Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/woGlQljMZdBPj-E8_NqXLHPumIY.roa
File: woGlQljMZdBPj-E8_NqXLHPumIY.roa (raw, json)
Hash identifier: dBa66nB3X9UTzdqYQknJGpHzL+yV3NcD8ZBUuULaSgU=
Subject key identifier: C2:81:A5:42:58:CC:65:D0:4F:8F:E1:3C:FC:DA:97:2C:73:EE:98:86
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185F99324333F2F68580E02B03024AA60F6
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/woGlQljMZdBPj-E8_NqXLHPumIY.roa
Signing time: Sat 28 Jan 2023 18:10:47 +0000
ROA not before: Sat 28 Jan 2023 18:10:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:f9:93:24:33:3f:2f:68:58:0e:02:b0:30:24:aa:60:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 28 18:10:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c281a54258cc65d04f8fe13cfcda972c73ee9886
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:39:24:89:d1:82:35:d6:61:aa:fc:06:ea:7f:
eb:8a:aa:e7:19:e9:63:07:6f:15:d9:38:55:bd:7d:
98:d1:f4:97:4a:15:fd:1e:43:9f:94:a9:dd:04:e8:
76:29:e6:92:ca:e0:df:96:34:cf:7a:c8:96:c7:d5:
52:f6:53:f9:f2:60:97:ed:47:36:04:6a:df:a5:e9:
5f:bc:cf:df:3f:7d:89:fc:31:57:20:30:59:27:ec:
23:c9:8b:37:03:ed:69:53:32:f4:d9:bc:81:e1:61:
3a:77:69:22:02:a7:e1:97:ae:28:b5:d7:17:f2:e1:
6d:ff:1a:1e:90:eb:bb:f1:04:3c:ab:dd:7f:d1:c2:
70:65:39:c4:b9:e2:2d:a9:5a:7e:c7:1e:3b:12:3e:
aa:6d:7b:7c:c6:1a:8a:3a:8f:d3:9b:e8:db:19:12:
cc:d3:8d:5e:f9:b2:2a:83:09:a7:1a:38:1d:49:ff:
01:20:87:4c:bc:06:41:58:6d:6f:fd:b9:3c:72:bb:
9f:19:d6:82:f5:b4:ec:a3:4c:4f:7a:08:b3:ba:ae:
73:fd:86:da:46:c7:25:49:fc:19:45:e6:9a:14:4e:
db:9c:0f:ce:42:a5:0b:40:76:1f:2d:7e:96:8b:90:
74:7b:17:b2:7c:c2:8b:6e:c7:7b:84:cd:e6:cf:31:
53:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:81:A5:42:58:CC:65:D0:4F:8F:E1:3C:FC:DA:97:2C:73:EE:98:86
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/woGlQljMZdBPj-E8_NqXLHPumIY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
54:38:09:2d:7c:ae:15:03:e4:2d:81:06:5c:95:5d:fc:97:3a:
b9:64:31:88:ae:a8:19:9e:1b:0d:3b:77:01:b0:e3:a0:18:fd:
9f:ca:9f:bd:a6:33:cb:5a:ce:77:0c:0e:16:12:bf:8f:7c:09:
75:d4:c4:ea:2d:f3:11:48:6c:83:d3:dd:ec:8c:09:71:d4:68:
a3:98:45:0c:ce:fd:89:7d:e8:e3:c5:81:49:81:4b:5a:5c:93:
48:40:e1:2b:76:22:c5:b4:3f:6f:5b:df:ab:be:d3:2f:73:a6:
7f:aa:50:95:57:66:47:be:55:07:90:d3:ee:c8:f7:1d:71:98:
f6:a5:92:88:ef:4f:2e:ae:3b:01:e9:3a:e3:a1:34:80:aa:0e:
1d:60:dc:47:cb:70:37:37:d5:87:2f:7b:b0:3f:5c:a8:fe:93:
8a:93:0b:70:72:ac:04:71:8a:3c:3c:1c:24:4d:34:c8:4a:6d:
a1:e2:63:e3:f7:54:2d:7c:b8:4b:f4:89:e0:4d:11:33:0f:4f:
1b:c3:9d:2b:c6:25:d5:31:9f:4c:b5:05:86:39:3b:f2:8e:fe:
e2:89:46:ef:23:00:c8:e4:89:90:1b:e6:77:b7:8d:2c:0a:9a:
73:b4:79:14:4f:7e:1e:73:e1:d1:3d:d9:43:d8:22:2c:33:b6:
71:e0:83:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 02:23:57 2025 by rpki-client