Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Wk_SO5wikICGhSa6m9QHJpZQc88.roa
File: Wk_SO5wikICGhSa6m9QHJpZQc88.roa (raw, json)
Hash identifier: Jn840sCJLhSTaOns4DR/pwdYHZkfpfEZDs9zIk4r5d4=
Subject key identifier: 5A:4F:D2:3B:9C:22:90:80:86:85:26:BA:9B:D4:07:26:96:50:73:CF
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 787574D7
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Wk_SO5wikICGhSa6m9QHJpZQc88.roa
Signing time: Mon 04 Apr 2022 19:12:03 +0000
ROA not before: Mon 04 Apr 2022 19:12:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2020963543 (0x787574d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 4 19:12:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5a4fd23b9c229080868526ba9bd40726965073cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d0:a2:f2:93:ab:85:c4:d5:3c:5a:fc:8d:7c:
70:82:66:8e:e5:5e:cf:b7:e4:06:97:32:66:a0:a2:
97:81:0b:73:ab:36:05:37:64:fc:ff:e9:aa:a1:40:
98:cf:9a:c9:dc:9a:c2:fc:e7:70:b7:a7:7a:19:0c:
9b:c6:2e:fe:71:eb:b1:72:54:88:a0:e2:ca:69:53:
c9:65:32:96:fa:00:33:2d:b5:40:61:35:27:e8:a7:
28:76:46:7b:22:41:f1:8b:52:d7:0e:f7:6a:be:1f:
14:4b:9d:bb:9d:6a:01:31:fe:28:47:1d:9c:dc:93:
21:74:4f:91:8f:ce:40:83:91:38:fb:f1:a1:b4:aa:
aa:b4:c8:8e:4a:0e:70:92:bd:b0:0c:75:f3:3f:4a:
5c:42:3a:c8:2c:ef:b3:bc:c8:1b:9e:57:5e:59:c3:
28:30:d6:f6:e8:97:b5:79:8b:d7:32:9a:77:b5:0d:
fb:96:79:31:b0:bc:7a:15:19:a6:c9:fb:44:66:f3:
f7:f5:a9:20:28:bd:a5:77:0c:f1:d7:ef:47:69:92:
2f:80:a7:61:a5:6d:05:07:34:b1:12:4e:fd:13:04:
ab:e0:2c:89:9e:6e:3f:0e:53:81:1a:3e:d5:93:74:
07:bd:5e:bd:43:69:21:65:e9:69:91:7d:2c:6a:07:
e2:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:4F:D2:3B:9C:22:90:80:86:85:26:BA:9B:D4:07:26:96:50:73:CF
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Wk_SO5wikICGhSa6m9QHJpZQc88.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9d:eb:42:d0:83:46:f7:24:ff:d6:fb:f4:97:91:ad:70:cb:c7:
46:5e:91:63:23:64:82:48:66:10:5a:3b:35:42:26:d5:97:38:
ee:e5:e2:8a:e5:4c:e8:97:b5:29:c6:c4:7d:35:bd:dc:e1:a4:
18:af:f9:9f:74:d4:87:60:fa:6f:97:f3:e2:39:00:e9:a1:3f:
67:4f:88:5c:06:b5:78:8c:91:f6:84:98:99:d9:61:75:2b:62:
cc:78:b6:ac:9e:e5:11:24:46:79:ab:a2:6d:d4:2b:aa:16:81:
78:d0:72:15:03:5e:95:33:b9:b0:82:19:75:5d:a7:c6:f6:67:
9c:f2:4a:33:ed:92:00:7b:29:6e:1b:ce:53:38:40:fb:dc:06:
f7:20:88:08:2a:b8:ba:d2:fb:91:e6:8b:d1:c2:5d:7e:d5:a6:
bc:6e:6f:ed:6c:f1:60:91:fc:d3:74:f5:2b:9e:c6:b0:85:b5:
3b:2b:2c:3c:da:3a:f0:8b:11:47:00:5c:de:89:81:f2:f0:a6:
8f:67:ac:34:c6:0e:b2:52:08:1d:89:61:cf:ad:4e:54:28:94:
fe:d3:ce:75:6b:4d:d8:6d:aa:d0:1f:1f:dc:4a:a9:b5:32:3b:
ee:15:a6:5d:7e:6a:69:19:fc:2a:48:45:c4:22:50:b5:cb:3d:
08:60:fd:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:13:32 2025 by rpki-client