Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wlQhAh5yGfxzs8RvXybj6epanr8.roa
File: wlQhAh5yGfxzs8RvXybj6epanr8.roa (raw, json)
Hash identifier: maLYAIMcM30r+aRi/U2l7/UCHy28lCZxL51waYIn5fs=
Subject key identifier: C2:54:21:02:1E:72:19:FC:73:B3:C4:6F:5F:26:E3:E9:EA:5A:9E:BF
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A33728BC77C59E627265D179001C77A0F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wlQhAh5yGfxzs8RvXybj6epanr8.roa
Signing time: Sat 26 Aug 2023 20:04:19 +0000
ROA not before: Sat 26 Aug 2023 20:04:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18a:3372:882e/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:33:72:8b:c7:7c:59:e6:27:26:5d:17:90:01:c7:7a:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 26 20:04:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c25421021e7219fc73b3c46f5f26e3e9ea5a9ebf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:b8:19:f0:21:3c:e5:9b:ea:f7:fb:61:73:a2:
d3:35:51:51:69:3a:9b:34:af:fb:3e:cc:e6:e3:86:
42:58:42:bd:6c:0e:29:aa:77:82:67:32:e9:e1:ea:
fa:1c:22:1e:da:e2:1c:1d:79:15:e6:d9:6d:a9:be:
9b:a1:21:64:fd:1a:c3:08:81:97:aa:89:1d:1c:38:
52:00:9b:9b:a5:e2:1d:c3:e9:37:b2:8e:16:05:29:
13:41:15:d3:41:a8:3d:51:13:5c:de:ed:e1:68:e4:
49:19:1c:36:2d:3b:bb:29:b3:03:18:21:65:99:38:
a3:bc:80:31:e7:8b:b6:de:b7:87:cd:c7:c7:52:e1:
ad:70:ce:d1:ef:c0:ea:f5:8b:d2:ed:ea:67:e9:01:
b2:1e:c4:5d:d8:7f:98:0e:39:05:72:6f:e1:a8:61:
18:22:dd:99:ef:83:af:85:98:3c:a8:0d:fe:58:0d:
ba:36:bf:0b:56:1d:45:2e:03:5e:5e:4c:69:b5:be:
2f:a7:a1:07:67:0c:16:47:df:27:63:a6:3c:4a:40:
63:fc:36:89:40:5b:7d:87:0f:df:ff:d7:5f:da:53:
72:1b:51:47:de:06:fd:49:9b:95:63:65:0c:72:1b:
e7:2f:04:c9:55:ac:ab:4d:fb:88:11:f4:31:8c:34:
6e:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:54:21:02:1E:72:19:FC:73:B3:C4:6F:5F:26:E3:E9:EA:5A:9E:BF
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wlQhAh5yGfxzs8RvXybj6epanr8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a0:68:25:e3:9b:8f:31:fd:0d:81:dd:ce:2c:ed:d2:27:4c:f7:
3e:5b:71:4a:cd:ce:3a:6b:f2:8b:26:ff:af:59:5d:20:69:b7:
a2:3b:d5:bf:9c:5a:ff:eb:de:fa:67:37:f4:58:ba:ee:a9:8b:
31:2d:81:51:a6:7f:fd:39:c1:7a:c4:a1:a7:b8:7b:8a:f1:45:
fd:6d:a9:c5:9c:e0:6c:ad:27:99:f5:8b:09:90:a3:c6:f6:cc:
ba:f0:d9:d0:62:04:5b:c9:9c:41:25:9c:b8:b2:2e:8e:4b:8f:
1d:24:32:76:b5:94:a8:c3:47:78:3e:7a:17:0a:f2:4f:e1:54:
2d:36:e9:56:e5:eb:1f:d6:33:f3:8b:82:74:a1:bc:b3:9d:b4:
fd:57:c9:0d:74:10:a6:86:38:3a:4f:42:a5:1f:87:b2:d2:33:
8e:25:d4:8f:55:51:97:e8:85:e6:e2:62:b8:b7:0b:7b:de:99:
f9:a4:00:f0:c3:f2:22:5e:59:c9:fe:9f:c5:c2:43:dc:a4:f2:
8c:f8:28:c3:55:48:f9:d4:aa:6d:bd:40:19:e2:8e:d3:a4:f4:
83:2a:1c:99:de:5e:be:72:e2:90:1b:20:4f:1e:21:26:9e:3d:
30:5a:e0:57:95:dd:99:fa:93:a3:54:89:af:48:dc:a4:c0:50:
85:8a:13:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 22:51:56 2025 by rpki-client