Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/woISlhbWiGYlJs-TEsC4otTtQ1U.roa
File: woISlhbWiGYlJs-TEsC4otTtQ1U.roa (raw, json)
Hash identifier: /1C1xx9//Wakjj0QPTJlJLxQYTezgw1Z7+a3oupEru8=
Subject key identifier: C2:82:12:96:16:D6:88:66:25:26:CF:93:12:C0:B8:A2:D4:ED:43:55
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186DBBDC29CED0A264CC1CBCF009D4684A5
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/woISlhbWiGYlJs-TEsC4otTtQ1U.roa
Signing time: Mon 13 Mar 2023 16:11:31 +0000
ROA not before: Mon 13 Mar 2023 16:11:31 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:db:bd:c2:9c:ed:0a:26:4c:c1:cb:cf:00:9d:46:84:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 13 16:11:31 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c282129616d688662526cf9312c0b8a2d4ed4355
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:f6:f1:03:9e:67:76:ae:95:7a:37:6b:ca:b2:
99:fb:fa:2d:a1:f6:aa:8c:f2:1e:60:6c:35:76:e5:
dc:d7:9b:05:fb:45:de:6e:b5:e1:d4:33:82:81:33:
6b:a6:84:46:35:4b:55:85:d7:f2:f0:ea:1f:66:0a:
24:96:ef:74:e5:b5:d9:50:62:30:f4:78:76:07:9c:
a2:2a:87:bd:7d:39:66:11:64:4e:5f:ce:f1:01:e0:
66:22:e0:4f:04:39:14:5b:0e:1d:52:84:3b:b3:a0:
1f:85:89:0f:90:73:2d:c3:38:5a:51:72:36:fe:12:
3c:25:b4:89:4d:b7:fa:57:ef:14:7f:4e:df:dd:2d:
2f:80:c0:5c:a7:c1:f3:56:54:0b:f6:83:50:2c:f6:
41:fc:0a:a5:04:fb:c6:92:0f:fc:2b:f9:70:9f:e4:
86:1c:04:b4:7f:f9:0c:e8:ff:a4:d9:ed:bd:40:ba:
ef:71:43:39:e0:5d:78:5d:06:7a:7f:0c:b7:8e:3c:
b5:18:6a:d5:c6:03:a8:35:6e:36:06:10:01:bc:39:
09:d4:b8:d0:49:dd:bf:02:54:d3:8c:d8:a6:8c:44:
0f:5b:3d:e5:2e:ef:a1:84:63:0e:20:de:c3:d3:cb:
f4:7f:54:a9:5e:24:bb:da:40:99:6e:30:a1:aa:c2:
04:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:82:12:96:16:D6:88:66:25:26:CF:93:12:C0:B8:A2:D4:ED:43:55
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/woISlhbWiGYlJs-TEsC4otTtQ1U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
ad:84:9c:7b:0f:a7:7f:61:3e:c1:02:d3:11:01:76:e9:a1:3f:
f1:46:8d:ea:eb:b9:92:db:a9:a7:4d:62:b2:59:e8:a6:39:27:
a1:07:90:63:e7:69:69:1d:0f:55:d0:5f:16:66:3c:24:c5:b2:
07:a5:aa:f9:5a:0b:43:be:78:14:bf:06:3b:b1:4f:25:40:72:
ce:5b:c5:e7:f4:92:82:ac:52:6f:71:31:d9:bb:bb:24:19:d1:
6f:f2:75:1e:71:65:f2:99:1c:e0:17:ef:9d:13:db:8c:61:ac:
c1:3f:5b:b6:dc:b5:73:8e:6f:23:a8:a1:75:25:53:88:c3:46:
db:1e:5d:73:2c:e6:d9:3d:cd:fe:10:ff:a4:ec:d7:5c:22:6d:
58:a6:d4:09:de:bc:0e:70:fd:f4:ac:f4:37:71:9d:3c:81:b0:
b6:d0:74:e5:37:12:a4:8b:4f:93:5c:3b:c9:f4:8b:bc:39:a6:
f7:6f:00:4e:1f:2e:11:c6:e9:80:a4:e5:9c:4a:27:5f:f3:86:
4e:f3:6c:35:50:4f:34:8c:14:21:d4:52:23:48:40:ff:62:f7:
d2:c1:0f:26:bd:c3:65:76:0f:a7:fb:65:d5:22:a7:3e:88:0a:
69:d0:f5:18:bb:00:fb:c1:b4:72:ea:0c:37:80:c8:e1:9a:db:
e6:5f:89:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 18:18:37 2025 by rpki-client