Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/WBFV-FAdj4MePsDLeSOwNkSD420.roa
File: WBFV-FAdj4MePsDLeSOwNkSD420.roa (raw, json)
Hash identifier: gzjshRpjq4NJa+xQx7oogqYvnia+Hl8/JwzUxMx8dXs=
Subject key identifier: 58:11:55:F8:50:1D:8F:83:1E:3E:C0:CB:79:23:B0:36:44:83:E3:6D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01863573353BA217B86BC0167DBFF9394A73
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/WBFV-FAdj4MePsDLeSOwNkSD420.roa
Signing time: Thu 09 Feb 2023 09:13:08 +0000
ROA not before: Thu 09 Feb 2023 09:13:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:35:73:35:3b:a2:17:b8:6b:c0:16:7d:bf:f9:39:4a:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 9 09:13:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=581155f8501d8f831e3ec0cb7923b0364483e36d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ae:13:17:e1:07:de:51:3a:c8:eb:0c:5c:90:
97:a9:5c:11:81:48:13:e4:0d:11:a0:4a:66:e7:7f:
40:38:ed:c3:69:17:d6:3f:8a:c1:cd:b6:06:12:00:
51:dd:54:86:2b:11:9d:f8:14:94:ca:59:f5:18:9a:
15:52:0b:0e:e3:dc:2e:79:69:1c:6b:c0:fe:e5:3e:
66:58:81:af:ec:5c:cc:fa:9e:c9:96:3d:3b:6a:aa:
6e:8a:67:6f:fb:ff:dc:9a:66:ba:db:44:2d:c3:bc:
74:38:c9:5a:3e:72:02:07:c4:0b:dd:19:1a:58:dd:
d9:a7:ff:28:3c:65:83:8d:45:17:e2:2d:53:52:1f:
86:a2:16:e5:13:c7:e1:fb:e8:72:d7:f0:a6:c6:2d:
3c:71:3b:a7:9c:a9:b6:68:b0:53:e6:c6:dc:0a:74:
94:e5:2e:0f:7a:98:ef:3c:a7:df:cb:66:bb:24:74:
d5:a3:00:72:65:50:7b:70:98:c8:cb:fe:a9:8c:8b:
53:22:f8:c7:07:8c:96:be:5f:54:63:c5:57:ac:98:
20:1e:7f:e8:6b:e1:6e:d0:b9:a6:44:21:51:f4:00:
7b:3f:c5:85:e1:d7:11:cb:d8:ec:8d:bd:e4:54:fb:
0b:eb:2b:af:17:01:de:81:fd:23:04:04:04:86:2a:
46:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:11:55:F8:50:1D:8F:83:1E:3E:C0:CB:79:23:B0:36:44:83:E3:6D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/WBFV-FAdj4MePsDLeSOwNkSD420.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
80:95:cf:e2:8b:d2:0d:89:23:f2:c4:9a:6e:62:14:da:33:cb:
c2:a2:d1:bb:2b:b9:9d:6d:a5:5b:b8:00:c8:18:32:e9:d4:62:
02:c8:07:89:a3:12:e5:d0:94:26:78:77:e8:02:08:30:9b:c1:
36:eb:77:3e:4e:53:bd:1f:5c:d9:51:2c:f6:52:14:6a:48:1e:
7f:78:7a:e1:3c:be:ab:15:ec:ab:56:7c:7a:58:0f:78:a7:90:
95:46:c6:cd:b0:a7:3b:5f:4a:f3:1a:dd:d9:37:2e:fa:95:2f:
d8:db:72:17:a5:ee:87:da:f7:bc:d0:61:1b:2a:77:61:ed:d8:
c9:67:7e:8a:6a:41:0c:d2:12:22:5f:f3:43:f3:b4:40:77:cc:
14:29:40:47:d8:71:5e:bd:e4:e2:d3:c6:e9:b4:ce:2e:f5:c3:
72:33:b2:a0:c4:bf:33:28:58:a6:9e:b3:84:1f:03:6c:2a:8a:
4f:65:5a:2b:b8:7e:57:e0:2f:e5:04:a7:01:86:5a:82:59:2b:
a8:0a:8d:3e:68:92:a5:ca:00:93:f3:92:03:c0:5e:71:f5:6b:
6f:2f:2c:fb:df:4e:e8:9d:69:4b:eb:dc:19:de:66:c1:a3:b6:
df:aa:ef:27:c8:ab:a0:c6:e3:15:f6:be:83:52:2d:bc:be:5b:
d1:22:5e:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:35:47 2025 by rpki-client