Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/WNNrZn6mJmLkwcG5qu6Q5tuGm24.roa
File: WNNrZn6mJmLkwcG5qu6Q5tuGm24.roa (raw, json)
Hash identifier: y2GWoN+Y8u+nAaiScT/CGjS9UbNID/aF1bfH0FZ/3xY=
Subject key identifier: 58:D3:6B:66:7E:A6:26:62:E4:C1:C1:B9:AA:EE:90:E6:DB:86:9B:6E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185EAF9BBE5FDBB4F92479A16E932D5A8DA
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/WNNrZn6mJmLkwcG5qu6Q5tuGm24.roa
Signing time: Wed 25 Jan 2023 22:08:33 +0000
ROA not before: Wed 25 Jan 2023 22:08:33 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:ea:f9:bb:e5:fd:bb:4f:92:47:9a:16:e9:32:d5:a8:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 25 22:08:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=58d36b667ea62662e4c1c1b9aaee90e6db869b6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e2:64:e1:66:77:ac:58:83:4f:36:6e:68:ab:
2f:3e:08:97:43:d5:d9:15:2c:a1:0f:fc:f5:ec:5e:
e3:3d:c3:58:a6:56:70:09:a8:c4:d5:45:2b:7d:7e:
cf:b3:16:7d:e6:a3:71:ee:90:84:47:3c:02:ea:57:
28:6c:98:c7:b5:a0:eb:7b:19:3e:5a:be:3d:46:32:
84:7b:94:b7:5f:5d:a7:64:b8:89:c5:95:ba:00:80:
d7:47:02:17:e1:ba:0b:31:18:61:f3:16:d5:8e:fc:
aa:c3:8e:2f:5a:5c:5c:15:1d:a0:9e:0b:c5:ff:f4:
1b:c5:80:85:17:51:88:12:fc:e3:ed:a6:2f:d3:05:
36:b4:8f:ff:20:b8:4b:e6:63:c4:c0:89:8d:6d:19:
a8:71:7d:a2:30:24:cb:a2:7e:11:4a:97:d5:52:50:
b8:a1:60:65:4b:d8:b6:c0:6b:99:4f:b3:6c:90:3f:
82:d8:ff:58:d8:b9:74:a0:88:8a:12:cd:68:e8:5e:
53:c8:e4:80:ca:56:e1:72:45:77:6e:b2:95:93:af:
32:43:52:6f:d8:6d:63:73:c8:cf:11:1a:74:39:a0:
8c:49:23:c7:a3:44:c8:93:81:54:06:c8:23:2d:f7:
fd:05:46:0b:1b:d8:ba:1f:4f:b8:63:7a:f0:73:62:
6e:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:D3:6B:66:7E:A6:26:62:E4:C1:C1:B9:AA:EE:90:E6:DB:86:9B:6E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/WNNrZn6mJmLkwcG5qu6Q5tuGm24.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1c:d5:b3:7f:d3:b6:7b:e8:0d:6f:e5:f5:6d:d3:50:4f:2e:5b:
f6:b7:ac:d1:1a:f2:62:bf:21:f0:2b:6c:d9:28:ec:6a:86:6a:
44:57:54:65:e2:06:ab:f6:e2:b6:ec:85:b7:95:4b:95:f2:e8:
f4:86:05:5d:e0:94:88:09:a7:eb:b9:77:1f:09:25:28:df:a8:
ea:74:0e:74:71:ba:fc:ef:b5:a3:a9:ab:ee:be:9e:90:72:70:
1c:09:7d:61:96:50:49:ac:7a:5a:a7:1a:c2:d0:ef:21:66:4b:
1a:11:2d:83:c4:1c:9b:d1:99:8d:89:47:c7:67:59:ea:c8:60:
3e:ec:d2:e8:fa:58:0d:9c:02:f5:8d:5c:47:ce:6d:27:7f:31:
10:28:ff:81:b2:56:ab:f1:aa:5d:8c:6d:9d:83:3b:59:a4:ad:
a5:aa:5c:c3:53:30:79:99:a4:30:10:5b:b0:bd:e6:03:31:b5:
46:8e:d9:4c:33:b8:18:23:97:66:e7:e9:18:54:cd:37:ef:c6:
dc:c1:ec:4a:70:58:b1:31:1d:b8:43:a5:91:c0:d2:c6:c4:55:
5f:59:6d:2f:1a:c4:47:bd:7c:34:5e:d3:38:49:dc:2d:fe:c8:
10:fb:c0:0e:62:c6:84:d4:aa:75:6f:90:f9:7a:2c:a2:4f:82:
64:ad:91:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 09:40:47 2025 by rpki-client