Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Wjr30k5ELddLnNPwfhwBT1MJ-ok.roa
File: Wjr30k5ELddLnNPwfhwBT1MJ-ok.roa (raw, json)
Hash identifier: WfaMtBHRQ3YvYeSPMvAzM2tSiKAdL5GlNnrFfGrI+SM=
Subject key identifier: 5A:3A:F7:D2:4E:44:2D:D7:4B:9C:D3:F0:7E:1C:01:4F:53:09:FA:89
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186654971DDD8795564BB56031DB5019052
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Wjr30k5ELddLnNPwfhwBT1MJ-ok.roa
Signing time: Sat 18 Feb 2023 16:09:17 +0000
ROA not before: Sat 18 Feb 2023 16:09:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:65:49:71:dd:d8:79:55:64:bb:56:03:1d:b5:01:90:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 18 16:09:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5a3af7d24e442dd74b9cd3f07e1c014f5309fa89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:ed:8e:5f:85:42:dc:a9:42:79:64:52:d4:8f:
b5:4c:e5:a2:e0:83:71:3b:27:f6:fd:82:5f:6a:00:
70:c8:08:7f:f5:c9:4d:ef:2f:0e:37:87:90:cc:5f:
ba:0a:ee:a6:8b:c6:f3:69:42:f8:76:d8:f4:ac:8e:
82:f0:d1:f0:5a:76:c1:3d:f6:fb:83:1b:ad:ce:6e:
95:64:00:e3:cf:71:5e:ef:20:46:67:56:94:29:07:
e5:14:9b:fe:dc:55:ee:e6:45:b9:09:d0:26:5b:10:
db:71:4d:2c:71:bb:d7:a7:22:d5:84:b3:a5:32:1a:
15:d2:6d:b1:62:8e:0e:33:23:1e:3e:f5:88:b8:98:
37:b9:54:ad:df:69:ea:88:68:14:e7:62:98:5a:dc:
5f:79:8a:f4:89:4d:1f:24:55:50:39:2e:79:e9:fd:
55:16:42:ce:01:9d:aa:2c:19:e2:1d:29:21:9d:4e:
ab:be:0a:47:29:ff:da:3f:99:ba:4b:a4:b0:0c:45:
9c:2f:58:4f:f2:03:b6:fb:98:62:2c:44:14:e0:4c:
61:17:bb:20:8c:e7:a2:15:c0:1f:ce:f5:0f:ae:37:
23:2b:8b:b4:07:75:46:8a:c5:7c:de:30:2b:3d:b1:
08:c6:27:a2:e3:9d:5a:90:b5:b3:4e:13:f5:04:1a:
e6:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:3A:F7:D2:4E:44:2D:D7:4B:9C:D3:F0:7E:1C:01:4F:53:09:FA:89
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Wjr30k5ELddLnNPwfhwBT1MJ-ok.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
90:3c:63:7a:44:59:47:9f:b4:47:2a:71:c4:09:2f:33:95:e7:
b9:06:49:15:2e:ae:69:4a:a5:83:23:ac:b9:2a:0d:3c:a2:51:
d8:32:03:e8:8f:37:af:ff:ce:26:ae:1d:85:15:01:d3:fe:27:
de:56:3e:1d:b4:09:1e:ac:c1:f4:a6:04:6d:12:56:26:e1:97:
58:67:e8:f5:96:e3:4d:f7:14:47:3a:72:f5:28:38:6b:45:33:
e8:a4:94:10:23:17:85:3c:e9:77:81:c7:bb:f5:2b:a7:ae:82:
63:70:0a:c8:1f:61:0d:7d:77:4d:9d:fd:7c:e5:64:28:68:3c:
07:5f:f8:db:ed:0d:30:8e:95:98:79:24:bd:fe:c3:4d:1f:30:
7e:5b:5c:f5:0e:b0:41:c3:f9:27:48:12:28:59:58:5d:80:40:
7b:79:ec:5b:ff:42:48:37:ec:a1:27:2c:b1:02:35:1f:59:65:
be:a2:cf:c3:4b:a2:d2:ac:73:0e:38:3b:39:06:9d:08:70:69:
e1:86:8f:a4:4f:a8:95:d1:e4:b2:5f:cd:d3:69:94:ea:bf:d0:
78:42:aa:3e:31:bf:98:ec:ed:85:88:c1:0b:c0:ae:9c:33:56:
9e:71:c3:1c:ca:59:51:ba:a6:4d:31:5b:1d:26:ee:cf:b5:27:
99:89:61:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 10:12:37 2025 by rpki-client