Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wiw4JEDtl2TvxdP3TPihsPEXREg.roa
File: wiw4JEDtl2TvxdP3TPihsPEXREg.roa (raw, json)
Hash identifier: ofRdP1f33spMV0CftbeUVgXOvX8CC2hbWfK95zxWZ6k=
Subject key identifier: C2:2C:38:24:40:ED:97:64:EF:C5:D3:F7:4C:F8:A1:B0:F1:17:44:48
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 79E00B58
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wiw4JEDtl2TvxdP3TPihsPEXREg.roa
Signing time: Sat 09 Apr 2022 16:14:43 +0000
ROA not before: Sat 09 Apr 2022 16:14:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2044726104 (0x79e00b58)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 9 16:14:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c22c382440ed9764efc5d3f74cf8a1b0f1174448
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:35:a3:29:c4:9b:34:21:53:89:cb:54:13:9c:
ae:47:76:21:12:96:ba:95:53:69:e9:eb:6b:34:6f:
d5:ad:24:a8:1f:0d:4f:17:74:42:9e:03:23:3c:57:
1e:78:51:2e:ec:ec:20:59:6a:28:6e:b8:14:35:6e:
af:53:62:dd:e5:8d:d0:e5:b1:8e:a4:d9:1f:3a:78:
2d:60:e2:d0:c5:4f:a1:95:17:76:db:ea:66:89:64:
a6:92:87:ff:f0:fb:c8:a4:a0:20:47:e1:d5:4a:54:
fe:8b:60:9e:db:e2:5d:2d:96:3a:46:cf:f4:06:31:
f8:57:b1:a7:db:06:b0:e7:36:ef:12:5a:21:ac:db:
c7:6f:4e:a3:30:58:b5:be:fb:6b:98:b1:4f:c4:97:
2e:1f:29:86:8a:ef:6a:bd:12:31:a2:03:89:b2:91:
f6:92:57:57:47:5d:5a:03:97:f8:2a:0d:f6:9e:89:
12:dd:d3:09:5e:ef:31:58:d9:d1:9f:5e:12:5e:37:
56:5d:a3:6d:78:16:ae:b9:c5:d9:53:e9:da:b9:3d:
a4:86:e0:7d:9b:f9:85:f7:ec:1d:51:d7:5e:ac:7a:
fb:72:88:da:42:7e:39:a9:e6:1e:34:29:09:f1:be:
27:74:77:d8:b7:f6:ce:c3:6d:1f:86:dd:66:4d:76:
a7:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:2C:38:24:40:ED:97:64:EF:C5:D3:F7:4C:F8:A1:B0:F1:17:44:48
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wiw4JEDtl2TvxdP3TPihsPEXREg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
10:eb:94:e2:c9:78:67:5f:b0:f5:8c:f6:e9:03:dd:a0:c6:4c:
7c:4d:13:7e:22:95:1e:1b:a6:96:c9:fe:ba:b3:de:e4:1b:07:
4c:b0:8c:30:18:6b:86:17:57:34:d2:83:c9:fb:49:12:92:c5:
a4:14:f9:79:67:68:c9:a6:99:b7:59:f6:83:c8:34:cc:07:9c:
a2:f0:85:d4:b4:ef:d4:ed:5c:dc:46:18:f3:9b:8b:bc:29:56:
a6:6e:13:50:27:ea:93:cd:ab:8a:95:3b:c2:73:5a:4d:76:af:
0d:bb:66:85:ac:7d:93:03:72:19:c9:be:28:85:77:7f:e9:fd:
34:ba:15:b0:11:e7:e8:5b:24:3e:5e:97:f8:f9:e1:dd:72:de:
09:fe:c5:47:4b:73:bb:4b:68:a6:a8:ec:a0:34:0b:da:85:98:
c3:47:a6:22:5e:9e:1e:12:48:81:11:a8:98:37:f9:7d:69:1d:
f3:af:24:ca:e9:30:72:a3:7d:55:01:69:6b:f3:c7:b1:d0:e7:
a9:e8:11:de:25:9d:75:87:07:8a:92:f7:bf:94:5f:51:5a:a3:
e8:aa:8c:1b:97:30:de:4b:ac:29:45:52:22:f3:d6:2b:a3:ed:
09:89:73:46:10:56:76:27:8d:99:a9:d2:3c:a7:f7:38:2c:ff:
d0:0e:31:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:37:51 2025 by rpki-client