Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wnklcBIdpEzQ89OY-QIzmlvkOBc.roa
File: wnklcBIdpEzQ89OY-QIzmlvkOBc.roa (raw, json)
Hash identifier: TgMZewdyyQVLsUJor9k1ZtPFxlhRHZT24xJb8IWhUMM=
Subject key identifier: C2:79:25:70:12:1D:A4:4C:D0:F3:D3:98:F9:02:33:9A:5B:E4:38:17
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01865CECF1355D8C9680C4B5D93C12F109B0
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wnklcBIdpEzQ89OY-QIzmlvkOBc.roa
Signing time: Fri 17 Feb 2023 01:11:17 +0000
ROA not before: Fri 17 Feb 2023 01:11:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:5c:ec:f1:35:5d:8c:96:80:c4:b5:d9:3c:12:f1:09:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 17 01:11:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c2792570121da44cd0f3d398f902339a5be43817
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:b8:da:59:36:f3:c5:4e:6a:4a:cc:c5:c7:8c:
78:5d:45:3f:76:3a:30:04:f3:b9:68:5f:c8:e7:bb:
38:8f:b5:ef:88:56:a8:42:b2:a1:e6:e7:0b:6a:be:
80:ef:26:1c:f5:1e:64:5c:62:a7:b3:8a:40:b0:e3:
5d:0d:4c:b7:92:82:f3:57:05:5f:91:dc:be:7e:49:
7f:4c:25:a6:dc:df:03:cc:e3:45:a5:e6:13:80:6a:
3b:bf:77:54:85:e5:0c:21:68:06:b6:b2:2e:57:77:
fe:e6:56:3c:81:27:f5:a6:9c:5c:26:ed:26:40:0f:
10:c5:33:c1:96:ec:46:51:1a:ff:b2:5a:f2:60:e1:
90:fd:99:ff:2d:f2:d1:7d:c9:58:f8:06:8e:1e:e1:
80:f1:29:51:b5:8c:fb:bd:75:cb:39:11:3c:6a:9c:
42:74:9a:aa:7c:0b:ba:fd:2e:e3:e6:49:f6:2e:5e:
8c:29:b9:ba:6a:36:02:2a:e9:ab:19:fb:1e:11:4b:
17:0f:49:64:63:9c:9b:33:25:44:d9:06:50:0a:4a:
fe:02:91:37:37:fa:eb:cf:61:a8:74:7f:1a:ff:f1:
01:a6:63:da:d4:6b:d4:07:33:b1:b6:05:eb:49:bc:
ee:bc:4d:69:62:63:1c:05:cc:e3:5c:e1:4b:3f:31:
16:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:79:25:70:12:1D:A4:4C:D0:F3:D3:98:F9:02:33:9A:5B:E4:38:17
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wnklcBIdpEzQ89OY-QIzmlvkOBc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
33:f4:7f:e1:6e:04:48:ee:ff:c2:20:9d:91:d9:30:3a:36:7f:
be:8c:70:02:c6:1f:dc:d2:4f:12:6f:78:b1:f9:13:97:af:88:
02:7d:64:47:98:90:5e:21:98:6c:da:6c:3d:94:25:f9:31:8a:
69:86:f5:16:86:ba:fc:7b:a0:32:3e:7d:f5:78:1e:b1:3d:cf:
a7:c2:17:b9:f7:58:90:fe:d4:67:4f:fc:6a:f9:56:99:74:27:
ba:13:d1:5a:28:9d:af:f2:95:07:13:fa:de:17:17:22:5e:c0:
7c:cf:08:b7:41:77:cb:4f:cc:d7:11:b2:31:9e:42:91:5c:fe:
5b:04:28:68:0d:c8:00:cb:5c:96:31:93:99:ff:a1:41:67:98:
8a:ca:5b:f7:9a:86:c3:00:78:f9:45:48:5b:65:49:6a:29:3a:
55:63:57:cb:bf:e8:1b:b4:22:e2:58:c8:7b:b3:e7:56:8c:1c:
c3:d9:a7:9b:4c:29:bc:c0:0c:cf:4a:d3:48:93:f5:70:f1:e7:
b2:06:dd:6c:d5:20:d1:70:90:b3:3c:93:fe:f6:4d:ec:e7:4d:
c9:b6:a4:3a:79:e9:eb:16:33:2a:82:fb:8d:7e:db:61:69:46:
9d:a7:ec:46:2d:47:6a:c1:18:f3:bc:4f:e4:e5:8a:66:65:e8:
8a:d2:20:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 01:15:52 2025 by rpki-client