Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/NDCAWimpAVP4kiaECM04iGwant4.roa
File: NDCAWimpAVP4kiaECM04iGwant4.roa (raw, json)
Hash identifier: kvctMd8TypnhPxsMayuaXtDrh015T/n94Mpm66KDxAE=
Subject key identifier: 34:30:80:5A:29:A9:01:53:F8:92:26:84:08:CD:38:88:6C:1A:9E:DE
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187B0632A5C1C86CB29F5B7C7D7B0C22462
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/NDCAWimpAVP4kiaECM04iGwant4.roa
Signing time: Sun 23 Apr 2023 23:11:41 +0000
ROA not before: Sun 23 Apr 2023 23:11:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:b0:63:2a:5c:1c:86:cb:29:f5:b7:c7:d7:b0:c2:24:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 23 23:11:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3430805a29a90153f892268408cd38886c1a9ede
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:de:5b:20:91:26:38:06:77:62:43:3d:ae:0b:
6f:c0:a5:2b:eb:cd:73:e4:3d:af:69:56:ae:54:00:
dc:e8:07:15:09:49:08:54:83:d6:f4:db:7e:c1:34:
32:de:98:ae:1a:40:b5:17:ee:06:4c:85:4c:fa:66:
4b:6c:22:e6:7a:a2:79:9c:2b:76:4e:00:49:3e:7c:
8a:b5:7f:e3:ac:64:1f:f2:de:bc:44:b6:a4:8b:f4:
db:f9:a4:c3:65:f4:3c:08:c5:3d:fa:0b:26:c5:08:
3f:07:84:c3:a6:bd:9f:4d:7f:60:d6:b0:15:1a:92:
7f:98:16:cf:56:b2:e7:19:8e:27:19:53:d6:64:0d:
50:d8:83:3c:27:28:3d:b2:a4:49:80:a4:da:4c:3a:
84:35:ae:4e:68:57:bb:1c:e7:bb:1f:24:ce:2c:15:
2b:3e:db:7b:f7:c0:71:cc:c5:61:06:15:3b:0d:2a:
07:42:f1:e9:15:db:48:08:e0:6f:3b:7e:eb:4c:2a:
1f:f9:96:7e:28:18:d3:80:2e:79:9d:6e:36:d3:38:
e4:bd:d1:2b:7b:08:03:fe:a0:6a:45:c0:c0:0e:d3:
a4:87:76:2a:90:98:e7:55:c9:cf:db:09:f0:fb:79:
2f:e0:2e:8e:be:96:08:5e:96:1c:29:2a:3a:8b:83:
1a:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:30:80:5A:29:A9:01:53:F8:92:26:84:08:CD:38:88:6C:1A:9E:DE
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/NDCAWimpAVP4kiaECM04iGwant4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6f:61:23:4f:0e:fe:23:42:c0:9f:e7:20:8a:3b:db:af:12:71:
ce:44:0c:49:da:f4:a0:e0:12:5d:59:4a:87:5f:bf:e7:df:06:
81:df:73:7f:b0:00:44:a1:94:cf:42:fa:5c:86:90:2a:2c:5b:
6f:6b:de:1d:93:4f:28:e5:ff:86:5c:5b:1d:45:9b:23:9b:8b:
69:b2:be:3e:18:08:c7:65:40:7b:aa:4e:c8:6d:7b:e9:60:29:
0e:ad:c7:0b:dc:98:1e:ee:c0:07:1d:8e:04:6f:02:1b:fa:b6:
6e:ea:fe:12:3b:90:c2:71:48:23:cc:4f:40:24:ae:ff:7a:35:
80:15:cd:85:86:67:88:39:83:43:6c:45:31:ae:62:74:02:26:
d9:09:d8:78:d6:54:c3:6a:4b:d8:d0:3d:4c:6a:d1:cc:0b:2d:
ee:e1:a9:0f:ac:59:fa:94:10:fa:13:ea:dc:f7:ed:c7:bc:ce:
48:57:9f:3e:1d:ab:8f:bc:0e:25:26:a3:58:c9:85:7c:60:ee:
df:27:1c:72:d2:e2:9e:72:eb:3f:2b:af:7a:4d:53:b5:26:af:
90:3f:25:3c:d7:f8:25:bb:8e:9e:52:52:0d:70:c3:82:00:27:
00:37:0c:cd:b0:a5:23:6f:23:cf:31:02:e2:d5:33:11:3f:3b:
95:71:2a:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 16:19:11 2025 by rpki-client