Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/RV_1WLZmBDW6rqwo2OAP4e8xaaM.roa
File: RV_1WLZmBDW6rqwo2OAP4e8xaaM.roa (raw, json)
Hash identifier: nIERN433Gkw5gO7RCWzFE9M8PAeY/ZMApnBtfGjJElQ=
Subject key identifier: 45:5F:F5:58:B6:66:04:35:BA:AE:AC:28:D8:E0:0F:E1:EF:31:69:A3
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01832C022E5763DE8BCD2FC93B461EEC2BBC
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/RV_1WLZmBDW6rqwo2OAP4e8xaaM.roa
Signing time: Sun 11 Sep 2022 10:04:43 +0000
ROA not before: Sun 11 Sep 2022 10:04:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64:ffff:0:183:2c01:f1f8/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:183:1279:659d/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:2c:02:2e:57:63:de:8b:cd:2f:c9:3b:46:1e:ec:2b:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Sep 11 10:04:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=455ff558b6660435baaeac28d8e00fe1ef3169a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:4c:ec:b0:07:5b:c6:6b:86:ff:5e:70:e3:65:
63:aa:70:1d:0e:0b:fd:bc:1e:b3:ae:06:a1:4b:75:
67:48:6c:63:ea:0d:4f:fd:b0:1c:89:be:8f:cd:3a:
9b:36:20:41:98:f4:fd:f6:a9:5e:bc:b6:3e:59:ea:
9a:fd:13:28:d2:80:fd:cb:ca:2b:72:9d:be:d3:af:
8e:a3:00:d7:12:ba:de:f7:50:aa:83:27:8c:98:1f:
df:46:02:95:b9:d2:2b:c2:0b:4b:69:16:fd:e3:e1:
f3:f5:50:fb:4d:00:df:a2:64:16:02:13:9a:1f:a2:
bb:a0:dc:d1:31:fe:62:eb:6d:cf:5a:ae:96:7a:1a:
1e:81:3d:9c:ee:08:e4:c1:bd:fa:6e:bd:e8:eb:ec:
a5:61:3f:c5:0b:06:75:fd:72:34:61:6f:d8:13:38:
e5:e1:01:dd:64:21:c2:a2:24:02:99:9f:70:d5:dd:
fa:3e:d1:fa:25:78:cc:95:3a:d3:69:9f:21:cd:b0:
53:d0:a2:6a:ec:79:19:0d:4d:73:b2:f9:f9:7e:b7:
22:55:77:84:c9:23:1b:f5:3b:31:88:8c:fc:f5:49:
b3:90:f7:78:73:cd:df:e6:c8:c0:f8:5c:63:ec:f0:
1c:7f:76:d5:41:9c:41:03:d1:43:e1:d5:43:81:5b:
1d:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:5F:F5:58:B6:66:04:35:BA:AE:AC:28:D8:E0:0F:E1:EF:31:69:A3
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/RV_1WLZmBDW6rqwo2OAP4e8xaaM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
50:99:ad:f7:ed:8f:01:e9:f4:7e:4e:71:25:6e:e5:c3:89:83:
68:6d:63:a3:6e:d1:91:7a:14:2e:69:2a:10:9c:d8:73:b3:d0:
fd:d9:28:19:8c:e9:21:ad:6a:a7:2c:70:f0:38:7e:e3:d9:6c:
f5:03:11:30:7c:a1:7d:5c:5e:e0:7b:80:d0:a3:34:54:c5:d3:
76:af:19:84:a1:6f:b7:fa:76:93:d1:a6:5a:90:a9:01:2b:a9:
06:cd:f6:e4:64:cf:17:e2:c5:b0:2b:22:85:c8:7c:74:09:a6:
cd:ac:37:37:0c:99:96:f7:8e:da:7b:39:d6:4f:59:ea:97:e7:
72:81:16:16:50:f1:70:8d:55:35:8e:9f:3a:06:67:a9:79:a5:
be:fa:78:a2:1d:55:c2:eb:55:d7:8e:dc:c3:10:e3:02:aa:96:
45:25:80:f4:35:b5:12:2e:47:8a:71:03:d3:87:f5:8f:3c:d8:
84:75:f1:92:a5:3e:0f:fb:0a:c7:6a:b3:70:8b:7f:d4:d9:68:
7a:8a:b9:dc:27:81:a3:8f:5a:86:06:6a:15:cc:68:f1:e7:dd:
88:6f:a8:d0:f1:c2:36:73:d6:50:ef:a3:fe:ce:21:9d:b4:ae:
67:ba:60:fc:6b:06:5d:3e:48:d0:20:f4:f3:c6:94:21:ad:15:
91:77:5c:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:13:42 2025 by rpki-client