Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/WTgjRCD7kkcMFR7vFt26xMc64IQ.roa
File: WTgjRCD7kkcMFR7vFt26xMc64IQ.roa (raw, json)
Hash identifier: qR2PYqrDGyLwmaI5bw9PeBLwmCBC2U0BLmppkbRq/0k=
Subject key identifier: 59:38:23:44:20:FB:92:47:0C:15:1E:EF:16:DD:BA:C4:C7:3A:E0:84
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 840D0FDE
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/WTgjRCD7kkcMFR7vFt26xMc64IQ.roa
Signing time: Sat 14 May 2022 19:09:40 +0000
ROA not before: Sat 14 May 2022 19:09:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:180:a810:6542/128 maxlen: 128
2001:67c:64:ffff:0:180:466e:42dd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:8961:505f/128 maxlen: 128
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2215448542 (0x840d0fde)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 14 19:09:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5938234420fb92470c151eef16ddbac4c73ae084
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:3e:83:36:16:5d:7f:9f:73:50:fb:67:33:cd:
97:c0:2c:75:7e:1c:51:3c:e9:ca:82:52:12:20:40:
7c:59:48:a5:2c:21:44:1b:43:c5:47:b7:5a:55:45:
87:e3:a8:05:4a:ab:84:27:9c:4c:cd:1c:fd:3c:54:
7e:a0:30:1c:6e:47:26:e7:67:41:c7:38:51:35:cc:
bd:a1:b7:cf:1b:30:2d:a4:f1:c1:90:9a:55:77:77:
e3:7d:32:0f:0a:e3:f8:5f:eb:15:e8:dc:04:7b:9b:
ec:9e:f3:4a:d3:a2:db:ab:69:af:97:b1:65:78:05:
4a:13:e5:91:92:cf:6b:71:5b:c4:83:22:4a:1c:8a:
ab:b0:10:58:df:12:0b:67:27:ad:4a:7c:f6:70:8b:
f5:73:2e:91:6d:f7:a2:2b:73:01:c2:d8:d2:12:c7:
76:3a:2f:0f:aa:d2:d0:31:d9:fd:c4:06:92:4a:4b:
09:38:c4:bd:f6:16:8e:9c:c5:37:d6:ef:20:c1:d5:
28:e7:8e:b5:f2:d5:8b:9d:9d:30:65:67:92:5c:c4:
cd:13:75:6c:59:50:ae:2e:34:81:22:7a:36:fc:2f:
a4:64:81:08:41:08:cb:7f:f6:d2:24:bf:63:4c:a7:
27:48:d2:ce:59:9c:1c:89:cd:50:79:96:e1:bd:d8:
a6:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:38:23:44:20:FB:92:47:0C:15:1E:EF:16:DD:BA:C4:C7:3A:E0:84
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/WTgjRCD7kkcMFR7vFt26xMc64IQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1d:43:97:69:85:30:6f:78:06:eb:3b:80:1f:a8:8b:c1:a1:6a:
70:cc:d0:09:f7:e2:f3:86:e6:c6:2a:8e:af:fc:22:51:e5:dd:
d1:9d:dc:35:8e:d3:be:6e:de:9d:ef:9c:9d:35:3f:28:8b:fc:
cc:d5:b4:02:d1:3a:41:42:50:08:46:01:2a:54:74:b7:2f:1d:
d8:89:00:5a:4e:ac:11:4b:b8:6a:ab:73:a8:d4:6b:1b:56:4e:
7a:61:e6:e4:31:c3:3a:b8:93:13:8f:8e:ba:06:5d:76:d9:13:
de:59:9b:ed:82:fe:54:47:c1:34:d5:9a:87:45:af:14:6e:f7:
5e:ba:e3:53:83:19:3f:02:b7:ac:e1:14:a9:e8:a1:54:98:e9:
85:85:5f:8b:79:59:d7:41:4f:cf:09:65:3e:d8:e8:79:05:a9:
9c:db:85:24:45:0b:d6:ce:6c:7d:8e:6f:72:21:62:e6:94:5c:
9d:76:80:a2:5a:40:3b:32:55:66:16:17:0d:76:cf:d1:4a:cc:
71:bd:9f:1a:68:5c:f9:d2:04:26:a8:35:8c:85:80:30:3e:0e:
39:ca:fc:ba:55:94:df:58:66:c9:2a:98:66:16:d5:13:10:79:
9d:f4:3a:9f:53:a8:cc:be:6d:04:80:69:27:ba:06:f5:24:1c:
96:24:4b:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 15:39:58 2025 by rpki-client