Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wf3Ftz_D5Z588tuUhiYnHz_hc6c.roa
File: wf3Ftz_D5Z588tuUhiYnHz_hc6c.roa (raw, json)
Hash identifier: URMrbVHxVJQPoayIN2wV6cQU/5TMp6PSnJLulzTIlXk=
Subject key identifier: C1:FD:C5:B7:3F:C3:E5:9E:7C:F2:DB:94:86:26:27:1F:3F:E1:73:A7
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185C680109500340BEA2D6C7EF969C1D23C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wf3Ftz_D5Z588tuUhiYnHz_hc6c.roa
Signing time: Wed 18 Jan 2023 20:09:19 +0000
ROA not before: Wed 18 Jan 2023 20:09:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:c6:80:10:95:00:34:0b:ea:2d:6c:7e:f9:69:c1:d2:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 18 20:09:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c1fdc5b73fc3e59e7cf2db948626271f3fe173a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:78:ed:4b:21:ef:3b:19:66:e2:fa:d3:c9:d6:
6f:40:56:c2:8e:58:7a:e4:f8:01:40:26:93:d2:b7:
60:05:da:74:18:e5:9e:6d:dc:6b:52:b1:69:5c:35:
e5:70:4e:70:9c:b0:5b:a8:fe:0b:72:05:18:d1:7c:
ac:d4:4a:0c:30:43:c4:e9:0f:99:c0:3d:1c:8e:35:
5e:0c:c4:01:bd:8f:65:a5:60:35:49:58:63:32:c7:
58:2e:ed:c1:19:85:51:f6:69:b4:92:4f:80:49:c1:
4a:0d:36:6b:13:81:0b:a2:22:99:e9:68:45:28:c8:
0c:0b:6d:dc:90:99:49:85:b5:33:64:f0:83:99:61:
9e:27:7f:16:34:33:2e:31:81:a7:5b:33:5a:ff:1c:
ad:db:2b:4f:f5:9d:e4:a2:02:1c:1e:d3:00:e2:3c:
87:b5:f9:f2:ef:18:e9:31:02:c4:99:d9:a3:13:23:
87:54:d8:ff:f7:0c:bb:4f:15:1f:26:db:40:90:4a:
11:bc:91:de:4c:05:cf:62:9f:10:70:e5:51:eb:84:
24:65:37:90:7a:79:6d:7a:95:ff:4e:35:3b:69:55:
a7:05:89:15:3b:5e:46:77:cd:90:9b:18:a5:44:cf:
55:f9:ff:29:5c:7b:58:3e:11:5f:22:61:10:4f:a1:
0e:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:FD:C5:B7:3F:C3:E5:9E:7C:F2:DB:94:86:26:27:1F:3F:E1:73:A7
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wf3Ftz_D5Z588tuUhiYnHz_hc6c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
11:e3:3e:f1:49:e4:f8:dd:41:5c:e2:d8:4b:3e:54:de:38:fc:
0d:ad:92:32:37:bf:f1:92:e0:dd:26:19:11:7f:6f:52:a7:e1:
e7:97:75:5f:63:29:8e:36:f3:db:e2:1f:9a:3a:13:4c:23:26:
71:dd:4e:ef:ab:98:87:75:b2:9e:01:a0:5f:17:1b:b1:e7:49:
60:b6:ba:dd:12:b0:a1:e2:d0:cd:18:74:94:88:1c:c8:07:43:
b7:4b:4f:4b:c0:3c:01:57:f0:c1:fc:1b:a3:a7:99:3a:60:b9:
bf:06:31:df:13:d7:a8:71:ea:6d:e8:e5:91:d5:cd:78:e3:47:
a9:b5:29:88:73:7d:5c:75:d0:f0:90:38:1a:91:4e:81:5c:6a:
a6:10:25:85:1c:25:93:60:31:be:dd:7c:13:3c:ea:69:f8:a4:
59:61:3e:2b:fa:34:d8:fe:7a:88:bc:ab:f9:57:f7:1e:9e:66:
66:9a:86:c4:f7:0c:d9:74:68:e2:fe:f7:ab:af:7c:98:f9:d5:
81:1c:13:8b:eb:45:b3:be:79:dd:2b:76:46:87:69:97:c7:99:
f2:16:80:cb:9f:4b:6c:c3:95:b0:67:11:39:da:76:93:14:28:
7c:31:e5:59:5a:b1:f7:7e:1a:e0:94:58:31:57:16:89:1b:11:
67:40:6a:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:18:29 2025 by rpki-client