Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wMtbXgnU3hjJK3IVQf2_VryDHP4.roa
File: wMtbXgnU3hjJK3IVQf2_VryDHP4.roa (raw, json)
Hash identifier: QpR4qvSgN8a3/9hAHQPf/km/JJDc6n071bDgmSBGJqs=
Subject key identifier: C0:CB:5B:5E:09:D4:DE:18:C9:2B:72:15:41:FD:BF:56:BC:83:1C:FE
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 8F16B853
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wMtbXgnU3hjJK3IVQf2_VryDHP4.roa
Signing time: Wed 22 Jun 2022 23:08:32 +0000
ROA not before: Wed 22 Jun 2022 23:08:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:181:8d72:6191/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2400630867 (0x8f16b853)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 22 23:08:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c0cb5b5e09d4de18c92b721541fdbf56bc831cfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:88:77:e1:41:61:88:a7:80:23:dd:16:8c:3c:
68:b9:a4:84:30:64:45:a3:f4:1a:e4:4e:10:0a:f5:
9b:ca:b1:d9:a2:e6:53:58:1b:3e:f2:1c:34:fe:81:
e2:00:a4:36:0e:bc:3b:c0:57:d9:00:de:9e:db:70:
2a:da:1f:ed:f2:a9:df:66:c4:75:e6:3d:64:c6:28:
de:3d:d8:c1:48:2c:32:81:71:40:3b:9d:48:cf:7b:
ca:a2:6f:d8:e8:e7:d9:ef:09:f1:93:c5:0b:5f:d0:
d8:b9:ac:f2:d7:a4:fe:ad:26:3a:81:85:f9:24:53:
45:ad:45:ba:68:8d:5e:a1:d7:cb:d2:14:df:b7:b0:
e9:f6:33:39:d3:20:17:a2:00:4f:1c:8f:34:fb:50:
e1:1b:3b:b3:54:66:f1:4f:84:de:d0:60:5c:54:03:
ae:20:1a:e1:95:00:9b:88:91:df:9f:5f:48:24:de:
0b:a5:87:7a:74:5b:bf:66:38:4e:e1:20:86:05:e8:
3a:ee:fc:b9:f1:b1:07:0b:8a:f8:8e:1f:35:12:d4:
a0:83:42:1b:cd:c7:67:d7:cc:24:6b:45:81:24:fd:
b6:61:d6:33:43:c4:b7:04:af:f0:c7:9b:cb:6d:6e:
73:62:f7:9c:e8:9d:63:cf:e9:f3:4d:93:90:88:93:
b4:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:CB:5B:5E:09:D4:DE:18:C9:2B:72:15:41:FD:BF:56:BC:83:1C:FE
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wMtbXgnU3hjJK3IVQf2_VryDHP4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
aa:be:18:e2:51:71:36:d2:2a:de:c2:d1:44:d7:e2:3a:be:79:
f7:a9:f5:ae:c8:25:55:56:12:01:08:c5:4a:3f:eb:4a:f2:f8:
8b:27:1f:e7:0e:f0:7e:88:73:c6:3e:ab:7a:34:73:fe:bc:26:
93:30:50:91:a7:4d:95:dc:08:a6:d8:29:e6:bf:ae:ad:99:95:
ee:35:6c:4b:13:b3:3e:30:7b:ad:9b:c9:ca:b4:3b:ba:df:91:
2b:ac:90:76:84:7b:21:aa:38:b9:00:a1:43:e2:2b:9d:09:6f:
1c:5e:8e:c5:8c:8a:d8:af:ec:05:fe:95:41:41:f0:dd:ca:76:
78:ca:af:71:8e:46:6f:8e:d7:d5:d2:3f:5e:a9:0f:e5:ff:c2:
cb:94:50:0d:ba:9e:ea:8d:85:33:af:75:84:d2:24:59:de:61:
33:f1:e0:d3:5e:75:99:f5:06:e2:f3:0f:8d:db:d3:a6:4d:e2:
e3:a4:d9:a2:83:eb:1f:77:42:a5:35:fd:66:d7:37:7e:6a:df:
cd:1b:ef:06:63:37:76:b8:7d:eb:38:8f:2f:36:cb:8d:0f:2d:
bc:76:f5:b0:3a:25:de:05:ec:2b:36:0d:9e:08:55:62:44:f4:
7b:4e:9f:fb:4e:33:33:bb:47:eb:a6:31:b7:00:09:0a:9e:30:
bc:26:f7:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 15:06:53 2025 by rpki-client