Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Wx4g3TNQoRt6-dYTn5YqVsMcblY.roa
File: Wx4g3TNQoRt6-dYTn5YqVsMcblY.roa (raw, json)
Hash identifier: tIiWs/2kfQL5ERHaWEX8o+dEftFT7oFhzuSLvcIOWHs=
Subject key identifier: 5B:1E:20:DD:33:50:A1:1B:7A:F9:D6:13:9F:96:2A:56:C3:1C:6E:56
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0181DA49DFD62F428C088F392616E61869CC
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Wx4g3TNQoRt6-dYTn5YqVsMcblY.roa
Signing time: Thu 07 Jul 2022 20:11:23 +0000
ROA not before: Thu 07 Jul 2022 20:11:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:da:49:df:d6:2f:42:8c:08:8f:39:26:16:e6:18:69:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 7 20:11:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5b1e20dd3350a11b7af9d6139f962a56c31c6e56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:50:ee:65:28:31:18:2d:44:05:0f:2a:55:c3:
d3:c4:19:42:3c:cf:da:5c:69:a7:c6:f8:03:93:17:
e6:43:c5:c9:06:37:6e:1f:00:d7:84:01:a5:0a:f6:
b7:83:f4:a1:fe:e8:c1:f0:e2:a1:5f:6b:26:bb:85:
00:4b:37:e6:69:b9:cb:d6:9f:d5:b0:08:04:6f:48:
0b:79:d6:08:c4:23:d1:74:3f:87:2d:a1:71:a6:89:
37:9c:f1:91:22:2d:99:01:c6:ac:91:c5:ed:e9:9f:
fd:c6:fe:be:67:ce:f0:61:92:3e:44:6f:34:19:0b:
30:14:6c:2a:a3:af:c1:37:4c:ed:22:d3:14:16:4d:
05:a0:9e:6d:b6:a1:03:25:21:5c:c4:3f:e1:a5:a8:
56:1c:58:90:73:f5:11:79:cf:eb:dc:82:df:14:f7:
c0:d0:f4:89:1d:4f:49:ae:48:c3:49:a3:b2:4c:1f:
1f:16:d3:4e:ac:6f:af:82:e5:15:5e:ae:9f:0b:2d:
5f:a8:b7:ff:df:7e:cb:1e:f8:86:f0:4d:d8:d0:9a:
51:e0:ba:e5:6a:eb:20:a5:c9:5c:06:c7:54:98:65:
34:df:6d:cc:6f:ee:a2:75:83:40:5b:0f:5b:1e:de:
86:1f:2a:77:2e:c5:a0:86:1a:39:69:85:b0:4f:5c:
57:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:1E:20:DD:33:50:A1:1B:7A:F9:D6:13:9F:96:2A:56:C3:1C:6E:56
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Wx4g3TNQoRt6-dYTn5YqVsMcblY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
40:ac:4a:4a:0e:0f:4d:20:1b:eb:fc:a9:63:c9:fc:e9:a8:06:
38:73:f4:f9:4e:9b:79:f7:90:f3:6a:c6:1e:16:e6:39:a1:0a:
9d:aa:10:c7:61:6c:be:bf:36:fd:5f:c7:49:a0:00:15:4e:74:
29:e1:94:17:b9:be:ac:09:af:bf:93:3a:7d:77:cc:fa:02:aa:
5d:2c:c7:cb:ef:b1:35:f8:ee:e2:69:4b:5b:6c:03:8c:4d:d6:
fd:f0:53:c4:6b:f5:89:54:83:3a:36:7f:2d:36:d1:ae:f8:93:
f4:18:77:0c:f7:86:5a:48:e0:bb:c0:9d:17:5f:ee:f3:1f:4a:
e4:d9:2d:0c:f5:4d:d9:3d:5e:02:7b:04:da:80:0a:34:ac:6d:
7b:3b:02:25:8b:0d:c1:7e:5b:57:f2:ad:68:2c:d7:72:7e:b0:
1e:3c:51:c7:8d:49:58:cc:1f:b5:dc:10:06:c1:b1:4a:80:40:
49:22:a7:2e:fc:b2:bd:b4:15:8a:34:36:49:33:38:17:86:58:
73:e2:44:ca:e7:09:eb:a0:f9:c2:78:51:52:9d:8e:5b:24:6b:
27:e9:10:bd:8d:d4:d2:4a:a0:2c:b2:d4:a1:98:ac:5f:19:02:
ce:ff:e8:1c:03:3a:60:8e:dc:ae:e3:1b:0d:56:f0:53:bf:ba:
f4:33:7c:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 05:07:00 2025 by rpki-client