Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/WJDXF7_28mOJV_jQN2IGPZcOpJY.roa
File: WJDXF7_28mOJV_jQN2IGPZcOpJY.roa (raw, json)
Hash identifier: OmQWmvW4T+xKyxbK0itu8WKZitdb1YZ/qBTT22UMz2E=
Subject key identifier: 58:90:D7:17:BF:F6:F2:63:89:57:F8:D0:37:62:06:3D:97:0E:A4:96
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01869331487A84CD02CED5CA7A627438D440
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/WJDXF7_28mOJV_jQN2IGPZcOpJY.roa
Signing time: Mon 27 Feb 2023 14:05:25 +0000
ROA not before: Mon 27 Feb 2023 14:05:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:9330:b263/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:93:31:48:7a:84:cd:02:ce:d5:ca:7a:62:74:38:d4:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 27 14:05:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5890d717bff6f2638957f8d03762063d970ea496
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:78:cc:c3:71:99:45:a8:7e:40:e4:a7:3b:69:
a3:aa:6b:91:c9:db:3f:3c:4b:04:22:df:02:fc:e4:
48:6b:44:2a:fd:ce:cf:42:38:61:40:68:5e:b1:72:
07:d5:52:59:07:98:8d:4a:33:97:03:4a:e9:af:50:
2d:2c:f3:94:34:f2:45:33:f8:f6:7d:6c:22:6b:01:
6c:7f:8e:85:e4:1c:cd:40:a8:27:2e:bf:aa:57:f2:
75:f4:a9:e5:00:ad:21:be:65:90:13:fc:78:aa:1b:
02:f0:a2:28:c3:61:14:12:8b:07:4f:f9:7e:5f:dc:
62:cb:aa:de:20:36:5f:94:86:ee:94:8a:25:f0:a6:
22:f5:b7:e2:f4:e4:02:92:ad:ab:22:85:82:06:f8:
6a:81:a3:e4:c0:fa:1b:f3:e2:b2:ec:b5:f6:ae:9c:
72:e3:27:e0:73:fa:39:15:2b:91:83:6a:75:73:21:
b1:72:57:a5:90:e3:25:55:50:53:06:b1:ad:1c:46:
56:4a:f7:ca:f6:a0:e8:0c:4e:6b:3e:47:6f:d8:2a:
82:8d:03:ec:a9:6b:5b:cb:99:14:41:07:a9:b7:9d:
97:d1:90:f9:f3:36:3f:a4:f6:fd:a1:04:44:2f:7d:
ca:ed:c7:a8:72:68:51:f2:bb:c2:b4:ae:a0:32:7c:
2d:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:90:D7:17:BF:F6:F2:63:89:57:F8:D0:37:62:06:3D:97:0E:A4:96
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/WJDXF7_28mOJV_jQN2IGPZcOpJY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
31:81:23:fe:96:45:33:01:2c:db:39:9e:33:33:0c:1d:48:d1:
e9:2d:e2:a6:f1:1c:f6:e1:43:00:46:72:a6:1d:f4:e4:be:7c:
a8:01:f3:b7:ea:3e:60:69:8e:54:9a:03:eb:77:c7:22:ce:bc:
51:da:53:ae:3c:86:40:f2:e2:8a:aa:45:34:0e:95:ed:e4:db:
af:13:8b:6a:ee:d8:69:78:fc:2e:56:22:c9:8e:c2:d3:98:8a:
4c:98:54:8f:35:98:df:b0:68:4d:4d:41:f8:95:2e:4f:1b:63:
93:41:cf:44:d0:18:e9:5f:9b:9e:77:b8:bd:99:ae:f5:2f:70:
18:a1:f2:55:c7:0c:3f:3c:2e:2f:dd:e5:89:59:18:67:d4:34:
42:0a:5b:03:b4:91:60:7f:d5:68:de:e7:06:f2:1c:cd:0f:5e:
7b:cc:2f:88:14:cf:3c:69:1f:6a:0a:90:8c:58:4b:1b:3d:e1:
47:49:48:60:b4:1d:44:77:95:11:96:ee:d5:b0:4d:7a:46:df:
14:c4:e9:c5:f1:30:dc:ce:bd:b6:8d:61:7e:69:b6:41:59:92:
7a:34:77:e1:30:92:1f:12:72:f4:44:42:7e:0f:55:8f:e0:ab:
40:be:35:53:2d:e7:6c:15:9e:60:95:38:b2:23:d0:7c:d9:94:
10:42:0c:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 02:42:52 2025 by rpki-client