Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wlj-63f3rS64zIfuHxurPqaAHo8.roa
File: wlj-63f3rS64zIfuHxurPqaAHo8.roa (raw, json)
Hash identifier: MqngmwWOiW8o/L7Zd8nH0QEmYljejNZ90g8FAC1ig6A=
Subject key identifier: C2:58:FE:EB:77:F7:AD:2E:B8:CC:87:EE:1F:1B:AB:3E:A6:80:1E:8F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186D39094625B6FD7498DC3857ABF631BBB
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wlj-63f3rS64zIfuHxurPqaAHo8.roa
Signing time: Sun 12 Mar 2023 02:05:13 +0000
ROA not before: Sun 12 Mar 2023 02:05:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:d38f:b5a7/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:d3:90:94:62:5b:6f:d7:49:8d:c3:85:7a:bf:63:1b:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 12 02:05:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c258feeb77f7ad2eb8cc87ee1f1bab3ea6801e8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:f1:22:68:53:3d:11:69:f3:50:7a:75:ba:19:
55:0d:e0:0b:c4:d4:23:ea:22:77:01:6b:db:b7:61:
51:3f:9c:c8:7c:fd:1b:c6:9c:a4:77:c7:f0:35:ab:
6d:a5:06:d0:a0:f9:50:4a:07:95:50:82:80:b7:e5:
77:fc:45:1c:8e:30:0e:cb:fa:34:33:0d:32:ad:0e:
df:48:c5:23:94:47:ee:28:46:f0:d9:d5:ee:84:2f:
0c:c2:83:3a:ad:bd:2c:30:86:ef:e1:23:73:e8:75:
9f:63:f3:1f:5d:ec:4e:47:d9:2c:bb:ef:c0:ea:1d:
f8:d5:4b:91:66:3c:da:91:b7:b6:31:0d:9e:18:1b:
18:89:66:2a:b4:72:dc:81:a4:4a:ab:db:2e:d6:06:
d8:44:cd:54:69:be:a3:92:f0:2e:11:3a:ec:c4:61:
41:90:e4:7a:a3:6e:e9:41:44:ba:71:fc:db:9c:73:
83:1a:ea:7d:d4:e0:5e:4c:13:46:17:11:c7:23:18:
98:c2:66:d4:df:af:78:8d:24:19:63:0a:e2:2b:22:
55:1d:43:ec:e0:da:44:a2:f7:ab:bf:1f:e8:4b:37:
d1:cf:92:65:d9:46:b2:ee:9e:45:31:06:41:c1:f7:
2d:d8:87:e1:24:c1:21:d7:3f:f3:b5:78:00:30:8c:
ca:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:58:FE:EB:77:F7:AD:2E:B8:CC:87:EE:1F:1B:AB:3E:A6:80:1E:8F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wlj-63f3rS64zIfuHxurPqaAHo8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0b:70:e2:3d:c7:94:45:30:6c:e2:47:af:ba:e6:07:44:c3:b4:
80:0b:3a:0f:03:e7:21:bf:ce:69:cf:38:94:2b:72:32:f5:b9:
08:aa:ac:7d:95:07:a1:73:ef:46:fd:44:a7:98:02:79:4c:3e:
b7:77:21:ee:84:75:22:dd:3a:8e:43:d5:ce:fc:68:bb:dc:80:
fa:90:de:38:6e:b7:00:93:70:18:6c:9d:a5:3c:c5:5e:fb:24:
c8:df:a9:d8:60:ca:a5:9f:68:6f:26:51:54:de:c9:36:fa:fb:
e1:e5:26:a2:c7:28:be:af:08:8e:a5:2b:b8:c8:2a:d9:c3:94:
d0:9f:6f:b2:3c:ad:fd:0c:0a:e0:9b:27:bd:1a:9d:91:a0:7c:
30:2f:bb:c5:d1:64:35:42:74:59:68:3f:48:cc:a4:65:dd:de:
24:76:f3:f4:0f:2c:9c:5a:b4:8f:c5:a7:27:6f:f1:79:72:de:
5c:d0:9e:90:48:95:fe:a6:1e:d5:ec:21:fb:c9:37:0f:61:5c:
f8:c9:01:7c:8f:44:3b:80:04:e5:d8:55:c4:7f:b7:5c:69:ff:
fc:cd:20:8c:67:82:19:39:53:fe:1c:1b:4d:f1:7a:80:8f:5b:
b1:79:bc:81:9b:44:f3:31:74:5d:b7:10:52:71:04:1e:0b:db:
62:70:4c:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 02:35:53 2025 by rpki-client