Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wDpKHcHdtNZSyFt8zRO0ggYhLjI.roa
File: wDpKHcHdtNZSyFt8zRO0ggYhLjI.roa (raw, json)
Hash identifier: 2ZNZgB8PekvH+i4ySg8kcxSegr/CwI8hn0VKuSYq0ro=
Subject key identifier: C0:3A:4A:1D:C1:DD:B4:D6:52:C8:5B:7C:CD:13:B4:82:06:21:2E:32
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184B85E7EF42B68751F90019F42B6A58346
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wDpKHcHdtNZSyFt8zRO0ggYhLjI.roa
Signing time: Sun 27 Nov 2022 09:15:11 +0000
ROA not before: Sun 27 Nov 2022 09:15:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:184:ae77:4719/128 maxlen: 128
2001:67c:64:ffff:0:184:9f03:9814/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:b8:5e:7e:f4:2b:68:75:1f:90:01:9f:42:b6:a5:83:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Nov 27 09:15:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c03a4a1dc1ddb4d652c85b7ccd13b48206212e32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:a1:d7:9e:5f:35:04:21:22:ef:6c:fc:fd:29:
b5:97:fd:08:57:b4:80:99:6f:da:87:75:62:34:1b:
10:ca:1a:b2:6b:b3:17:a0:41:e4:73:67:8f:52:e7:
78:49:1a:d4:91:d7:76:ea:d5:27:32:38:2d:0b:01:
86:8e:f2:bd:ca:5f:57:8a:a6:89:db:27:39:ea:0c:
c9:75:49:2b:e9:84:e1:93:b6:53:56:38:4b:3f:42:
e6:9e:96:f1:c6:5f:d7:79:b0:91:3d:5f:19:6a:d2:
e4:f2:b9:d9:fc:60:99:b6:89:3c:58:5d:46:62:d4:
09:59:cd:51:20:2a:35:ae:67:ee:fd:44:2b:d5:33:
e8:0a:cf:a9:0e:3e:be:f2:29:bc:86:61:e0:8a:64:
ef:ea:78:36:e7:69:e5:c1:63:32:1c:aa:12:3b:66:
15:87:dd:15:d9:01:c7:c6:87:10:e0:70:30:03:9b:
1f:c6:ee:1b:af:12:94:d0:2e:26:68:b1:89:ca:00:
28:e7:db:c0:a0:5e:b2:59:df:ca:ff:7b:1e:88:0d:
c9:ce:81:2b:24:2c:7b:1c:bc:7c:b7:5a:24:1f:a2:
71:82:22:fc:3f:d4:bd:d9:60:48:02:ce:72:56:1f:
7e:d2:16:01:e4:8d:d8:68:de:a9:00:1f:3d:f0:9d:
ac:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:3A:4A:1D:C1:DD:B4:D6:52:C8:5B:7C:CD:13:B4:82:06:21:2E:32
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wDpKHcHdtNZSyFt8zRO0ggYhLjI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
57:ac:10:8c:fa:1d:cd:01:cf:06:5c:0d:af:0f:a7:f3:ee:38:
e4:16:6e:d1:a6:68:5f:1a:45:97:4f:4d:e5:1e:e2:dd:50:f1:
33:b1:c8:60:ce:bc:54:e4:0d:bd:a8:9d:df:b4:40:cd:a9:c5:
83:d1:20:e2:d5:56:88:b4:90:e8:af:7e:93:ab:ce:b8:5d:6f:
50:01:46:37:cd:7f:30:75:52:6e:62:75:a4:ac:ad:96:3f:a7:
70:5f:bc:3e:af:f4:ba:c2:90:49:b3:d4:b7:fb:cf:9a:26:39:
6e:70:fc:ac:f8:63:6b:01:d8:6d:5c:c0:ee:ca:2a:32:0e:cb:
84:82:3c:a2:f4:a3:d2:bb:25:35:38:13:b4:b6:0b:0e:15:62:
0e:de:42:b2:bc:84:fb:3a:3b:18:4d:92:16:d9:d3:f6:0f:f4:
40:7e:be:97:a2:e2:c1:62:ab:74:35:1e:56:b2:91:7e:6b:51:
6d:e6:ac:ab:73:f4:fe:64:21:5d:d0:0f:e0:a0:a2:66:b0:63:
e0:6d:a4:0a:b2:a4:33:03:e9:a7:1d:79:bb:d0:ff:2e:ef:06:
ec:20:fc:67:f5:6e:f7:46:2a:5e:06:67:60:f7:11:5a:5c:e5:
c3:53:d8:19:16:6c:91:3c:17:9a:96:07:d4:59:3a:94:3c:7d:
a5:0f:bd:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 17:41:27 2025 by rpki-client