Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/WHL_nFggx7RIffK-yDiJS9J9jGQ.roa
File: WHL_nFggx7RIffK-yDiJS9J9jGQ.roa (raw, json)
Hash identifier: lV9XOnwce5QTfCqwlGlr7/xKoy3k6HMJjTxM3psO8mg=
Subject key identifier: 58:72:FF:9C:58:20:C7:B4:48:7D:F2:BE:C8:38:89:4B:D2:7D:8C:64
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01850674737D92F574C6DEBACD5BBE580A05
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/WHL_nFggx7RIffK-yDiJS9J9jGQ.roa
Signing time: Mon 12 Dec 2022 13:09:33 +0000
ROA not before: Mon 12 Dec 2022 13:09:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:06:74:73:7d:92:f5:74:c6:de:ba:cd:5b:be:58:0a:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 12 13:09:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5872ff9c5820c7b4487df2bec838894bd27d8c64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:2e:bd:ac:a6:75:1a:0f:58:85:0a:bd:c5:0c:
d1:1d:30:c8:d6:12:62:37:ae:4b:fe:0d:aa:2a:9e:
2a:22:05:46:e2:89:4c:01:3c:9e:ec:1a:ff:44:e2:
4c:4b:ee:83:5c:20:b9:fe:5e:e5:b2:0b:6b:08:c6:
c8:8b:5a:a5:d8:09:9a:1e:4b:36:26:55:e0:0c:ca:
37:47:f4:23:bb:4a:c7:00:0c:6e:79:16:12:06:d6:
48:56:9e:88:80:fc:ae:ef:b6:66:3b:35:17:50:be:
bb:7d:d6:b2:f9:46:e1:7f:20:5c:87:b0:f5:a1:72:
03:68:34:6d:0c:69:4a:26:1e:62:76:45:ec:df:55:
0f:bd:8a:63:1a:0c:52:15:db:2d:3b:66:ca:4e:51:
52:83:be:40:a8:57:b4:b4:73:f3:f1:92:d7:b2:bf:
f7:82:a1:a1:2b:6d:9d:ee:6d:dc:84:5d:bf:56:73:
44:76:cb:c3:3a:08:05:aa:d3:2e:dc:5c:d5:b3:e9:
75:d6:13:f5:0f:a7:ec:9e:ad:4c:4a:a0:ff:ea:92:
8b:1c:56:29:3e:3d:fc:3a:a1:87:8d:7c:82:58:50:
9e:94:f4:c7:f3:8a:1e:50:93:61:b7:c3:77:ce:d6:
8c:b2:63:c5:8d:f5:cb:db:16:a2:fc:73:55:e0:76:
bb:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:72:FF:9C:58:20:C7:B4:48:7D:F2:BE:C8:38:89:4B:D2:7D:8C:64
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/WHL_nFggx7RIffK-yDiJS9J9jGQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
ae:9c:9e:79:1f:d7:8b:17:41:d9:de:dc:66:8d:2a:55:b1:13:
ac:b8:9b:31:b9:95:c1:56:76:86:7f:61:31:ac:25:8a:e3:24:
d6:1b:52:52:80:87:ee:38:ce:cd:6d:6d:21:26:2e:cc:59:62:
7f:6d:4c:9a:25:e7:12:8f:e9:84:a8:a3:d4:ba:9f:74:b3:dd:
3a:0a:33:4d:40:ac:62:35:81:e4:c7:c3:06:9d:c0:80:80:81:
e3:73:9e:9e:2e:ee:81:c1:16:69:07:01:01:93:24:a9:f1:98:
73:2a:9a:62:66:a0:2a:4d:f6:c3:24:64:8f:89:38:82:31:db:
c3:ff:db:a2:12:d2:ca:fb:92:1d:cc:ea:9a:7c:2a:b7:30:2d:
bf:67:fb:e3:d9:e7:2f:0f:74:19:3e:0d:0c:4b:ac:d4:ec:c9:
37:76:a8:0c:07:5e:a5:fa:3e:b2:82:88:68:e8:1f:f3:ee:93:
6f:94:af:53:50:0f:df:89:a4:42:84:f7:c3:85:53:02:d3:3a:
c0:f7:ff:aa:b5:fa:91:7e:7a:d7:9e:21:5b:bd:70:97:b8:3b:
67:29:f9:78:8e:1c:30:01:90:4d:76:44:45:67:30:6c:50:bd:
91:ee:9d:19:91:80:07:48:49:1d:da:86:b0:63:3f:e2:44:53:
9b:b0:f7:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 12:52:44 2025 by rpki-client