Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/WDCnsptZX3wijfe0_AIRtJy3DxY.roa
File: WDCnsptZX3wijfe0_AIRtJy3DxY.roa (raw, json)
Hash identifier: ZiNgT17gl1OK6Lp+OqGz9X9SzwNaTw56qoQP5daudhk=
Subject key identifier: 58:30:A7:B2:9B:59:5F:7C:22:8D:F7:B4:FC:02:11:B4:9C:B7:0F:16
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01850A88286823DF6F3C6DF666BFE21B40C7
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/WDCnsptZX3wijfe0_AIRtJy3DxY.roa
Signing time: Tue 13 Dec 2022 08:09:33 +0000
ROA not before: Tue 13 Dec 2022 08:09:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:0a:88:28:68:23:df:6f:3c:6d:f6:66:bf:e2:1b:40:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 13 08:09:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5830a7b29b595f7c228df7b4fc0211b49cb70f16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e9:a8:64:0b:46:dd:b3:30:68:f2:18:5d:00:
da:fb:1a:77:12:02:9e:c0:9a:e9:cf:e5:e2:1c:9a:
f5:1f:53:a5:94:25:82:aa:ae:26:92:c8:59:f3:d2:
59:a9:7d:d7:07:94:d6:06:d6:ae:bc:02:10:4d:49:
86:85:9f:fb:aa:e0:89:ef:90:ac:d1:29:a3:4b:c4:
c0:4a:b5:09:3f:75:1f:00:3d:55:1b:28:a6:fe:59:
51:8f:9f:2b:4a:97:10:32:76:b9:6d:25:7e:04:d2:
c8:fc:a2:a9:e0:af:bf:dd:2b:76:0c:b7:54:d2:02:
f2:1e:4e:df:a5:a3:03:e1:b9:9f:8d:17:c6:c2:33:
aa:40:ec:04:bd:61:6f:17:19:0e:f5:3c:46:b5:d8:
c2:3a:8e:05:2f:d5:97:a3:69:99:42:5e:e9:38:c4:
37:6c:d3:6d:54:81:f7:3b:9b:c0:c1:1f:9e:f9:aa:
f6:46:84:81:88:e5:e4:f2:0a:b5:37:6f:d6:3c:bc:
36:c9:c6:2a:24:c3:7f:a4:26:2e:74:27:1e:b9:88:
16:a5:6c:29:14:48:b1:b6:4c:b9:1c:d0:be:93:5f:
7b:fe:29:94:1d:bb:7b:12:ff:ae:47:52:75:6a:db:
e7:74:a8:f5:2d:26:f3:10:81:ea:0c:f2:79:6e:ed:
62:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:30:A7:B2:9B:59:5F:7C:22:8D:F7:B4:FC:02:11:B4:9C:B7:0F:16
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/WDCnsptZX3wijfe0_AIRtJy3DxY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6c:5e:61:93:73:fc:73:0b:24:5f:57:7f:b7:4b:5b:83:25:d3:
6c:91:c4:8f:79:2e:0d:ff:b6:64:ad:bf:bb:f2:ff:2b:0a:95:
44:22:38:5f:aa:9e:e8:87:0b:8f:94:40:40:87:c5:53:3f:9e:
7f:2e:ce:fa:a6:9a:1b:ee:87:e7:9f:d8:ef:ac:89:c8:c8:9a:
7b:26:4d:22:ba:d9:ae:67:52:da:d4:f5:07:9c:ac:ab:bb:21:
33:1b:3e:d0:a2:f8:a1:f9:9a:16:e3:9f:43:6c:1f:c3:b9:0c:
92:f5:c0:6e:f8:01:e5:0d:30:6f:a5:e6:57:c4:49:eb:e5:ba:
1f:2a:24:ea:3b:1e:fd:16:59:d4:a6:84:88:15:89:0e:45:fa:
30:cf:c6:f5:29:a2:75:2b:20:75:8b:44:63:9d:fb:f1:13:89:
e3:f5:75:f2:f8:9f:00:b2:33:89:49:ca:bf:27:96:2f:72:7c:
c2:3e:cd:a4:17:66:ad:a7:1f:32:30:ec:d8:b8:39:bc:d9:e8:
65:67:3b:8d:a3:24:32:2e:08:f8:e9:f9:b1:34:ca:15:39:54:
84:29:74:53:ac:45:a7:25:05:b4:7e:b7:77:72:dc:f7:b3:8c:
4e:74:c7:5c:28:d8:b0:70:b6:cb:e0:f0:8c:df:d6:45:91:86:
81:a6:c1:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 08:53:15 2025 by rpki-client