DA3rw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
25:28:5f:1a:92:fc:a4:f0:33:cb:8f:71:39:a9:ce:ec:f1:04:
7d:f5:25:ff:8a:a6:23:87:83:3f:1a:e2:24:9c:b6:ee:5f:6a:
47:7c:c8:df:3e:59:27:d8:fd:e2:2f:00:ae:dc:fd:c3:6c:43:
33:96:97:ea:ff:c0:7d:94:aa:76:d2:26:ac:b5:bb:8d:33:c9:
30:d2:da:76:04:47:a7:6a:aa:1b:f0:ca:4b:ca:c9:29:f8:ae:
33:f9:c7:36:85:ea:db:06:22:28:38:76:da:76:de:89:af:30:
54:8d:6e:77:04:aa:6c:7f:80:a2:ed:81:31:34:6b:4e:c8:6a:
cb:f5:4f:5a:c4:d7:c6:08:8c:79:6e:63:ac:4e:a2:a8:94:b8:
8a:a4:50:d8:74:e8:e0:9b:50:5c:14:e7:3e:a0:d7:50:94:31:
10:62:ba:8d:0e:3a:f7:06:fa:b5:fc:8e:89:a8:bc:2d:11:33:
8a:b3:57:c8:cb:c6:41:43:10:df:d2:4d:60:7d:1e:dd:ad:51:
b7:ee:11:3e:3b:16:4b:37:b3:a5:82:48:59:ec:56:98:9b:b2:
3a:6d:76:ce:85:28:3a:0e:aa:ff:b8:ae:86:4d:bc:35:f0:e7:
b1:c0:68:75:33:2a:4f:53:c9:6c:3c:5b:69:6a:7e:12:b4:7a:
bf:d3:fe:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 19:10:33 2025 by rpki-client