Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-WK4Z4xQs1g9f6oOYo7DGxbYGvk.roa
File: 1-WK4Z4xQs1g9f6oOYo7DGxbYGvk.roa (raw, json)
Hash identifier: uL9Cor381Og63r1ZH9/BXvF8lc4gYZ3Lc7fZL/TQ6w8=
Subject key identifier: F9:62:B8:67:8C:50:B3:58:3D:7F:AA:0E:62:8E:C3:1B:16:D8:1A:F9
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 8CC28EE1
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-WK4Z4xQs1g9f6oOYo7DGxbYGvk.roa
Signing time: Tue 14 Jun 2022 22:10:44 +0000
ROA not before: Tue 14 Jun 2022 22:10:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:181:56ba:5b78/128 maxlen: 128
2001:67c:64:ffff:0:181:22f:7a99/128 maxlen: 128
2001:67c:64:ffff:0:181:477e:58d8/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2361560801 (0x8cc28ee1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 14 22:10:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f962b8678c50b3583d7faa0e628ec31b16d81af9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:3b:29:06:d8:4e:ed:da:4d:d2:77:9f:34:81:
ee:b1:c7:84:be:eb:5e:2d:1a:63:3f:c5:95:b9:27:
1c:93:b7:2b:13:97:a3:f6:b1:64:bf:5a:34:b1:b2:
30:8a:21:66:f5:3b:83:85:2a:81:b3:e3:b8:e9:b9:
79:42:a7:e7:a7:9f:8c:57:c4:a2:63:4a:3c:64:a8:
d9:e7:70:d0:b2:b2:e2:3e:17:2c:30:03:91:b7:f6:
ec:83:d8:96:28:f4:de:21:72:d8:f8:00:86:82:ad:
9e:e3:61:56:04:60:1e:7d:03:3d:ea:a4:be:56:e3:
4d:ab:45:08:93:9b:56:31:8f:80:d4:c0:8c:6a:c5:
1f:7c:d8:e5:42:ac:fb:86:e6:b3:15:2e:2a:dc:f2:
0d:f7:77:e0:d1:89:94:8c:ee:af:f9:2e:95:b6:98:
4b:1d:c5:82:df:5d:a5:f6:56:82:7f:98:e1:50:84:
d0:b2:2a:65:35:7f:3b:dc:ed:58:09:34:6d:69:e4:
96:a2:51:f4:31:92:13:bb:4e:dd:cb:85:4f:0d:ea:
d6:b8:e8:b5:ce:72:f7:4a:4b:df:e0:3f:d6:e8:b0:
a1:64:6f:21:e3:8b:e7:b4:d0:c7:10:c7:4b:ee:60:
08:be:63:b0:0d:cf:4b:29:5d:b7:b3:d7:b9:ec:88:
8e:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:62:B8:67:8C:50:B3:58:3D:7F:AA:0E:62:8E:C3:1B:16:D8:1A:F9
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-WK4Z4xQs1g9f6oOYo7DGxbYGvk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
72:c8:8c:7d:15:fb:d0:4f:99:94:96:7a:71:43:ff:ab:74:bb:
54:44:42:ab:b7:e6:cc:1d:2c:7b:af:31:85:bd:c3:d3:b1:48:
27:a3:c8:1e:12:e0:10:8b:9e:54:86:9d:2f:92:0b:12:80:c2:
ab:ce:11:81:67:63:ec:66:33:99:4a:46:d3:e1:b8:a8:4c:b6:
58:22:74:57:d0:8d:2d:f1:3d:0a:d2:31:dc:d3:d1:73:9c:86:
a3:12:94:75:66:7c:20:fc:1c:a8:07:ea:7b:6d:38:25:c7:2e:
b8:89:c9:73:5b:41:73:52:ce:d3:70:66:de:62:90:39:ae:4c:
d6:cc:17:d6:ac:c0:45:d4:78:17:fb:61:82:bc:8e:8d:91:9c:
87:8c:f2:07:36:3a:7d:8a:76:12:a7:70:2d:10:da:4d:05:bc:
dd:64:62:02:e0:bc:eb:60:c1:bf:c9:e5:f8:0f:0c:48:78:d7:
75:dd:e1:d8:02:4d:c6:3f:91:74:43:54:ab:07:e6:1c:65:c6:
d9:8d:b2:d0:fc:0b:f7:c9:dc:ec:30:0c:34:6d:8e:b7:10:f8:
d2:e9:ae:0a:a7:2e:cb:d7:4a:0c:70:db:23:a1:75:f4:0c:c2:
2b:2a:ef:4a:66:fe:5b:d4:7c:39:09:83:8b:6b:ff:3d:ce:35:
36:37:f3:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:38:00 2025 by rpki-client