Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/WAsQTjyGFrqyI_0OMTkZBu-9fY0.roa
File: WAsQTjyGFrqyI_0OMTkZBu-9fY0.roa (raw, json)
Hash identifier: UOEB1mJf3Y8tbb3u5ZIkzakETf4XAo8nqe6CggP+LIc=
Subject key identifier: 58:0B:10:4E:3C:86:16:BA:B2:23:FD:0E:31:39:19:06:EF:BD:7D:8D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189736D42FA6C3C82F9F1EF913F64AA1B19
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/WAsQTjyGFrqyI_0OMTkZBu-9fY0.roa
Signing time: Thu 20 Jul 2023 13:11:27 +0000
ROA not before: Thu 20 Jul 2023 13:11:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:73:6d:42:fa:6c:3c:82:f9:f1:ef:91:3f:64:aa:1b:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 20 13:11:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=580b104e3c8616bab223fd0e31391906efbd7d8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:fc:6c:db:ac:f7:b2:ff:28:10:86:87:8d:4e:
20:ad:8e:0b:8c:bc:90:ae:31:11:f6:00:4e:57:29:
eb:c8:e6:a8:99:bb:80:40:17:89:d1:28:0a:89:6b:
91:25:0e:20:e9:a9:cc:5f:7c:4d:40:f4:9d:70:33:
ee:a2:5a:f0:e7:04:08:b7:c9:ab:59:39:48:8e:22:
2b:f3:9a:e8:1d:04:01:01:41:62:1f:45:ca:33:33:
fa:ec:e1:0b:c4:06:3b:32:56:49:40:02:41:0a:c9:
4c:a3:ef:1e:4f:0c:4c:1f:e5:4a:83:d6:bb:11:e0:
56:29:32:c5:71:3d:33:d3:ae:7e:14:61:60:c4:6a:
86:2a:3d:0a:00:85:66:83:33:97:d7:64:2d:7b:f2:
6f:06:03:bc:9a:f4:94:bc:09:69:08:d7:7b:78:a5:
09:66:6d:a7:4f:a3:41:16:9d:dc:1d:e6:34:4e:eb:
8a:b2:ef:f2:8e:84:0f:12:58:18:45:d7:3f:67:f0:
a8:ac:4f:0a:85:b4:bf:d2:aa:3f:0a:10:00:d2:ae:
a1:2e:07:2c:f5:ee:5f:8f:c3:c3:8e:6a:4e:ef:16:
34:6c:df:28:fe:0b:e4:6e:62:df:fe:da:3f:50:e0:
c9:12:48:81:1e:b0:35:37:e9:42:9b:87:bf:2e:71:
56:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:0B:10:4E:3C:86:16:BA:B2:23:FD:0E:31:39:19:06:EF:BD:7D:8D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/WAsQTjyGFrqyI_0OMTkZBu-9fY0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8f:91:ff:c6:95:7a:7b:94:b4:05:16:11:75:57:8a:86:1d:bf:
cb:4a:90:7d:cf:b5:f4:a0:67:6b:59:d5:57:f8:cb:56:8c:f9:
c1:d3:6c:49:af:56:8a:42:7e:c6:25:3a:3a:a1:28:71:ec:a3:
bf:98:50:2f:9f:e3:61:39:95:ca:b5:72:46:11:d4:12:c1:8e:
d7:9c:97:a0:eb:49:80:35:64:68:7f:b4:b8:b2:7b:81:52:27:
6f:6e:53:b2:5c:2e:df:1c:09:e5:c7:59:36:66:c8:b4:97:ac:
9b:a2:37:4f:18:9a:8f:28:1c:e2:14:9b:a3:96:fd:3d:e8:26:
a8:d4:01:ce:48:2a:fd:29:c5:6d:40:7b:da:c4:cb:b1:80:b5:
14:6d:36:d8:c9:84:2d:11:ec:6e:71:2c:93:b6:43:3e:94:0b:
b5:0c:4a:6e:0e:73:43:c8:24:a6:34:4e:e6:5d:c6:56:0b:30:
ca:7a:a8:ac:27:20:25:05:34:15:22:f1:18:7a:a5:ff:f9:07:
28:0e:39:5f:f7:28:96:72:e7:3b:3c:1e:02:b0:14:91:d3:93:
f4:6e:ee:d1:96:71:11:da:2d:43:c3:f5:94:03:f9:44:af:7e:
be:7e:ab:1f:de:09:c2:8b:b3:58:81:a3:ee:d5:51:43:c6:27:
1b:45:52:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 00:57:17 2025 by rpki-client