Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wMCMAjxr9XFO6py39r348ObUI7w.roa
File: wMCMAjxr9XFO6py39r348ObUI7w.roa (raw, json)
Hash identifier: YwXxPQcZWPOKRIpopfqMmEQoQbFmrXrWJx9vwtJqd48=
Subject key identifier: C0:C0:8C:02:3C:6B:F5:71:4E:EA:9C:B7:F6:BD:F8:F0:E6:D4:23:BC
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018538063D0E656A6BF4FF376EFDA340FF29
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wMCMAjxr9XFO6py39r348ObUI7w.roa
Signing time: Thu 22 Dec 2022 04:10:11 +0000
ROA not before: Thu 22 Dec 2022 04:10:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:38:06:3d:0e:65:6a:6b:f4:ff:37:6e:fd:a3:40:ff:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 22 04:10:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c0c08c023c6bf5714eea9cb7f6bdf8f0e6d423bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:2a:a5:a6:1b:38:f1:f3:44:40:f5:05:e4:ba:
49:a1:9f:3f:5e:9c:7d:93:2a:6d:69:c4:d3:fa:77:
cd:cc:25:57:55:04:86:4f:27:05:55:a6:e3:27:70:
66:f8:48:77:82:a7:3a:62:b2:63:4c:5a:27:6e:fc:
5e:32:47:2f:40:94:51:a9:cb:5d:90:24:b4:ef:cb:
f0:d8:ea:0c:0a:c2:c6:30:c5:19:09:a8:d9:fb:b3:
7f:7c:99:c6:08:21:0b:0e:52:7f:82:ec:80:51:e4:
c4:ba:18:d6:5e:7b:da:82:92:81:40:22:ef:b2:b4:
7a:91:ff:74:4f:5c:63:67:0e:ac:09:e1:5b:f4:72:
19:84:91:d9:0e:49:b9:70:5c:ac:10:8c:bf:37:18:
18:18:aa:3a:05:bc:a3:f7:5b:b8:4b:a2:43:8b:02:
b0:99:e5:0f:55:a9:6d:ec:29:21:04:65:f3:8f:a8:
56:f4:92:64:21:8d:82:49:23:a1:2f:15:a9:fe:a8:
4a:ca:ac:5b:5a:9a:f1:a1:f5:14:ca:d1:07:b2:8f:
76:7d:0a:2c:d3:a2:18:62:23:70:85:c8:c7:1f:df:
d7:db:e0:b2:f6:05:31:41:9e:99:09:0b:5b:61:74:
4c:4b:0d:d8:e6:2c:06:ae:62:b6:70:e4:1b:8e:03:
29:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:C0:8C:02:3C:6B:F5:71:4E:EA:9C:B7:F6:BD:F8:F0:E6:D4:23:BC
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wMCMAjxr9XFO6py39r348ObUI7w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
51:76:95:18:85:d5:0b:58:53:b7:8e:f3:73:a9:74:a9:3e:1c:
b9:1e:f3:fa:79:84:fb:39:87:9d:d6:38:02:58:81:98:6a:cc:
5b:a9:24:d7:b0:5d:89:b3:4b:84:1d:71:e2:88:dd:db:3c:af:
ae:6c:dc:98:b0:c3:0e:11:ff:9f:82:2c:f2:a7:0b:67:74:36:
87:02:5e:8e:9c:9a:8c:bc:65:85:de:15:29:bb:b9:e2:e4:72:
59:04:b3:40:b3:cf:fb:ca:15:dc:07:e4:af:cc:3d:91:83:18:
6e:bc:fb:fc:64:ab:1a:45:64:bc:c5:8b:27:8c:dc:df:5c:1a:
e4:95:25:72:e0:60:a7:3e:0a:0b:16:8a:29:14:76:c1:14:36:
d7:b2:34:1d:bb:d2:93:c2:b9:66:03:bd:5e:ff:f3:66:a3:4c:
84:1a:14:70:9c:a7:5a:6f:1e:1c:d8:3c:ed:2b:7a:dc:6a:77:
b3:27:46:f2:f1:c4:e8:ea:9a:88:65:90:90:78:e6:6d:86:7b:
08:b2:9b:93:13:96:ca:d6:8f:96:19:25:9a:c8:e5:c0:88:d7:
79:af:2b:41:d2:05:6b:f0:e2:b5:32:86:a0:22:03:89:a2:2c:
6b:dc:93:71:d6:89:87:c4:67:14:ae:df:c1:6f:ba:76:68:05:
e3:a9:4a:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 20:28:06 2025 by rpki-client