Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/WqbcNgq5OyH8lnb5k0YPLkAVdfc.roa
File: WqbcNgq5OyH8lnb5k0YPLkAVdfc.roa (raw, json)
Hash identifier: m06qLlQyCstm9cHfcPAM/NprmwB4ZHdQK2C09bJ0POU=
Subject key identifier: 5A:A6:DC:36:0A:B9:3B:21:FC:96:76:F9:93:46:0F:2E:40:15:75:F7
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018538B091BA9ADE4C1CC4A1B77A4661E681
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/WqbcNgq5OyH8lnb5k0YPLkAVdfc.roa
Signing time: Thu 22 Dec 2022 07:16:13 +0000
ROA not before: Thu 22 Dec 2022 07:16:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:38:b0:91:ba:9a:de:4c:1c:c4:a1:b7:7a:46:61:e6:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 22 07:16:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5aa6dc360ab93b21fc9676f993460f2e401575f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e7:7c:69:8e:6c:6f:8a:09:f7:8b:4e:ca:b3:
06:34:de:2d:55:38:5d:65:3b:27:ec:c5:6e:08:f8:
56:fa:d9:71:32:7d:9f:3a:83:b6:45:e0:6c:a5:10:
f1:ee:9c:c2:29:37:78:60:67:7a:0d:c3:da:1f:0a:
99:53:44:f3:b2:85:fa:aa:8f:82:9e:d5:c3:01:19:
36:a4:19:c3:f3:b4:68:45:82:d7:0b:06:91:37:2a:
e0:e8:8f:86:a7:42:54:e1:0e:7a:d7:ce:3a:a9:13:
3b:9f:75:ca:9e:4b:c1:bb:8d:5c:06:8b:4a:c2:50:
2d:1c:64:67:31:7e:d2:80:1c:20:db:09:8e:3b:aa:
04:6b:88:79:e4:fc:a4:e7:99:b3:2b:5e:8c:74:b0:
52:73:5f:ec:cb:b6:5e:54:c6:97:38:c1:1a:f8:df:
ac:b3:38:af:0f:43:3c:ca:81:ea:73:e1:0a:84:1e:
0f:e7:d1:ba:82:0c:46:60:88:2a:c2:43:01:e4:fe:
e6:fa:7d:85:41:d8:d9:db:fa:c6:1f:9e:41:62:b3:
4c:b6:45:f3:47:d9:79:26:63:4a:19:4f:9d:a7:2a:
02:fb:3f:d3:fd:79:2d:dc:44:41:25:59:c7:d4:80:
23:97:30:f3:53:a4:b8:12:19:d2:47:24:80:66:c6:
57:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:A6:DC:36:0A:B9:3B:21:FC:96:76:F9:93:46:0F:2E:40:15:75:F7
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/WqbcNgq5OyH8lnb5k0YPLkAVdfc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
34:28:0e:e5:34:3e:ab:32:36:71:9c:76:7f:6d:18:04:f0:8c:
32:15:a9:05:1a:d1:4f:11:cb:0c:9c:b5:0f:8c:84:18:bf:48:
ed:b7:43:ba:61:7d:30:b8:57:e3:b4:d3:20:97:ea:76:9c:82:
c3:ef:f5:6b:3f:25:e9:6c:a3:02:f5:a2:79:79:17:8a:89:4c:
55:36:9f:f3:ad:ac:f3:c0:22:83:c3:8a:0d:d4:4d:bf:f8:46:
34:ce:f3:02:ea:50:b9:3d:4b:e1:60:e8:92:9f:68:45:ec:f9:
a3:c8:f2:a9:04:6b:8d:e2:54:ba:ae:b4:d9:5b:1f:cc:4f:7a:
18:1e:94:a4:6f:a7:7e:07:04:25:66:67:8e:e8:51:1d:6e:70:
e5:88:7e:5d:fd:1b:49:d4:19:81:04:42:01:14:df:63:01:54:
c5:74:46:07:9c:2c:7f:46:cd:d9:2a:9e:fa:09:d4:ff:7f:3b:
36:db:75:25:da:7d:72:f8:a2:62:4f:4e:e7:28:18:19:fd:06:
47:6c:a5:21:7e:94:8b:72:cf:bf:4c:a1:ab:6e:df:e5:42:e8:
b5:02:b9:7a:dc:9c:d5:2a:db:36:3f:be:4b:4d:35:a9:b8:58:
84:e1:1a:ee:e9:8b:47:39:68:75:21:23:40:7a:02:6f:af:02:
c1:56:ed:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 00:09:19 2025 by rpki-client