Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/b9e9fa-accd-461f-b183-eda63010b77f/1/WqbqJwfPKfZFUmqUFdPyGRqBGYU.roa
File: WqbqJwfPKfZFUmqUFdPyGRqBGYU.roa (raw, json)
Hash identifier: I3cgVwTthu68j81FI8JtIFrzJeTdzyqmy8q20mbjiig=
Subject key identifier: 5A:A6:EA:27:07:CF:29:F6:45:52:6A:94:15:D3:F2:19:1A:81:19:85
Certificate issuer: /CN=dc773480eb41fdbc8174d48af09c6b7f089d1349
Certificate serial: 01203508
Authority key identifier: DC:77:34:80:EB:41:FD:BC:81:74:D4:8A:F0:9C:6B:7F:08:9D:13:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Hc0gOtB_byBdNSK8JxrfwidE0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/b9e9fa-accd-461f-b183-eda63010b77f/1/WqbqJwfPKfZFUmqUFdPyGRqBGYU.roa
Signing time: Mon 07 Feb 2022 13:18:09 +0000
ROA not before: Mon 07 Feb 2022 13:18:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201942
IP address blocks: 213.232.232.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18887944 (0x1203508)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc773480eb41fdbc8174d48af09c6b7f089d1349
Validity
Not Before: Feb 7 13:18:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5aa6ea2707cf29f645526a9415d3f2191a811985
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ac:c2:69:a0:2c:d7:27:5d:23:f2:60:eb:b3:
c5:31:02:e8:60:ed:0a:2c:92:83:6f:da:d2:b1:37:
83:0f:ce:d5:92:38:31:8f:ee:25:8a:50:c7:34:46:
36:6f:eb:2b:1e:4d:2b:e0:eb:29:bf:60:6c:c3:08:
83:11:83:3d:7a:c1:82:e8:2c:d5:24:e4:16:05:61:
58:7a:c2:0d:99:9c:21:df:1f:f5:38:4b:ae:99:89:
c5:0c:2f:4c:21:09:cf:f0:56:13:26:07:b3:68:dc:
7d:48:1f:30:ee:8d:10:1b:b9:5e:22:b5:d5:fc:38:
d3:7f:96:82:fe:a3:19:52:6e:0e:4b:85:f0:fc:7d:
42:d2:6f:54:99:8f:60:44:7d:97:89:99:1c:aa:2a:
6b:3c:6d:bf:2f:de:1f:aa:77:3c:80:8b:03:aa:d9:
e6:c7:be:c7:1f:74:dc:6d:0c:1a:62:da:36:d3:7e:
0c:cc:d6:17:de:4d:f1:a0:02:0f:16:46:bb:89:75:
e8:58:36:9e:1a:93:2a:84:96:2c:e5:0a:67:7e:b6:
87:67:7c:dc:e0:96:3a:d4:a8:ea:14:28:d7:95:18:
86:6f:bd:b3:c5:80:00:9e:1a:47:d6:8a:78:9e:5c:
ed:e6:e3:82:2a:53:5c:60:df:61:ad:0a:cb:b3:72:
8f:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:A6:EA:27:07:CF:29:F6:45:52:6A:94:15:D3:F2:19:1A:81:19:85
X509v3 Authority Key Identifier:
keyid:DC:77:34:80:EB:41:FD:BC:81:74:D4:8A:F0:9C:6B:7F:08:9D:13:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Hc0gOtB_byBdNSK8JxrfwidE0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/b9e9fa-accd-461f-b183-eda63010b77f/1/WqbqJwfPKfZFUmqUFdPyGRqBGYU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/b9e9fa-accd-461f-b183-eda63010b77f/1/3Hc0gOtB_byBdNSK8JxrfwidE0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.232.232.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:f1:46:7c:de:f4:79:ba:ff:ce:95:c6:91:c6:a6:eb:bd:52:
5a:84:29:a9:53:63:46:46:38:cb:b4:ac:4b:be:25:f8:40:c1:
19:1c:f6:24:21:2f:07:5d:c9:d2:68:58:fb:4d:a1:22:11:6d:
cb:49:24:e4:40:9e:04:8c:eb:63:a0:c7:70:71:d3:51:7b:23:
a6:c6:8d:f7:f4:0e:d1:d2:b6:19:5d:4b:ab:e7:29:61:d6:b9:
01:ab:f1:4e:b0:79:da:38:a6:95:44:5e:b4:5b:5c:46:df:ec:
22:37:b3:54:fc:51:30:9b:00:30:18:77:a7:89:2d:ba:18:4c:
6e:28:d6:1c:b6:8e:78:e9:91:ec:0d:48:8f:80:6c:66:ee:8a:
98:d8:e4:61:bc:22:c1:8e:73:14:66:bc:7f:cf:82:9c:4c:65:
d3:8b:dd:5c:51:b9:5e:79:b0:dc:8f:3b:51:0c:19:87:b8:85:
7f:2c:d1:51:34:c8:47:65:2e:a9:ea:c2:0b:98:2e:4a:b5:16:
d3:b6:06:89:6c:fa:f3:fe:5e:f4:ef:9a:cc:70:1e:7a:5b:68:
27:da:3a:3d:02:b8:de:0f:29:e6:8f:a5:77:ed:f9:b0:b8:38:
8c:da:66:ed:05:29:eb:2b:f5:6a:76:a9:54:67:85:83:45:fc:
1a:14:6f:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:01:09 2025 by rpki-client