Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/WpVFFvUCbdVd4ryrXNmAiC7rj5k.roa
File: WpVFFvUCbdVd4ryrXNmAiC7rj5k.roa (raw, json)
Hash identifier: 2TkpPupsVYQdVHwTpxeVjpcbbEtPHCMbgkOiq8sFUwM=
Subject key identifier: 5A:95:45:16:F5:02:6D:D5:5D:E2:BC:AB:5C:D9:80:88:2E:EB:8F:99
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01894FD1B9612B7C65368EF6A1B87138F71F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/WpVFFvUCbdVd4ryrXNmAiC7rj5k.roa
Signing time: Thu 13 Jul 2023 15:14:51 +0000
ROA not before: Thu 13 Jul 2023 15:14:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:4f:d1:b9:61:2b:7c:65:36:8e:f6:a1:b8:71:38:f7:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 13 15:14:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5a954516f5026dd55de2bcab5cd980882eeb8f99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:f4:ce:80:c9:89:29:2e:cd:1b:ea:7e:c0:0f:
17:40:ba:34:a2:ff:7b:93:34:fd:33:12:78:78:f1:
0d:25:72:6b:46:cb:f2:7d:1d:e4:e3:94:29:65:c8:
ba:e2:8f:7c:77:de:49:45:34:ed:83:37:38:d5:55:
04:82:65:5d:37:68:e7:bf:a9:7e:1d:6d:bf:c7:cc:
b1:79:10:b4:9a:09:80:c6:0b:d1:fd:04:d9:92:6f:
f4:77:88:8e:6f:ff:b5:cb:78:bb:78:09:61:87:41:
5c:21:8d:89:28:10:06:77:23:32:41:38:80:18:b5:
ee:9d:5c:dd:93:13:25:23:65:49:31:f5:58:a9:af:
2a:53:6a:cd:0b:2a:3c:b4:23:24:9e:50:44:20:99:
0b:d0:d6:dc:46:b0:21:25:32:bd:fc:e2:7c:fd:58:
c9:38:2a:b5:31:68:3b:87:5b:db:89:62:41:35:29:
4e:41:5d:2d:90:03:15:08:d7:7e:7a:11:5b:61:7c:
e0:1b:69:c1:40:8c:dc:67:6d:7f:6a:67:c8:e2:1f:
ff:1b:6d:40:54:54:c3:cb:2d:7e:45:ac:e9:1f:87:
c0:69:a3:da:23:b8:a8:8a:64:b1:16:cd:d0:65:15:
c0:8a:b3:10:04:13:be:a3:f4:a8:63:a5:15:36:8a:
34:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:95:45:16:F5:02:6D:D5:5D:E2:BC:AB:5C:D9:80:88:2E:EB:8F:99
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/WpVFFvUCbdVd4ryrXNmAiC7rj5k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a6:c5:e3:db:62:ff:b7:7f:fd:c8:de:51:56:8e:73:15:c6:7d:
b7:4a:a3:c6:9b:d2:f7:9a:1e:09:dd:c6:c2:a0:96:07:67:12:
cf:4b:f1:93:25:a2:38:86:62:20:fa:13:1b:fe:4b:b0:86:ba:
6b:6e:76:2d:43:f1:50:8e:25:65:9f:5b:52:44:1c:5c:5f:a9:
75:b7:97:df:45:1a:5e:0b:fe:0c:33:eb:f0:c1:e6:f2:be:7e:
4e:1c:64:67:78:40:3b:90:9d:66:33:e5:42:4d:80:ea:b3:1b:
ea:b5:a1:ec:be:f1:00:93:f1:58:9c:a5:16:aa:87:a6:90:b6:
37:ee:24:f7:29:bc:67:70:f9:95:1c:55:37:ae:c3:54:9b:fc:
5b:c6:07:87:75:19:dd:63:8b:6f:34:c7:87:9f:8d:1a:25:75:
1e:90:2d:c7:b3:20:b8:85:65:06:c5:4d:61:c7:88:a6:c7:cf:
26:57:fd:7d:6d:36:9a:40:4b:d7:f3:b5:99:9c:63:f1:42:a2:
04:c5:60:11:7c:02:8e:4d:6f:1b:7f:61:19:66:45:4a:55:51:
45:4a:0d:d2:79:b5:05:14:5c:7c:a1:7c:de:0d:f1:a1:ba:85:
7d:70:5c:a5:75:e4:51:e5:bb:44:fa:03:3c:a4:12:1e:3e:e2:
b4:16:17:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 06:52:29 2025 by rpki-client