Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/WC3PW83p7ERn9XBGgQ_oUMYFLRM.roa
File: WC3PW83p7ERn9XBGgQ_oUMYFLRM.roa (raw, json)
Hash identifier: vKRof+pSVgJGxjY67uyXEzNdKjUIW+OCzfmAoDLww7A=
Subject key identifier: 58:2D:CF:5B:CD:E9:EC:44:67:F5:70:46:81:0F:E8:50:C6:05:2D:13
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186FCFB844099C03CBCE8905299D99E7502
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/WC3PW83p7ERn9XBGgQ_oUMYFLRM.roa
Signing time: Mon 20 Mar 2023 03:06:27 +0000
ROA not before: Mon 20 Mar 2023 03:06:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:fcfb:5a13/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:fc:fb:84:40:99:c0:3c:bc:e8:90:52:99:d9:9e:75:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 20 03:06:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=582dcf5bcde9ec4467f57046810fe850c6052d13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:cc:26:a3:3f:c6:85:61:2c:f5:0b:0e:34:4e:
4a:a5:68:0d:a1:b3:f0:d7:fd:58:fc:b3:e6:48:a1:
34:1d:bd:5c:a9:60:89:f5:e9:cb:06:22:78:10:05:
3b:8a:b6:ab:a0:74:e1:70:a8:09:56:02:ab:71:f4:
58:99:73:95:8b:1b:42:24:a4:8f:d1:d9:93:de:e9:
13:86:c3:9a:8a:7a:fa:1c:a4:41:06:c1:f6:84:4f:
95:0a:a3:97:d1:4a:2e:29:4d:d3:0d:f2:6f:98:6f:
32:15:a6:35:db:35:05:a3:26:0a:24:3e:aa:9a:46:
45:71:2d:5c:09:4d:92:2e:5b:b1:e9:e5:2b:e4:dc:
e2:4a:85:f8:16:00:ac:19:d4:bf:c0:60:8c:2f:c2:
4d:d6:1b:f1:c7:c9:76:9e:7c:50:d5:63:3f:90:50:
4d:dd:9c:d8:bc:b2:e7:79:f9:ac:cd:7f:e7:17:e5:
4a:0d:39:c2:1d:ed:a5:77:fb:52:2e:7e:63:37:c2:
a1:e3:1e:bb:22:0a:5a:0c:09:ae:cb:f3:95:c9:83:
46:73:d2:fa:1d:ad:99:f6:b1:7a:b3:4b:a0:d4:52:
8e:ff:49:25:06:b5:8c:c1:e9:04:38:4c:ee:6d:77:
3a:53:ca:5b:05:13:10:90:a6:c8:a4:46:9b:c8:77:
00:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:2D:CF:5B:CD:E9:EC:44:67:F5:70:46:81:0F:E8:50:C6:05:2D:13
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/WC3PW83p7ERn9XBGgQ_oUMYFLRM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
31:bd:ea:23:88:2f:56:4a:16:d7:c8:97:ef:f4:0e:a6:b7:d4:
01:9c:73:06:29:e6:50:f5:29:99:a7:9f:1e:9f:67:d8:77:44:
ed:43:af:23:90:c9:13:c4:56:1c:b4:56:cb:a1:14:2f:0c:ac:
93:c2:92:16:1c:10:29:46:89:74:9d:56:f5:af:50:a9:62:e2:
00:09:86:3b:a6:19:90:24:05:06:89:e1:4a:fc:52:b8:72:e8:
99:9c:dd:c1:4d:9a:5b:f0:b0:11:96:35:bb:f2:17:9e:3b:2f:
c9:bb:e0:c5:2f:8d:cc:2e:ac:05:34:43:fd:e4:da:a0:93:ae:
b6:45:33:ab:bd:03:ca:ed:da:b5:6e:20:88:d8:00:95:21:31:
b2:d5:76:fc:b0:1b:32:43:29:9d:65:58:16:03:56:a8:8a:53:
ea:38:7d:6b:7e:a7:20:34:16:a5:b1:19:35:07:90:cd:3f:9c:
ce:e7:9c:8d:1f:f9:46:8d:9f:d9:7e:fd:0b:6b:91:b4:31:2a:
0e:ff:94:f5:b2:9c:75:1f:99:4b:bd:f3:0d:75:8d:00:9a:cc:
38:b7:11:31:da:98:43:66:41:a9:f6:94:c4:57:6c:3d:1d:b8:
33:61:9a:64:59:41:55:4f:fa:a4:f9:e1:e8:cc:99:b6:02:32:
b9:6a:fd:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:35:51 2025 by rpki-client