Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wLRt8CDnuBleWmFyO2vBzXpNbP4.roa
File: wLRt8CDnuBleWmFyO2vBzXpNbP4.roa (raw, json)
Hash identifier: M0bWWpX0Xnm7N2jcP9u/2oKTGCwZIJeEcF+sZb+o8x4=
Subject key identifier: C0:B4:6D:F0:20:E7:B8:19:5E:5A:61:72:3B:6B:C1:CD:7A:4D:6C:FE
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01823BEF6E7F213793CF1C2164B4E20F2886
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wLRt8CDnuBleWmFyO2vBzXpNbP4.roa
Signing time: Tue 26 Jul 2022 19:15:23 +0000
ROA not before: Tue 26 Jul 2022 19:15:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:3b:ef:6e:7f:21:37:93:cf:1c:21:64:b4:e2:0f:28:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 26 19:15:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c0b46df020e7b8195e5a61723b6bc1cd7a4d6cfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:1c:cd:75:74:a6:f7:8d:06:e3:7b:da:6d:a9:
6b:0d:66:b2:bb:fa:d3:73:95:91:9e:c7:da:99:3f:
fb:46:33:f4:63:e0:99:ab:f4:92:57:88:3c:45:b8:
e6:2e:f1:6a:98:65:3f:54:84:c1:47:46:94:03:4c:
38:b0:49:99:55:bf:b3:e1:46:c2:7a:67:52:1e:6f:
59:a3:4e:46:f5:9e:a1:6f:e9:56:d4:b1:2d:ee:83:
35:93:d4:41:c1:62:dc:1f:96:20:b9:66:92:95:a6:
f5:85:3c:bf:1c:48:b8:ee:30:66:47:b6:20:36:3e:
82:2f:c2:5b:4c:ef:21:6a:a7:95:51:85:13:1f:1b:
cb:8e:c2:26:2d:64:95:60:93:ab:32:75:75:da:2d:
c4:5d:15:4e:dd:7e:a1:59:4b:b1:63:52:4e:85:2e:
c7:f1:a4:c3:f3:2e:b8:5e:b5:16:54:42:2e:c3:9e:
3c:4e:d2:fa:1a:a4:79:00:b7:f9:73:2b:96:fa:29:
41:df:04:06:be:15:67:c1:d0:fa:f5:77:94:a8:83:
99:4e:cf:e1:73:81:5e:08:ce:1e:33:e8:5a:ff:a6:
1e:a9:ee:4c:d2:c8:42:8a:1b:1b:c2:ee:e8:d4:03:
05:e3:72:88:1d:6e:98:90:a4:9c:e0:f2:ba:23:86:
48:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:B4:6D:F0:20:E7:B8:19:5E:5A:61:72:3B:6B:C1:CD:7A:4D:6C:FE
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wLRt8CDnuBleWmFyO2vBzXpNbP4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
20:f8:34:9c:d2:9b:dd:d5:a1:09:ae:52:d4:bf:3a:1b:d9:c9:
ac:d2:ed:84:3f:d9:5b:ec:b6:b9:0b:ae:0a:33:95:56:1c:53:
67:ac:3d:2b:48:7f:f7:1b:92:ce:66:37:7c:74:24:d1:45:9e:
20:f3:9f:ca:a0:ce:2f:40:70:9b:3f:e0:fa:2f:5c:2a:47:53:
16:34:62:6c:c5:07:c0:7f:18:92:d7:d8:8f:35:b4:5a:ac:08:
a0:77:27:7d:b0:1e:8a:2f:2e:8a:6f:09:6e:6b:30:f4:b3:cc:
3f:95:1a:1a:35:95:c9:57:df:4d:0e:38:be:ba:61:58:45:be:
5f:a0:25:44:88:7b:a0:3b:30:2d:ff:4d:89:53:82:bf:02:28:
7f:73:34:35:2d:39:63:55:46:43:a6:41:2f:8d:78:cd:4e:16:
69:c5:5a:fa:dd:2e:24:a5:a4:e9:0c:d4:d8:88:ce:64:b3:59:
88:ce:19:36:45:c9:68:a8:fc:ae:77:ed:df:00:5b:de:00:4d:
7e:e8:a5:83:f0:20:af:ba:6f:e4:b0:9b:d7:3d:5c:c8:09:a4:
dd:b7:77:64:50:3a:d5:44:0b:51:75:fa:2a:17:27:12:2a:25:
28:1b:3c:0e:52:cc:ad:3b:20:9a:86:34:f3:ed:df:d2:75:17:
ee:3a:87:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:41:59 2025 by rpki-client