Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wt55tBbasTSsxjCPNQgyiIk_qzc.roa
File: wt55tBbasTSsxjCPNQgyiIk_qzc.roa (raw, json)
Hash identifier: um1Yfag58CnmeOsM+e2uYknz1m9vo9D9ZPEFjiZlEE8=
Subject key identifier: C2:DE:79:B4:16:DA:B1:34:AC:C6:30:8F:35:08:32:88:89:3F:AB:37
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184D70967F8F479F973BF09F77970E710C4
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wt55tBbasTSsxjCPNQgyiIk_qzc.roa
Signing time: Sat 03 Dec 2022 08:10:28 +0000
ROA not before: Sat 03 Dec 2022 08:10:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:d7:09:67:f8:f4:79:f9:73:bf:09:f7:79:70:e7:10:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 3 08:10:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c2de79b416dab134acc6308f35083288893fab37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:53:d4:1b:82:ed:eb:94:4c:91:6f:ba:7d:c4:
6f:eb:ee:9d:ba:04:70:43:20:64:97:31:58:92:92:
89:b7:29:8f:b2:57:6c:f1:b4:81:db:92:47:bc:6c:
32:5b:1f:a8:36:9d:d7:4a:35:d1:6b:b1:61:02:1b:
f7:6f:dd:2d:e4:34:65:9f:89:86:70:7f:40:bc:59:
f1:65:81:73:08:21:17:e2:bf:76:c6:b6:b5:e6:80:
74:c0:43:6c:6f:52:80:77:d4:00:f8:2c:8b:85:23:
91:f0:c5:dc:64:85:22:5c:52:17:70:ae:5e:7b:9c:
ec:dd:a7:c5:64:23:bd:0f:b3:f3:18:f6:11:b6:ec:
e0:d8:cc:96:fd:07:f6:ce:de:b4:c0:23:1f:06:8d:
2c:c9:04:3a:e6:40:e8:5a:7e:c0:6b:10:60:15:f3:
4a:46:88:86:94:16:2c:aa:bf:2d:0a:87:06:45:d7:
53:b7:e8:f1:5c:cc:8f:11:75:3d:05:25:48:5d:13:
1a:df:97:c9:40:be:84:ec:89:42:18:8e:48:6f:ef:
ce:98:6f:f8:73:af:04:c1:2b:f4:d3:0c:c7:f8:3e:
95:23:c4:4b:3f:2a:fa:e9:b8:78:12:b0:fd:f1:7e:
97:09:7b:b4:6a:b2:66:73:64:f4:43:b5:83:78:c3:
90:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:DE:79:B4:16:DA:B1:34:AC:C6:30:8F:35:08:32:88:89:3F:AB:37
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wt55tBbasTSsxjCPNQgyiIk_qzc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9a:3a:05:5a:27:11:e4:d7:ae:ff:1a:3e:47:90:d1:ec:db:1a:
4d:62:21:3f:51:23:d6:8b:d9:18:13:77:31:07:f5:c1:d1:ec:
8a:6b:40:7d:87:54:d0:83:ec:79:ff:a8:42:ad:3c:10:8b:87:
9b:b9:19:b0:4c:ce:bc:54:37:aa:67:17:da:7c:f0:b9:ba:ab:
55:57:8d:fa:75:42:39:92:3f:65:47:c2:9c:4d:08:bc:32:a2:
48:86:2d:d0:d1:5a:40:4e:82:e7:7b:1f:c8:a9:54:c3:21:ee:
16:24:6b:73:4e:ba:c7:20:81:20:0c:a2:b8:f4:95:3d:f6:c1:
9a:1e:73:92:ff:3a:b2:62:69:f7:a9:19:92:94:a0:fe:ae:37:
bf:0a:07:06:b7:1b:13:89:ec:74:8f:87:eb:67:4a:f7:d9:aa:
69:6a:b4:ad:d7:fd:01:1c:ad:11:57:da:63:45:6e:b6:78:eb:
ba:b4:a0:e2:24:14:e4:c8:bc:dd:72:54:a5:20:94:82:d5:4f:
7b:7e:91:3f:22:68:6d:d3:24:b8:8e:6c:02:35:e5:9d:13:11:
5f:ea:1c:12:3f:77:e5:e1:91:0c:0e:5b:79:3f:41:92:f0:94:
ad:3b:0a:db:ad:6b:dc:2b:d4:32:0d:e0:1e:40:ea:33:6e:94:
91:6c:cc:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 07:30:43 2025 by rpki-client