Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wol1hsSwWG1cWUbAfQAs9xa5uqM.roa
File: wol1hsSwWG1cWUbAfQAs9xa5uqM.roa (raw, json)
Hash identifier: anM/tGgTrcZLRaoozEV9HDgT/ZhmB7T2w4ADj+/bKaY=
Subject key identifier: C2:89:75:86:C4:B0:58:6D:5C:59:46:C0:7D:00:2C:F7:16:B9:BA:A3
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01897780F496575496946EF1BD9BFD704F0E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wol1hsSwWG1cWUbAfQAs9xa5uqM.roa
Signing time: Fri 21 Jul 2023 08:11:27 +0000
ROA not before: Fri 21 Jul 2023 08:11:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:77:80:f4:96:57:54:96:94:6e:f1:bd:9b:fd:70:4f:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 21 08:11:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c2897586c4b0586d5c5946c07d002cf716b9baa3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:84:64:c2:f6:6c:a8:37:a3:27:e2:46:02:4c:
9d:ac:ac:5f:9d:b5:81:a2:92:cd:0b:f6:2d:14:69:
17:83:8f:66:fe:90:35:be:17:10:a5:56:76:72:d0:
bc:a1:6b:53:ba:13:29:3d:df:10:1a:74:0f:8b:db:
13:6e:4a:9b:3b:38:e4:4c:6b:e1:9a:90:fd:92:54:
3f:fa:53:ab:ff:f5:1c:3c:f3:43:3d:69:95:cc:41:
27:3c:21:e9:75:58:1d:ff:03:ba:dc:87:af:0b:96:
e2:87:e7:49:15:68:28:83:15:0d:a1:56:c5:21:41:
9b:5b:88:d7:74:2a:35:b3:96:c3:1f:fd:33:d6:e9:
a9:15:b8:9d:4e:1f:b4:9a:39:8a:af:3f:d8:37:36:
b5:8f:70:1a:dd:2f:b8:99:f6:84:7a:6c:1b:9d:62:
ea:3c:23:49:2c:c6:96:75:b2:01:97:bd:d4:64:3f:
3e:1e:36:50:94:a5:5e:d6:09:f4:0f:cf:b6:70:74:
4e:4a:da:57:e7:b0:ec:7f:8c:49:da:17:c5:21:8f:
cd:19:9c:7f:5d:60:01:fa:26:0b:07:f8:37:ff:07:
d4:22:0f:c7:2b:f8:e3:c3:0c:2f:46:aa:df:40:78:
8a:81:fb:38:8e:8f:b1:1e:21:12:91:29:d0:25:52:
c4:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:89:75:86:C4:B0:58:6D:5C:59:46:C0:7D:00:2C:F7:16:B9:BA:A3
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wol1hsSwWG1cWUbAfQAs9xa5uqM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b0:c6:56:ba:aa:27:70:5e:ff:85:fc:25:8b:1d:76:09:0a:20:
c1:28:c4:58:4a:54:a7:b4:12:be:84:be:89:a1:f1:9c:8f:e4:
78:9f:14:da:37:92:b7:97:71:c9:60:45:79:08:c4:fe:fb:60:
9e:8a:f1:7d:9c:14:13:34:04:bd:6f:b8:c0:9c:1e:dd:cb:f6:
90:25:f5:01:d6:09:e1:f7:1a:e5:13:3e:df:ad:e3:04:4e:c8:
38:2d:b7:0f:06:8c:73:d4:9c:c1:e9:e8:1d:11:82:5b:0e:73:
47:67:8a:1f:d0:3d:68:6a:ff:b7:f6:cf:29:af:ba:76:e1:a0:
4b:e6:46:c7:e4:f7:a5:03:47:e6:79:ad:23:63:32:5c:50:f2:
36:6d:2a:09:b6:19:c2:e9:e3:8f:4d:fe:13:a6:ae:b0:eb:31:
85:e0:ca:57:08:85:92:c5:2e:0c:b6:f9:d7:21:69:19:b7:0d:
5a:46:81:ca:e4:a0:9a:61:85:76:4b:cd:ff:25:51:18:1f:9f:
9a:f3:de:f0:6b:43:f7:82:1d:75:fb:69:4a:bd:ca:e9:f2:8b:
56:7a:b8:d0:ea:6b:e5:91:56:1c:b5:0e:82:f5:d6:85:31:1c:
62:67:56:8f:c2:3b:fb:c4:e3:c7:0c:f0:18:e2:6b:5c:c8:75:
9a:8f:61:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 05:58:33 2025 by rpki-client