Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Wocl2IcgB4DTMLgvxfow6SK-Qzw.roa
File: Wocl2IcgB4DTMLgvxfow6SK-Qzw.roa (raw, json)
Hash identifier: 93JpWrycgEfDdP9REXupHhuT0/E23IomJBv9jcwTqTk=
Subject key identifier: 5A:87:25:D8:87:20:07:80:D3:30:B8:2F:C5:FA:30:E9:22:BE:43:3C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 6A3E0E23
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Wocl2IcgB4DTMLgvxfow6SK-Qzw.roa
Signing time: Sun 13 Feb 2022 11:08:19 +0000
ROA not before: Sun 13 Feb 2022 11:08:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1782451747 (0x6a3e0e23)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 13 11:08:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5a8725d887200780d330b82fc5fa30e922be433c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:ca:31:d4:82:bc:ee:09:66:ae:26:d6:1a:49:
af:f9:3f:62:ba:5a:96:dc:71:c2:82:5f:bd:19:ce:
c0:2c:51:02:0c:f9:60:de:e9:25:55:fb:cf:cb:af:
3e:25:99:5b:d0:01:ac:56:7f:0b:c1:79:62:24:b2:
13:9b:45:52:f0:5e:50:e8:0b:2c:0d:4b:ef:a3:92:
16:ab:92:b4:3a:19:67:a5:a4:53:ac:d1:e5:a6:65:
b2:75:00:38:2d:8e:ca:ca:82:74:79:60:5a:db:74:
94:5a:0d:dd:69:78:c2:18:2d:d9:d9:21:d5:7c:b1:
18:b9:a8:cd:50:d0:b2:5f:30:36:ae:ae:20:99:d3:
9d:05:15:3b:8b:5c:e4:f8:ea:91:41:d6:41:f6:8f:
8d:85:7a:d3:60:a1:22:f4:1d:e5:82:a9:67:dd:56:
e7:e6:8a:4d:8a:5c:8f:ef:db:66:2b:ad:65:f5:7c:
10:42:21:9e:39:b6:bf:1c:e0:e4:25:ce:8b:b8:7f:
0f:8a:04:ab:9c:e0:db:5b:11:fe:50:2e:1d:83:ae:
33:6d:b0:52:b7:bd:20:a6:81:a1:2f:d0:a6:41:a2:
15:d9:e5:ff:f1:33:13:a1:2c:33:76:00:87:32:20:
71:c9:76:47:c1:be:9f:c0:b9:92:4e:88:af:6a:d0:
33:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:87:25:D8:87:20:07:80:D3:30:B8:2F:C5:FA:30:E9:22:BE:43:3C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Wocl2IcgB4DTMLgvxfow6SK-Qzw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
50:92:f1:a1:d6:18:13:05:1d:38:98:4f:49:4e:4b:3b:2f:12:
ef:3a:10:71:d9:33:a0:10:94:bf:02:1e:94:e8:7f:3a:98:41:
d0:86:40:fb:53:c9:fd:a7:0d:cd:f4:5e:40:c3:f8:ef:b8:0f:
32:dd:71:79:b8:94:b2:66:df:08:de:45:74:52:ac:5c:ad:21:
c8:19:50:e6:ab:67:d1:d1:8b:71:6b:3e:ee:fc:15:ae:c6:51:
66:de:6a:23:d8:cc:01:ff:a7:3e:93:8c:c7:b4:68:54:53:4d:
ef:e4:8e:8d:41:29:fa:dd:36:41:7d:e4:18:7f:9f:a8:a8:35:
d5:13:4a:34:fe:28:c7:67:b1:71:91:f8:15:fd:3d:65:55:f7:
87:8a:90:7a:9f:58:ad:56:11:e9:f9:80:53:f8:c8:14:96:2c:
8b:66:08:fe:f7:9f:f2:4d:d7:4d:3e:d4:0e:0a:dd:78:1e:c8:
bb:39:aa:d7:32:54:e5:a7:6d:38:9f:4b:04:3b:f6:d8:e3:f3:
76:95:cc:e4:13:7e:2b:d2:ab:b6:a8:b5:0f:2d:f2:18:b3:5f:
d1:d9:dc:24:0b:a9:68:4e:cc:10:56:ac:87:03:3e:fd:a1:00:
16:6d:06:ef:e2:75:25:e6:1c:1b:7d:f9:c7:ef:14:71:13:25:
d2:7b:ff:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 22:53:33 2025 by rpki-client