Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/WkCmylntZF6FJhqWt-aYnhCrEnU.roa
File: WkCmylntZF6FJhqWt-aYnhCrEnU.roa (raw, json)
Hash identifier: eR6u+sBCM72fH7yQxFKrWEr6ura/mqEAcj05tXwPS+I=
Subject key identifier: 5A:40:A6:CA:59:ED:64:5E:85:26:1A:96:B7:E6:98:9E:10:AB:12:75
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0181DCDDF903B9FBC6308C5553B13A285011
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/WkCmylntZF6FJhqWt-aYnhCrEnU.roa
Signing time: Fri 08 Jul 2022 08:12:23 +0000
ROA not before: Fri 08 Jul 2022 08:12:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:dc:dd:f9:03:b9:fb:c6:30:8c:55:53:b1:3a:28:50:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 8 08:12:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5a40a6ca59ed645e85261a96b7e6989e10ab1275
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:e5:a2:92:9d:08:df:37:8a:4c:83:4b:c9:de:
cb:15:a4:f2:b9:2f:ea:13:b7:d0:2c:16:4f:00:dd:
50:14:f3:28:23:29:31:ab:a3:fd:ad:40:6f:73:1e:
1b:25:75:44:df:bc:f3:65:b6:bc:0a:c9:3b:54:eb:
e4:ec:42:95:bc:91:1b:c2:5b:cf:8e:3a:3e:7f:04:
43:3e:10:9e:98:72:e0:3f:a1:49:6a:aa:1c:06:c4:
2d:5c:34:62:fe:0e:97:09:21:6c:1c:6d:a0:ac:d0:
ec:3f:be:48:5c:15:a4:00:fe:e3:54:84:1d:5c:2f:
8e:33:f8:8d:7c:2f:2a:99:87:12:4a:af:3a:20:4c:
f0:64:a4:b0:a7:20:88:8d:28:d4:c0:b4:29:9b:87:
34:0f:c7:a2:c6:1b:56:46:3b:07:f3:02:86:29:2f:
91:8b:ac:37:c2:87:2e:b0:d5:12:86:f3:71:5c:5b:
86:e1:28:ce:d4:91:6d:b4:e8:3e:59:e0:05:04:e4:
56:c9:12:93:e0:93:41:36:60:4a:bc:ae:6d:5d:a0:
3a:3d:04:0a:f4:e5:2d:5b:ed:8c:45:73:a3:df:8d:
e7:30:1b:46:e3:a0:fc:d1:17:83:7d:97:9b:51:a2:
02:38:07:14:b6:0e:af:fe:c1:f5:26:25:73:03:91:
bf:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:40:A6:CA:59:ED:64:5E:85:26:1A:96:B7:E6:98:9E:10:AB:12:75
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/WkCmylntZF6FJhqWt-aYnhCrEnU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5c:7b:51:12:ed:62:ee:10:7e:d0:3e:be:dc:2b:4b:2f:da:15:
31:4e:eb:90:7d:1e:4a:93:96:5a:a6:6c:cb:d5:b7:43:ea:21:
a0:eb:fc:9b:d0:0c:e0:07:27:cf:57:d5:f7:11:13:d0:68:85:
2a:7e:d0:17:78:54:a9:ac:7d:41:8b:ac:03:ef:c2:f6:44:a6:
a2:68:f6:60:a7:cf:d9:b8:0b:f6:10:7e:f7:41:39:8f:06:a8:
70:fe:53:f8:2f:35:18:20:d2:70:0f:c4:ea:98:32:7b:84:30:
da:2c:0f:63:8e:7d:2f:f9:6f:75:dd:fe:7e:d5:d3:cb:78:40:
bc:0f:c1:15:cc:57:1a:74:ee:9d:37:81:94:1c:75:04:56:aa:
82:df:0b:31:e4:13:30:8d:2e:7f:c4:9a:93:d8:c3:fd:83:6e:
ce:e5:2f:97:bf:fe:c8:02:11:1f:b3:2a:9a:4a:13:9d:e5:a2:
1c:1d:75:de:de:d8:5f:2c:a6:5e:f9:59:c3:27:02:42:e0:ed:
02:d6:a9:d1:a1:c9:4b:a1:79:be:f2:b9:41:ab:14:7f:4a:60:
0a:6e:d6:aa:6b:1c:ae:9b:e0:8d:f8:0a:ed:3b:2c:fa:aa:05:
2c:60:c7:b4:9b:d3:28:c7:f4:2e:2c:ad:8a:21:75:e3:d9:76:
72:0d:fc:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 00:04:23 2025 by rpki-client