Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wrGAALMJXvBIGfVm5stXf40siKY.roa
File: wrGAALMJXvBIGfVm5stXf40siKY.roa (raw, json)
Hash identifier: O1ZfbOOGaeAXlltteW8PVSPQnRwbQzUAPhxjMaTzZuI=
Subject key identifier: C2:B1:80:00:B3:09:5E:F0:48:19:F5:66:E6:CB:57:7F:8D:2C:88:A6
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 8A83D028
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wrGAALMJXvBIGfVm5stXf40siKY.roa
Signing time: Mon 06 Jun 2022 21:11:20 +0000
ROA not before: Mon 06 Jun 2022 21:11:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:181:22f:7a99/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2323894312 (0x8a83d028)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 6 21:11:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c2b18000b3095ef04819f566e6cb577f8d2c88a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:32:de:00:ef:09:ca:c0:f3:18:1e:74:ef:0d:
52:72:21:1f:a6:b8:5e:80:25:c9:b2:05:85:fa:d2:
45:c1:c9:7e:6a:46:83:72:d8:0a:17:3a:4e:84:b5:
13:c2:aa:3c:0b:3b:d9:b0:bc:aa:50:fd:0e:50:f1:
89:5e:2f:a3:b6:b5:86:5c:6c:8a:c5:f5:58:af:30:
21:c8:73:ee:03:00:00:17:10:21:af:0d:39:6c:08:
7b:03:e0:99:89:bd:b4:9d:6b:52:8e:03:bb:09:43:
01:ab:f6:e8:77:6e:ca:f7:ca:9a:dc:32:d2:1d:6c:
fe:fe:38:25:72:91:2e:0b:6a:f4:da:6f:16:ad:52:
cb:c4:5e:07:fa:b4:2d:e1:4a:12:f2:9f:a5:73:2b:
ac:35:e9:19:31:25:cd:0a:35:ff:64:c8:ce:51:be:
91:73:89:ac:22:67:32:75:e8:96:c3:99:f9:93:29:
ac:05:7b:3d:c9:42:cc:b4:4e:fd:67:e3:20:6b:1f:
7d:a2:ef:17:e5:68:6c:66:c2:84:29:d6:60:5f:a2:
8c:0c:dd:dd:9e:1d:46:f3:1e:18:03:9c:fa:23:b7:
e6:de:3f:9f:88:3d:a8:8d:b1:5e:6f:72:bb:5c:ca:
58:66:84:0f:a6:57:29:7f:60:6f:29:be:7a:7a:0f:
b5:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:B1:80:00:B3:09:5E:F0:48:19:F5:66:E6:CB:57:7F:8D:2C:88:A6
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wrGAALMJXvBIGfVm5stXf40siKY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b2:cd:dd:a5:35:1d:99:95:8d:3d:db:19:da:4f:7b:a1:02:21:
79:56:b1:cb:4d:0f:63:6e:86:eb:3b:8c:13:ee:ae:07:f9:d7:
b0:8d:e7:8f:0f:b7:81:96:2c:8c:3b:96:81:da:c7:9d:9e:e9:
92:51:28:1f:e2:9a:e6:cf:ea:a2:a0:45:c1:49:9d:fd:9f:9e:
ce:32:7f:a9:eb:62:36:b4:98:e0:45:8a:93:73:67:15:0c:ab:
04:2f:85:89:f6:6e:09:bc:2e:25:0d:c8:28:84:a6:17:b8:d1:
11:c7:51:b5:e7:86:aa:55:66:e4:2e:7c:54:29:5b:e1:0d:7e:
9a:9e:eb:ab:69:03:fd:bc:c5:9c:bf:0f:34:9b:3a:d6:31:35:
dc:89:e0:75:67:be:9b:aa:98:47:3c:b6:a3:9f:1e:61:29:8c:
a2:cf:5e:90:16:36:ac:1a:13:bd:46:55:00:a1:51:8a:3b:a4:
b5:27:62:91:d0:fd:47:1b:1a:3c:c9:40:76:54:df:f5:44:d9:
37:7a:16:bc:c9:3b:c6:b4:b4:28:98:b7:82:ff:1d:fd:fa:bd:
c2:5b:55:a3:8a:fa:4e:b0:1f:6f:02:3c:57:90:ce:4a:7c:fa:
47:f2:fb:a0:ad:67:ff:17:e4:b8:06:c5:fe:ca:5b:57:98:09:
26:de:68:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 18:03:07 2025 by rpki-client