Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wc5k_F3Z-YRmlRRTsIPUeUM1uBg.roa
File: wc5k_F3Z-YRmlRRTsIPUeUM1uBg.roa (raw, json)
Hash identifier: 44tokNT3So50m8ueG2M7RpBYAvJGMpbWsp68WXssD7E=
Subject key identifier: C1:CE:64:FC:5D:D9:F9:84:66:95:14:53:B0:83:D4:79:43:35:B8:18
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0183E3F26430D4A977F36EB0EEFF3D8932D4
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wc5k_F3Z-YRmlRRTsIPUeUM1uBg.roa
Signing time: Mon 17 Oct 2022 03:17:36 +0000
ROA not before: Mon 17 Oct 2022 03:17:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:e3:f2:64:30:d4:a9:77:f3:6e:b0:ee:ff:3d:89:32:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Oct 17 03:17:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c1ce64fc5dd9f98466951453b083d4794335b818
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:95:b4:0a:df:16:0f:da:07:e0:b5:84:fc:6e:
a6:65:47:52:22:61:12:d4:ac:6b:ed:4b:21:2c:68:
18:ce:98:01:84:9c:a2:ae:0e:b0:ae:07:6a:ba:ad:
4c:e9:1c:a3:08:b1:77:b7:79:91:13:c7:46:79:f3:
dc:5e:19:91:97:f2:76:b9:ef:5c:5f:51:da:f8:65:
c1:b7:53:14:bf:ef:fd:27:dd:ba:0b:5e:59:4f:80:
c3:35:92:be:f8:51:06:68:15:4c:9f:4c:93:d9:27:
db:f6:82:d5:f9:52:5f:f2:c9:aa:93:f6:31:bd:d4:
55:da:ca:9c:ce:c1:5d:e9:0a:6e:4a:50:b4:1e:77:
a7:31:fa:82:64:ea:97:0d:c3:aa:a1:00:7b:25:4b:
88:aa:82:23:b2:21:f2:37:4d:66:3d:86:14:f9:cc:
8e:75:19:e7:8e:09:ca:e1:36:99:f3:68:e4:c7:72:
b4:7a:60:e8:d9:32:7e:ca:5a:3c:d4:7a:57:ae:84:
2b:ac:0f:a0:81:47:7e:d5:27:96:11:dd:aa:2f:09:
22:85:8d:a0:ef:f7:e8:8c:e3:b7:b4:fd:ed:80:74:
8d:bb:80:de:0c:91:b8:18:ea:8b:7f:36:59:84:d5:
99:b4:b4:e7:e8:b9:32:28:6f:6e:8f:3e:b2:70:83:
56:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:CE:64:FC:5D:D9:F9:84:66:95:14:53:B0:83:D4:79:43:35:B8:18
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wc5k_F3Z-YRmlRRTsIPUeUM1uBg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
42:8d:0a:93:27:aa:35:60:50:16:df:8a:16:a1:2c:5b:69:9e:
a1:66:0c:bf:1c:3e:42:95:76:d7:3c:77:16:f8:5c:dd:da:0e:
4b:f0:3b:ca:de:ad:76:32:a0:e1:40:64:97:fc:d0:5a:48:cf:
8e:eb:ea:65:7a:a3:12:92:70:f5:c9:1e:c5:f9:6d:2d:12:18:
a8:58:9d:a7:95:1c:57:72:06:d7:87:a5:4c:cf:f1:80:67:63:
47:0a:2d:61:1d:7e:8b:bc:6b:0b:0d:0c:55:c3:19:a9:64:d8:
58:3b:e3:ba:7e:09:79:52:0c:e7:82:a5:8c:d8:e1:e0:5e:f8:
ca:3c:b0:66:87:1e:21:53:16:90:98:7a:c7:93:ec:29:ba:6c:
20:47:2d:3a:64:06:3b:c1:0e:3d:38:e5:09:a7:45:29:21:a4:
fa:14:e2:5a:24:a2:7f:5c:0d:cd:1b:2d:32:90:6f:a3:5b:d9:
96:7f:65:2e:7a:0b:11:33:e3:36:33:77:d0:e2:b0:f6:e3:78:
5e:5a:bf:02:2b:b9:84:61:85:01:f1:2a:2d:63:db:bf:1a:7f:
33:ab:1b:c7:77:0f:28:f8:c8:d5:e5:d3:e4:84:6f:37:1c:5c:
86:b2:7c:30:ab:5d:41:c5:82:19:cc:f6:60:48:dd:d8:15:d3:
65:bb:f6:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:27:53 2025 by rpki-client