Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/WV7wR7EVOOJ9rV1_FMQlnvN0bvc.roa
File: WV7wR7EVOOJ9rV1_FMQlnvN0bvc.roa (raw, json)
Hash identifier: GiXVbOurq3HNHoE/H7c8PwqWL5PYntTbEziVxR9gNvU=
Subject key identifier: 59:5E:F0:47:B1:15:38:E2:7D:AD:5D:7F:14:C4:25:9E:F3:74:6E:F7
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01835B79281743360F5FE64C7A453A9B67F6
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/WV7wR7EVOOJ9rV1_FMQlnvN0bvc.roa
Signing time: Tue 20 Sep 2022 15:16:50 +0000
ROA not before: Tue 20 Sep 2022 15:16:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:183:50b3:5643/128 maxlen: 128
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:183:1279:659d/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:5b:79:28:17:43:36:0f:5f:e6:4c:7a:45:3a:9b:67:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Sep 20 15:16:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=595ef047b11538e27dad5d7f14c4259ef3746ef7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:43:b4:b3:42:f8:71:57:71:1a:74:ad:bd:e3:
19:66:45:9a:b9:a8:72:2f:b1:33:f2:e4:30:14:8b:
06:4a:03:b1:77:9a:e6:b6:a6:a6:d2:3e:c3:f5:a2:
51:a4:ea:d5:28:60:2d:a8:63:54:fa:a0:8d:9f:88:
2e:08:af:b9:cb:8a:94:87:09:7d:3d:c1:9c:2b:70:
65:87:db:cb:8d:21:cc:fb:2a:cd:25:bf:df:c7:fd:
28:f4:fa:02:be:03:74:90:bb:91:d5:8d:fb:c1:44:
82:58:f1:a5:64:c6:27:f5:68:53:79:e5:ac:4c:1b:
37:7a:91:12:f7:5e:27:85:56:56:08:5b:3b:53:ac:
f3:54:d4:23:4a:71:a2:32:5b:da:1b:b1:b1:7d:25:
92:1d:a8:a3:1e:04:56:48:fd:0c:13:02:b8:15:22:
90:be:f6:e1:a3:d1:db:5d:b8:da:f2:ac:ee:a3:a1:
76:63:57:4a:5e:52:7c:24:24:27:1e:15:20:18:90:
b5:9f:29:d3:85:42:aa:9b:0a:1e:27:51:32:f7:16:
dc:0d:16:f1:0d:40:92:18:b5:1f:22:ed:bf:87:32:
ae:b5:93:dc:7c:f0:ff:89:50:5a:28:8c:cb:32:67:
08:09:99:53:2c:0e:f0:07:10:8a:c7:6f:2a:af:a8:
29:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:5E:F0:47:B1:15:38:E2:7D:AD:5D:7F:14:C4:25:9E:F3:74:6E:F7
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/WV7wR7EVOOJ9rV1_FMQlnvN0bvc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4a:9c:4d:a1:5c:aa:14:38:db:2c:8b:a7:62:1d:7a:4a:fc:e0:
c7:6d:34:6c:cf:bb:b0:dc:6a:b4:00:04:7e:e6:2c:98:f2:64:
8e:fe:38:87:95:3c:af:23:12:c5:0f:3c:89:62:91:90:61:ca:
d0:6f:31:57:a4:89:85:c7:7e:52:18:c3:b5:06:3c:70:da:d4:
78:be:ac:67:5f:9f:97:30:5e:bc:6a:24:d3:46:6e:bc:37:02:
4b:b4:a9:c0:c4:b7:a7:0e:6f:a6:92:15:2b:cf:43:d3:08:1c:
ac:8f:0c:fc:71:95:26:27:27:2a:c5:27:57:8c:7f:e8:d0:d2:
1c:41:ed:89:fa:e9:a8:01:6e:69:fc:98:4c:21:0e:ca:c2:fc:
fa:07:c7:ab:14:69:cd:44:a2:ec:58:b3:20:73:46:81:2b:dd:
77:57:4b:1c:6f:82:21:4e:9e:df:b4:5f:57:69:88:8a:26:35:
b7:82:4b:b3:28:7f:a7:ee:11:9c:31:b9:51:4c:28:55:de:6c:
c1:80:e4:34:25:9d:38:39:fa:20:f5:5b:79:65:db:5e:fc:e7:
3f:fe:2c:67:bf:a3:6c:a4:4c:ff:c2:25:a9:be:bf:1f:84:50:
5a:c4:fa:72:5e:0e:ff:af:96:30:fc:41:76:92:85:38:6c:e2:
55:5d:18:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:08:32 2025 by rpki-client