Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/WD6PkBJRNeSpL9_9C4A0KO6NXeU.roa
File: WD6PkBJRNeSpL9_9C4A0KO6NXeU.roa (raw, json)
Hash identifier: UNzyfCRgwEQS8T0chE0HEPY+8lNY0dV8p1Peg78x0tg=
Subject key identifier: 58:3E:8F:90:12:51:35:E4:A9:2F:DF:FD:0B:80:34:28:EE:8D:5D:E5
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 72F1B27B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/WD6PkBJRNeSpL9_9C4A0KO6NXeU.roa
Signing time: Wed 16 Mar 2022 06:11:24 +0000
ROA not before: Wed 16 Mar 2022 06:11:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:17f:87e3:2531/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1928442491 (0x72f1b27b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 16 06:11:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=583e8f90125135e4a92fdffd0b803428ee8d5de5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:64:a0:c4:4a:0a:61:34:62:35:be:72:8c:59:
aa:42:e5:02:bc:68:5a:11:79:a8:e0:89:3b:92:7e:
9a:15:fe:03:1e:5a:57:2d:17:81:7d:73:0e:72:f8:
26:00:b1:ad:71:e3:a2:15:c1:b2:03:2b:d1:91:2b:
98:9b:33:cc:7b:9b:82:b7:11:94:b7:f4:7a:6c:65:
53:11:67:c0:64:67:84:bf:dd:09:3f:65:16:dd:95:
e9:f8:0c:ad:a5:20:88:26:fd:7d:a0:4e:27:e4:ca:
11:4e:75:79:c2:de:b6:06:21:9d:89:a9:cd:c8:01:
f5:ca:36:0f:89:76:3f:67:1f:70:9c:8e:a6:f5:6b:
d6:a5:bd:ad:ea:40:28:2f:3a:46:49:9f:c6:0a:02:
73:18:24:6e:80:1d:e0:64:48:2e:52:72:f3:57:0a:
83:ec:6e:ee:43:cc:ec:85:5b:60:47:6d:20:6a:dc:
eb:26:7b:83:48:14:95:b6:7d:3d:de:b8:82:3d:62:
1e:88:eb:a9:e8:c8:31:93:bb:85:43:24:0e:99:0c:
cc:6f:e2:5b:b4:f7:83:25:94:7c:9e:6a:48:68:bc:
93:b8:32:c9:8a:b6:5c:ea:d9:fb:b0:56:19:7b:ec:
e2:74:3a:16:40:ca:9c:c1:58:6b:c8:ad:b6:4b:c0:
65:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:3E:8F:90:12:51:35:E4:A9:2F:DF:FD:0B:80:34:28:EE:8D:5D:E5
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/WD6PkBJRNeSpL9_9C4A0KO6NXeU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
28:dd:ce:c3:d0:19:91:06:7e:9f:46:26:d9:b6:74:9d:29:7f:
40:fc:e9:9d:d1:d7:ff:81:1c:ba:da:13:9b:da:99:dd:e3:74:
1d:84:57:1a:cc:03:be:7d:b9:05:40:e3:72:86:8d:c2:5f:25:
44:69:47:5a:a7:b1:65:31:11:68:b5:50:1f:07:be:5a:9e:2d:
ae:e0:55:02:e7:78:4f:c2:59:2c:05:30:c9:f6:08:18:9f:ad:
e3:51:6b:a3:1a:ba:c7:16:cb:99:7f:3e:a7:99:fd:2e:39:1f:
23:91:79:f2:f9:bf:08:01:9a:92:f6:68:25:58:e6:f1:7e:4f:
d8:e5:a8:f3:eb:2e:64:1f:2c:fe:53:ea:6c:d8:55:a9:e0:c9:
34:5b:0f:59:3c:9d:5e:37:1c:2f:64:d6:6f:92:dd:3f:be:1a:
7b:40:5c:15:9d:5c:22:00:41:b4:77:cf:58:8e:d5:e8:fd:18:
dc:5a:a6:48:68:c9:6b:bc:49:2d:a0:9a:21:69:8b:c9:97:6b:
25:b1:68:61:11:3f:6c:b4:92:5d:24:66:35:dc:72:08:dc:c5:
a8:69:fb:3a:73:80:5a:e9:cc:04:77:2e:52:bb:67:42:74:9d:
94:6f:00:19:9a:bf:24:9b:4e:10:26:f4:e2:73:04:6e:1f:f3:
48:5a:5d:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 06:48:19 2025 by rpki-client