Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/WBq7AA9g-ReywTRGUFYS7jJNIQ8.roa
File: WBq7AA9g-ReywTRGUFYS7jJNIQ8.roa (raw, json)
Hash identifier: ZaQAbi2wTlO/6/zsaZ1glZfRSWeWSTT0jt7V/aexy4E=
Subject key identifier: 58:1A:BB:00:0F:60:F9:17:B2:C1:34:46:50:56:12:EE:32:4D:21:0F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186F659370C640F6869589341BD66E994A0
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/WBq7AA9g-ReywTRGUFYS7jJNIQ8.roa
Signing time: Sat 18 Mar 2023 20:11:27 +0000
ROA not before: Sat 18 Mar 2023 20:11:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:f6:59:37:0c:64:0f:68:69:58:93:41:bd:66:e9:94:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 18 20:11:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=581abb000f60f917b2c13446505612ee324d210f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:34:e7:4a:62:89:24:d2:d8:86:3c:69:16:fd:
8f:20:6e:cd:e8:73:42:d2:01:52:d4:a2:45:02:16:
d9:70:ba:4d:d5:5d:00:60:2c:3d:70:aa:09:fb:fe:
1c:7a:45:28:8c:70:af:ef:b5:ff:51:e5:1e:60:7c:
21:da:11:9d:a5:63:44:51:c6:f8:15:4a:06:10:ec:
8a:d6:e7:27:4d:b7:27:0e:f6:d3:22:73:d5:c3:4d:
df:d1:b8:65:41:34:58:ec:68:35:17:47:70:73:5e:
81:10:1b:1c:d5:9e:85:a5:e0:52:30:82:59:f0:e7:
cc:dc:39:a2:24:52:7e:c3:1e:4b:31:a0:2d:f1:d1:
16:1e:e3:1b:18:2c:91:de:d0:0c:81:70:ce:e7:ea:
a6:ea:42:97:48:8a:22:30:db:9a:48:8d:04:d7:52:
72:09:2d:d2:b6:a7:d2:8b:8d:6d:9f:97:ed:7c:39:
a2:cb:b2:ba:de:3d:64:e0:7a:57:b6:c1:9e:3f:39:
ae:24:2f:42:4f:a9:44:2f:5a:a9:fe:68:b5:87:ef:
ce:14:6a:5f:ec:6a:32:21:ac:06:d7:71:5a:15:6f:
9a:08:23:56:ba:ca:6f:7b:5c:ad:9e:b3:0b:68:0c:
e3:0a:4f:9b:9d:c0:cd:43:a3:f2:a6:d2:db:7d:07:
d8:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:1A:BB:00:0F:60:F9:17:B2:C1:34:46:50:56:12:EE:32:4D:21:0F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/WBq7AA9g-ReywTRGUFYS7jJNIQ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1d:9d:63:ae:15:73:01:f0:01:75:1c:bd:1e:fa:33:46:e4:97:
d9:4f:a7:f5:ba:61:d2:0e:fe:c5:22:d5:b2:91:46:a1:00:5c:
20:6b:d8:dd:99:14:da:28:ee:20:e4:08:31:01:86:96:2c:97:
0e:6a:fb:11:75:50:ea:a8:7e:d1:2b:35:eb:77:c4:25:e9:29:
92:92:f6:0b:e4:16:e9:77:86:87:be:02:3b:92:22:f3:b4:49:
70:89:81:b2:74:d9:76:1f:ce:b7:af:14:ba:55:08:00:03:fb:
fa:f7:b5:3d:f4:b4:6f:34:95:5e:6f:46:4c:91:e7:26:d3:ec:
cb:fb:cc:69:83:cd:d5:91:9c:fd:07:d3:20:8b:e3:12:d9:6e:
bc:20:18:c3:8d:57:a8:1d:04:52:a5:cc:f9:44:a0:39:91:0b:
56:5b:7b:1f:b9:b9:f3:1a:7e:0f:9d:18:ec:7d:61:1d:3a:31:
5e:7f:f3:f1:49:81:87:89:d9:dd:c7:2d:f3:1f:99:15:76:06:
f3:01:b4:c6:31:fb:a3:01:0d:c1:f5:fe:6f:41:79:3e:61:fe:
22:f3:26:06:7f:69:10:55:15:e6:fb:60:1c:d6:24:bd:9c:f2:
2f:92:1a:54:f1:b0:2a:98:25:c9:c0:a8:dc:9a:b1:fe:b7:b0:
13:bb:91:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 10:41:43 2025 by rpki-client