Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ww0XjaYqG5SVqON0pGwXjmJJJI4.roa
File: ww0XjaYqG5SVqON0pGwXjmJJJI4.roa (raw, json)
Hash identifier: Sdxe6dfCWSFgQQbFYicPa/ptP4eO+WOaQB5vEpPceY0=
Subject key identifier: C3:0D:17:8D:A6:2A:1B:94:95:A8:E3:74:A4:6C:17:8E:62:49:24:8E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01882A45724A1829A231BBCDE9AD63788250
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ww0XjaYqG5SVqON0pGwXjmJJJI4.roa
Signing time: Wed 17 May 2023 15:12:54 +0000
ROA not before: Wed 17 May 2023 15:12:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:2a:45:72:4a:18:29:a2:31:bb:cd:e9:ad:63:78:82:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 17 15:12:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c30d178da62a1b9495a8e374a46c178e6249248e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:38:08:43:04:de:8f:a8:65:77:ce:69:33:16:
35:83:82:1e:2c:dd:fd:b2:25:a6:74:92:27:98:a5:
70:ad:ca:0f:55:1c:b4:fe:66:a7:33:18:2b:3d:52:
00:5d:e3:1c:d5:cc:ee:c2:cb:3f:92:27:16:ce:a8:
54:d4:50:c0:5a:be:08:48:18:24:5f:a1:1d:21:3a:
d8:0f:ce:a0:56:f1:a6:8c:b8:ec:63:44:5c:55:15:
ca:f5:fd:84:d9:11:fe:87:4d:0b:ee:f5:db:ff:81:
ff:60:c7:a8:17:78:ec:7b:78:ca:1c:84:60:52:40:
30:04:d7:bf:29:96:d8:0a:ec:a2:55:cd:db:0b:32:
76:ba:80:9d:01:9e:85:dd:c2:63:a9:f8:dc:42:c4:
31:fe:34:d9:cd:ca:7e:65:78:67:f9:41:d2:c6:3c:
e0:b5:27:f7:a9:8c:73:75:50:0c:eb:fc:04:93:41:
82:7f:54:dc:3b:3d:d2:14:96:10:3e:59:23:a0:79:
53:61:68:b6:af:b8:50:44:29:53:9f:cd:f8:74:63:
02:67:1d:68:07:9d:d4:0f:00:40:5f:76:9a:a4:55:
44:0d:34:40:5d:83:e0:5a:e8:87:fc:ce:af:d5:d7:
98:c5:b1:a3:7d:16:0f:94:58:51:3e:af:da:48:15:
8a:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:0D:17:8D:A6:2A:1B:94:95:A8:E3:74:A4:6C:17:8E:62:49:24:8E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ww0XjaYqG5SVqON0pGwXjmJJJI4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
aa:b8:37:7e:e9:ac:c4:06:b3:a6:82:49:ab:16:29:8c:77:df:
bc:e6:82:52:04:15:e8:50:56:d2:46:28:07:b0:ac:6e:1f:e5:
9f:c1:c2:a8:e9:d7:7c:ac:db:77:71:58:4b:73:e5:26:db:32:
d3:cd:00:2c:6e:1e:1d:76:b8:cb:81:38:60:ff:a4:1a:e1:67:
1c:a8:87:55:f5:f6:43:e8:40:9b:7a:23:6d:f6:b3:dc:12:98:
8d:0d:67:fa:88:2d:dd:95:2f:f6:23:20:9a:61:9d:80:73:1c:
16:05:4e:39:2e:8f:1d:c6:b8:33:0e:17:2a:d9:54:71:67:8e:
43:24:a0:32:f6:86:82:d6:04:de:48:18:90:d8:7d:31:5b:dd:
17:a0:be:29:e1:f6:a6:da:08:5e:0d:2c:c0:15:d4:5d:09:01:
ec:51:2b:38:75:be:dd:6e:de:a2:41:db:1d:b2:b0:1e:6b:33:
e4:74:ae:fe:74:d6:d0:9c:b0:06:8e:24:95:7e:86:a3:10:68:
ea:61:c1:f8:c0:21:80:61:99:64:1b:e6:a4:c1:69:75:80:1e:
4b:8c:8d:2c:81:5c:a4:fc:b5:63:b3:d7:7d:cd:67:8f:71:fe:
1d:98:09:f1:82:27:98:79:73:73:95:0c:e7:19:10:bc:f4:0e:
37:fb:1c:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 10:58:48 2025 by rpki-client