Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/w0bkrSIb5oen9Q68kUoI2kPLFD4.roa
File: w0bkrSIb5oen9Q68kUoI2kPLFD4.roa (raw, json)
Hash identifier: LQEYWb4kZWD60HWBWHhjdR0QAflV+Hpp6PWIm6DM5Bs=
Subject key identifier: C3:46:E4:AD:22:1B:E6:87:A7:F5:0E:BC:91:4A:08:DA:43:CB:14:3E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 7022B3DE
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/w0bkrSIb5oen9Q68kUoI2kPLFD4.roa
Signing time: Sun 06 Mar 2022 06:09:52 +0000
ROA not before: Sun 06 Mar 2022 06:09:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1881322462 (0x7022b3de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 6 06:09:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c346e4ad221be687a7f50ebc914a08da43cb143e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e1:80:77:52:6a:cf:9e:9a:d6:cb:39:43:2c:
d6:9e:53:04:1a:b7:a0:7f:7e:40:cd:ef:a9:0e:b6:
6a:54:a5:0f:0d:2e:ac:d7:09:1b:f7:7f:0b:a2:7c:
4c:4e:54:19:67:94:30:ac:6d:03:3d:b6:d6:61:17:
df:6b:7b:48:ae:12:7d:96:a7:bb:df:b3:67:2b:e2:
9e:2b:59:54:f3:0e:49:2b:8e:9d:01:a5:20:6f:3c:
38:e9:89:ca:f7:72:e6:cd:71:10:14:79:e7:98:97:
d8:09:02:c7:cc:d0:13:bf:db:85:74:2e:4a:50:52:
c7:7d:24:fc:bd:f4:48:91:3b:36:37:5f:29:50:f9:
91:02:a3:82:34:43:0f:50:44:b0:4e:86:9d:99:7d:
77:98:25:28:1a:c1:44:64:1f:09:4a:89:49:66:0b:
4d:a6:44:90:d2:63:0f:d5:94:f0:2a:fb:45:97:77:
b4:cc:1c:53:98:f4:1e:b7:86:4b:4d:1d:6b:2b:fc:
34:7c:b1:41:b3:3b:3a:f2:79:56:8b:62:60:48:d3:
d4:81:e6:55:d6:c5:81:4d:9a:f4:85:34:0f:95:b0:
1d:fe:32:48:94:bf:c1:03:86:18:c5:61:99:f7:dd:
20:7e:de:76:79:2a:2b:2a:14:09:94:11:f7:6d:1c:
d3:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:46:E4:AD:22:1B:E6:87:A7:F5:0E:BC:91:4A:08:DA:43:CB:14:3E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/w0bkrSIb5oen9Q68kUoI2kPLFD4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
ac:d2:62:4d:9a:25:b5:2e:43:a7:cc:d6:59:a7:96:b5:f1:2f:
4d:ef:6a:15:0d:df:64:8e:f6:73:49:db:45:a4:1e:7d:74:1b:
02:1f:94:46:4e:50:2e:1d:ee:8a:19:19:67:16:f7:12:18:20:
96:f1:c8:c8:fd:6b:cf:11:dd:74:2a:bb:3f:6a:fd:56:26:13:
f2:ff:4f:ae:08:88:81:c5:ca:af:68:42:33:c2:95:9b:87:d8:
66:65:da:5a:58:6b:1c:6a:21:51:a6:1c:35:f4:cd:e0:a1:31:
48:55:47:eb:ce:38:33:cc:55:d7:79:e3:03:d9:5d:70:7b:30:
d4:c0:4c:52:3e:fa:77:9d:32:d0:9a:20:7f:95:b1:4c:7f:d4:
3d:a6:a1:7b:e8:78:97:e5:85:dd:21:0e:b1:f2:80:e5:30:b7:
7f:2c:e6:5c:e7:7f:c2:a7:53:db:ca:e6:51:cd:31:75:bd:56:
55:58:8b:37:fb:a8:97:de:b8:b3:82:93:27:d4:00:ff:4e:39:
b3:e2:4a:70:3f:be:c4:8a:2f:ae:84:2b:b7:5b:32:ff:7a:50:
2b:e2:d9:4d:84:82:0d:43:3d:96:91:c1:bd:b9:e7:04:ba:ff:
54:cf:ff:77:0c:27:0e:46:bb:32:7f:38:fa:10:14:4a:24:5c:
ab:8a:c0:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:25:13 2025 by rpki-client