Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Wa03f-94iCNfZEIcHQlep9su8UA.roa
File: Wa03f-94iCNfZEIcHQlep9su8UA.roa (raw, json)
Hash identifier: tx6L9lIQXzzqvUEWlNHQCOwXpWe/hzI1TUAIlrxhdTw=
Subject key identifier: 59:AD:37:7F:EF:78:88:23:5F:64:42:1C:1D:09:5E:A7:DB:2E:F1:40
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01854329A8DCEA781772A6BEDB482F3B7080
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Wa03f-94iCNfZEIcHQlep9su8UA.roa
Signing time: Sat 24 Dec 2022 08:04:41 +0000
ROA not before: Sat 24 Dec 2022 08:04:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:185:4329:1a4c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:43:29:a8:dc:ea:78:17:72:a6:be:db:48:2f:3b:70:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 24 08:04:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=59ad377fef7888235f64421c1d095ea7db2ef140
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:2f:03:69:99:cc:65:69:2a:e0:58:1e:59:6b:
81:2e:02:62:27:e7:9e:83:69:9a:58:c4:e5:45:5a:
0a:e4:0a:51:80:07:86:36:21:73:38:34:21:ab:83:
f9:1c:31:b1:a9:41:91:dc:45:12:3c:85:37:bf:2c:
db:bb:cf:67:8b:9b:9c:73:8e:2b:89:4b:1b:12:b0:
d4:4f:5a:d0:11:4f:c5:5e:9a:4e:9c:aa:8c:38:e5:
43:06:41:a9:8b:e6:3a:19:67:e6:ab:01:ad:a6:49:
fa:72:d0:c1:1d:3c:ee:2d:eb:78:b4:c6:59:c5:89:
cb:f6:30:c8:55:31:57:50:84:41:fc:24:e4:7d:83:
a1:30:ef:0d:cb:40:2c:68:1d:61:2f:91:32:61:a2:
f2:0d:01:08:45:4d:9b:13:80:d7:52:08:3e:1b:61:
0a:6d:56:76:4f:69:25:79:f5:70:6b:7d:ab:85:b8:
ba:fb:f1:7b:b3:21:c4:6f:98:7e:4d:1f:de:08:96:
41:dd:da:55:c7:0c:9f:26:36:03:7a:b5:99:d1:f2:
27:61:82:dd:d8:ae:2d:94:ef:95:0c:06:10:19:72:
87:ee:4e:ed:a4:b0:8b:96:aa:8e:8b:fb:da:89:d6:
80:7f:bd:5b:5a:18:d4:61:9b:56:17:b5:b9:45:06:
66:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:AD:37:7F:EF:78:88:23:5F:64:42:1C:1D:09:5E:A7:DB:2E:F1:40
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Wa03f-94iCNfZEIcHQlep9su8UA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
57:ec:5a:a8:0d:7a:a5:bd:a4:69:e4:04:10:7d:ce:2f:e5:4a:
5e:5c:81:92:b2:96:93:73:9a:9c:13:10:16:22:95:af:85:e5:
b0:42:15:65:b8:56:70:2e:98:61:7c:c1:a9:33:6a:cc:c8:a4:
8e:74:90:61:63:17:7e:a1:91:79:eb:9a:e2:37:82:72:a6:00:
96:e1:3c:a4:04:96:21:bc:a5:4d:25:35:2a:3b:85:e2:57:d8:
30:51:67:0e:2e:87:67:cf:e0:69:20:4c:0c:6f:26:bc:c0:a5:
f4:e5:45:f4:02:f0:77:85:26:91:a7:34:a7:63:ff:08:b9:e7:
7c:2b:b9:dd:79:b2:ad:9d:32:9c:a3:98:20:e4:3a:27:01:db:
95:95:47:74:7e:eb:aa:08:f1:70:ed:86:68:0f:c7:3e:41:76:
c8:78:79:5d:c6:b0:02:1f:97:e7:15:75:bc:9d:b6:2d:20:7b:
9a:ec:c3:70:25:66:81:55:ea:c2:93:e8:73:82:68:39:34:ec:
fb:1a:43:81:82:92:78:9c:24:fc:18:e9:04:09:f4:eb:1e:5d:
2c:e7:3d:89:44:9f:38:58:96:22:d1:9a:df:b1:e7:49:18:18:
d3:d4:aa:da:44:80:94:ea:cc:54:44:e4:3f:5c:c5:40:c0:60:
4e:b1:fb:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 16:05:06 2025 by rpki-client