Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ws5mO7OXTB6E1vb5LHgjQ6CCfaQ.roa
File: ws5mO7OXTB6E1vb5LHgjQ6CCfaQ.roa (raw, json)
Hash identifier: zeurmRrBhaoFZoELOmBGKa7nvu6GoLDYmOqOrK+3Me8=
Subject key identifier: C2:CE:66:3B:B3:97:4C:1E:84:D6:F6:F9:2C:78:23:43:A0:82:7D:A4
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186D4E43F5EEEC35B56F81E8DDB1D989485
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ws5mO7OXTB6E1vb5LHgjQ6CCfaQ.roa
Signing time: Sun 12 Mar 2023 08:16:13 +0000
ROA not before: Sun 12 Mar 2023 08:16:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:d4:e4:3f:5e:ee:c3:5b:56:f8:1e:8d:db:1d:98:94:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 12 08:16:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c2ce663bb3974c1e84d6f6f92c782343a0827da4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:30:17:42:88:6d:0d:b7:c9:a7:fc:d3:9f:e1:
2a:8f:5e:59:23:b5:02:c8:58:cc:79:2b:ed:3e:bd:
52:f8:70:8c:0c:4f:a2:84:85:8b:cd:41:c3:6b:79:
7f:b2:2f:2d:d4:9d:fb:f7:db:2f:57:f1:da:3c:03:
0c:62:72:95:5d:2d:c8:e0:6b:38:fb:52:e2:22:12:
67:15:6a:6e:68:15:19:ec:62:e5:ed:ef:85:d6:63:
45:30:8e:bd:85:1d:13:3f:2c:f8:86:4b:4f:0d:ac:
03:42:1d:4f:3e:48:48:d3:27:8e:11:e5:d9:7a:a8:
bf:c8:c2:94:d0:3f:8a:68:8b:a4:b2:26:45:5d:2d:
18:22:8b:3d:8d:20:d4:18:6e:c3:9b:33:b8:db:49:
73:3d:9d:3e:fc:6b:2e:3e:4b:e1:96:f7:c7:cd:b8:
d8:9b:8c:3a:2b:3c:19:dd:49:fa:7b:82:37:62:e3:
b0:99:df:8f:b9:45:fc:d7:f3:bf:df:b1:64:2c:b2:
d4:3d:f1:d1:f3:12:d4:7f:be:f2:24:29:24:82:54:
3b:50:53:fd:4a:3b:1f:51:80:f4:34:05:6b:0a:13:
ad:cb:62:b9:46:cc:11:40:58:32:95:fc:93:83:54:
f4:dd:d7:ee:3f:3f:d7:7d:1d:bb:60:33:3a:1a:81:
6e:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:CE:66:3B:B3:97:4C:1E:84:D6:F6:F9:2C:78:23:43:A0:82:7D:A4
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ws5mO7OXTB6E1vb5LHgjQ6CCfaQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b3:e2:49:1f:72:92:46:6c:79:a5:95:56:6f:7e:02:d0:45:8a:
55:8a:72:c8:bf:2d:f0:5d:68:3d:4f:7f:d5:7c:0f:75:c3:db:
ea:70:15:91:ad:4b:e0:d1:6c:bd:68:28:93:22:08:77:e9:b4:
26:53:a6:b5:0c:ca:f8:3f:a5:13:e6:7f:b1:d9:b3:a7:26:8e:
2e:c7:7c:74:f5:a2:2a:1c:dd:47:8f:82:c8:db:55:7a:81:95:
6d:f7:26:c2:5c:74:b0:f4:99:9d:71:7f:4c:1d:19:34:98:0d:
76:c2:4a:c2:ed:25:54:4a:54:3d:6e:b7:6f:d4:79:97:d7:fb:
84:d3:0d:38:db:ae:ec:28:3a:4e:1e:57:08:2b:b4:e3:85:07:
42:0b:1b:0b:11:b8:b4:15:f3:bc:d6:50:8c:15:34:ba:5b:bc:
fe:3e:ca:e5:ed:bc:92:ae:98:9f:8d:39:50:8a:60:48:ea:61:
b4:22:7b:f7:1a:ce:6b:a8:da:dc:38:70:fe:5e:2a:2d:78:8a:
9c:10:de:fa:e7:0b:f6:22:63:44:61:0d:86:1e:ef:cd:aa:de:
03:bc:d1:29:55:ca:cd:19:44:42:3c:cb:4f:4f:16:27:44:7b:
09:dd:21:27:70:05:3c:6b:20:67:61:a5:c1:a9:65:7e:a7:8e:
90:af:49:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:11:27 2025 by rpki-client