Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/WH8fDT-lcZt65yGIA7JDVplgvv0.roa
File: WH8fDT-lcZt65yGIA7JDVplgvv0.roa (raw, json)
Hash identifier: q9xeBUmvDulL1YP7CzER60WO/h1Gz0j/s0GwFTO6WZc=
Subject key identifier: 58:7F:1F:0D:3F:A5:71:9B:7A:E7:21:88:03:B2:43:56:99:60:BE:FD
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 91B28981
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/WH8fDT-lcZt65yGIA7JDVplgvv0.roa
Signing time: Sat 02 Jul 2022 08:11:25 +0000
ROA not before: Sat 02 Jul 2022 08:11:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2444396929 (0x91b28981)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 2 08:11:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=587f1f0d3fa5719b7ae7218803b243569960befd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:7f:8f:bd:ce:d8:da:a5:53:c6:36:a4:22:91:
8c:21:17:31:61:e9:3b:f7:2b:95:e1:4b:27:d3:d4:
f1:f6:a2:c2:ba:2f:c1:dc:2b:83:bb:c5:00:32:67:
73:8f:4f:74:ca:19:34:c6:16:4e:fc:81:07:c6:0c:
ae:d9:44:68:7d:ed:a9:6a:c8:97:12:46:9e:98:af:
57:3c:63:57:21:9a:17:7c:b2:29:13:a8:60:a2:3b:
e7:d9:e9:57:05:a7:87:89:1c:41:81:95:ba:bf:6d:
54:3d:73:43:e0:d5:e2:6f:f1:a3:5b:fb:3b:c4:ac:
d0:56:b8:42:f2:ea:f1:d4:ed:05:80:9f:c0:69:31:
ba:22:ad:1e:5b:66:c0:87:62:b8:ac:ec:ab:72:f6:
8b:94:ae:f1:18:4e:c8:db:de:a4:45:44:22:3a:8b:
c0:fd:4e:1f:f2:43:d9:fc:a2:2b:9b:a7:71:ae:e6:
19:3e:92:26:c0:e1:f8:7c:35:02:7c:3a:90:68:40:
73:2e:fc:4d:b4:02:05:a0:52:d0:50:21:a1:34:0a:
aa:7d:91:d5:43:57:b8:e0:8f:8c:02:79:69:66:dc:
1b:fd:65:e1:a3:92:48:db:d1:5d:ce:3c:e3:ea:c3:
5f:e5:a2:44:4f:66:8e:ac:8c:f1:35:17:49:62:03:
f9:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:7F:1F:0D:3F:A5:71:9B:7A:E7:21:88:03:B2:43:56:99:60:BE:FD
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/WH8fDT-lcZt65yGIA7JDVplgvv0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
67:16:65:1e:fc:d0:d0:86:00:44:b9:3f:d3:e3:4a:67:5a:da:
d5:83:af:a5:80:75:a2:82:e2:e2:c4:71:39:6d:9f:96:9e:c1:
77:53:82:44:07:a3:ab:d4:27:e7:0c:f3:d1:d9:19:a1:db:db:
6f:a6:09:5e:97:86:17:82:c1:0d:c5:af:59:06:bd:ed:69:50:
af:a4:35:9e:f8:96:67:85:95:10:43:64:3f:fc:e6:8a:a9:00:
9c:8d:80:e5:b9:14:96:dd:8a:b7:5e:ca:c1:4b:46:e8:91:30:
d6:ec:2d:b8:64:32:c6:13:31:cc:33:37:08:76:bf:d8:68:35:
83:61:78:90:e3:fb:5b:fc:5d:08:3c:12:8d:4c:80:a5:30:93:
9b:9f:a2:51:5d:ac:11:9b:96:75:d0:a0:34:1a:b3:14:73:2a:
84:e1:7b:7c:e8:7b:f4:b3:c1:bc:90:93:ff:ec:87:5f:68:65:
5f:c7:a6:c1:b4:9d:b2:2a:41:b0:86:df:cf:88:32:c6:50:d3:
fa:9f:fd:a8:58:e9:84:8d:4e:15:8f:e1:44:25:e9:89:9e:38:
7c:86:27:5b:84:fe:56:d9:5c:74:0a:5a:ae:4b:b6:3f:2a:4c:
e8:79:6e:a5:cb:d6:7f:f6:3e:76:e8:24:1e:28:8f:0a:55:dd:
e0:7d:30:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:30:02 2025 by rpki-client