Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cww3-LFdNOAL5CpZYW6Vtnt3150.roa
File: cww3-LFdNOAL5CpZYW6Vtnt3150.roa (raw, json)
Hash identifier: oj877/t3dPrm71AKLCqs4o9928RFSOeAa0i2eAhUZKU=
Subject key identifier: 73:0C:37:F8:B1:5D:34:E0:0B:E4:2A:59:61:6E:95:B6:7B:77:D7:9D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01875C44257219C0F9475D2131D87734C8E2
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cww3-LFdNOAL5CpZYW6Vtnt3150.roa
Signing time: Fri 07 Apr 2023 15:09:42 +0000
ROA not before: Fri 07 Apr 2023 15:09:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:5c:44:25:72:19:c0:f9:47:5d:21:31:d8:77:34:c8:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 7 15:09:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=730c37f8b15d34e00be42a59616e95b67b77d79d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:bb:fd:ca:4c:d9:f4:84:a7:3a:c4:0a:cd:cf:
00:bd:8e:50:0e:de:d3:c3:4a:e0:0e:17:8a:7e:6c:
c5:9b:eb:e2:ad:44:95:ad:7a:db:71:b5:c1:a5:4c:
93:48:ed:ff:c9:03:ca:09:38:cc:ca:51:c5:7e:d6:
b2:25:8f:d9:b7:ef:8a:41:c6:e4:82:e4:61:d4:13:
b2:1d:b5:0a:98:d2:e7:97:27:15:7d:98:ed:9f:19:
32:f4:3d:59:57:49:24:74:e1:66:13:cc:9b:4e:1a:
b0:b8:65:75:11:b0:ae:4f:04:c4:26:91:b8:47:57:
f3:4b:03:02:2f:32:98:2c:21:07:0b:cc:08:58:8f:
04:30:6f:16:6b:eb:2e:b6:fd:89:a8:0e:fe:d8:dd:
39:f4:55:d2:9d:53:80:fb:7b:51:8b:7a:47:0f:d2:
f7:ee:df:9e:28:5c:ef:86:3f:32:b0:5e:f4:7b:64:
10:74:45:ed:69:06:cc:c4:b2:3b:01:87:37:c2:b6:
e1:86:18:d3:ab:3e:04:10:96:92:d6:64:89:8d:0f:
11:eb:24:6e:ea:74:f9:ef:cf:25:f1:2a:40:10:43:
f8:e2:eb:e6:dd:77:09:fc:a9:1d:64:52:42:68:f3:
95:c0:4d:62:8a:85:86:c7:b7:00:9e:a5:35:65:0c:
26:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:0C:37:F8:B1:5D:34:E0:0B:E4:2A:59:61:6E:95:B6:7B:77:D7:9D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cww3-LFdNOAL5CpZYW6Vtnt3150.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
76:5a:6a:af:e6:b1:14:77:c7:7f:94:e3:bc:96:c9:6d:fa:fa:
20:5d:0d:4f:87:83:01:97:77:b4:5f:15:d7:3a:32:fa:44:20:
4c:20:30:18:69:28:58:c7:22:d7:ae:f2:7e:a4:a3:52:f9:5d:
b2:fa:a6:68:4d:c2:23:27:a4:31:2a:2d:3c:4e:17:c3:80:c0:
f5:2e:a8:ad:ba:d8:da:93:7b:96:1e:e4:d8:74:43:81:74:08:
96:1a:82:df:57:06:21:fb:50:a8:89:ea:e4:84:10:85:e5:4b:
8f:71:87:40:37:2e:3e:8f:87:66:f0:7c:8f:89:a2:80:c4:35:
5a:11:e5:ee:1f:bf:97:b9:37:f3:cb:b8:cc:fd:8f:c7:07:ac:
2a:4a:69:2a:30:29:01:d5:53:99:6c:67:ed:9b:a7:ac:c5:6d:
e6:69:25:01:1f:0f:46:e1:f7:7a:ca:1b:b1:64:83:97:2c:c4:
98:ff:8b:12:a0:09:d9:51:cb:fd:4b:c1:5a:0b:27:60:81:4e:
95:f4:45:18:27:d2:8a:7b:22:61:ce:b4:cc:81:ef:79:6c:87:
51:cd:b6:2d:d7:ea:6d:d6:d4:40:88:68:91:61:5f:59:4c:17:
3b:d4:c1:c9:a6:f8:e2:45:7b:2e:4c:16:e5:7e:29:9e:4a:06:
75:ec:9f:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 00:40:54 2025 by rpki-client