Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wz_ynqp9Eu4GCAy_HGiMqC-YXSc.roa
File: wz_ynqp9Eu4GCAy_HGiMqC-YXSc.roa (raw, json)
Hash identifier: 8QCd6dbC7TO2YV4GR8LG609orE2b9Orv/TlCgctWGVk=
Subject key identifier: C3:3F:F2:9E:AA:7D:12:EE:06:08:0C:BF:1C:68:8C:A8:2F:98:5D:27
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018940CB95C9D27DFD4977BCBFF746FD63E4
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wz_ynqp9Eu4GCAy_HGiMqC-YXSc.roa
Signing time: Mon 10 Jul 2023 17:13:51 +0000
ROA not before: Mon 10 Jul 2023 17:13:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:40:cb:95:c9:d2:7d:fd:49:77:bc:bf:f7:46:fd:63:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 10 17:13:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c33ff29eaa7d12ee06080cbf1c688ca82f985d27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:de:28:97:c9:a7:9c:48:ce:0d:2a:20:49:86:
d0:a6:75:94:33:37:f6:20:95:54:24:ba:a6:36:fc:
9a:2a:b5:42:1e:82:5d:6f:3b:eb:01:d3:bb:2c:6f:
c2:fd:0a:b0:2e:5e:38:94:55:4a:5c:47:02:c8:06:
9a:2d:f4:6f:0e:ce:7e:f7:49:98:4f:9b:f0:d7:31:
2e:19:c2:82:a9:f2:7e:16:bb:8a:16:d8:33:79:4b:
a8:fc:a8:4e:6f:60:95:70:4e:4a:f8:8d:ee:3c:18:
18:c4:b1:c7:01:e1:94:ca:62:b6:bc:62:62:01:7d:
52:e7:e9:92:97:46:1b:c5:83:56:ac:fc:8e:80:8c:
5e:6a:fb:14:9e:36:91:f0:87:05:19:ba:2f:2b:89:
5b:d3:b0:5f:13:98:08:0f:d0:3c:de:ab:21:c5:bb:
5c:1d:38:62:0a:ab:68:07:f1:dd:c9:40:64:4d:18:
75:28:32:6e:a6:bc:dc:31:45:34:b4:03:c9:50:fb:
23:c9:ce:56:a6:bc:88:13:d5:39:d2:0b:de:e7:9b:
54:f6:e3:b7:54:67:ae:4f:5a:e9:a3:84:40:dd:d9:
4c:ed:ef:7e:6d:cf:7f:08:5b:09:26:9a:05:0b:9a:
76:5c:74:25:d6:79:2f:ae:b7:19:25:97:f7:0e:a7:
94:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:3F:F2:9E:AA:7D:12:EE:06:08:0C:BF:1C:68:8C:A8:2F:98:5D:27
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wz_ynqp9Eu4GCAy_HGiMqC-YXSc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
20:27:8d:57:1e:46:aa:16:83:9e:03:ee:3f:10:0c:ba:eb:57:
26:6c:ae:6d:bb:bc:8c:9b:48:0a:10:87:45:76:77:50:2d:f7:
51:6a:85:b8:9c:53:b3:20:ed:40:ad:e9:92:4b:81:e8:f3:ed:
64:c5:4c:e6:16:13:40:95:e3:71:7c:64:2a:e1:bb:89:a2:29:
4e:2d:ad:5c:05:9c:a4:57:f2:64:4f:f5:db:9e:7a:8e:2d:78:
0d:0a:72:94:de:84:ac:92:c8:5f:12:c0:d5:cf:dd:2a:ca:71:
6f:72:6d:91:b5:25:56:1d:82:77:6a:f0:12:89:7b:77:4d:35:
6f:43:d1:36:f0:55:4a:d8:3f:64:89:50:75:a4:2a:65:dc:af:
6b:f5:b3:04:54:f0:56:c4:8b:db:af:2d:ed:a9:b7:17:c9:e0:
b7:74:75:f5:8d:15:e8:fa:58:b7:62:81:bc:3f:bd:73:0a:e3:
0d:d4:39:8e:ee:84:dd:74:32:e2:d8:d0:ca:38:19:ea:b4:71:
02:a2:b2:ec:bd:1e:56:bf:9d:fb:8c:57:53:46:db:19:97:66:
bc:5e:84:e9:50:ce:98:89:2b:1f:81:df:69:68:e5:28:4e:94:
bd:20:b4:f1:b5:d8:88:52:7a:5b:f2:03:72:a1:3c:77:ee:43:
96:49:8b:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 01:26:08 2025 by rpki-client