Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/WYrHalm_mqzXw9DMbwQjckKRtX8.roa
File: WYrHalm_mqzXw9DMbwQjckKRtX8.roa (raw, json)
Hash identifier: DV+GZe3p43tM+lX84Oyt6HVOs4EI6SV6FXD6k+AZtWI=
Subject key identifier: 59:8A:C7:6A:59:BF:9A:AC:D7:C3:D0:CC:6F:04:23:72:42:91:B5:7F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01851D2EA74A8F011EDBBD9506FFC945BF03
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/WYrHalm_mqzXw9DMbwQjckKRtX8.roa
Signing time: Fri 16 Dec 2022 23:04:34 +0000
ROA not before: Fri 16 Dec 2022 23:04:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:185:1d2e:5b97/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:1d:2e:a7:4a:8f:01:1e:db:bd:95:06:ff:c9:45:bf:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 16 23:04:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=598ac76a59bf9aacd7c3d0cc6f0423724291b57f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:8b:5a:a5:06:dc:54:b6:36:41:a8:10:03:95:
ae:e2:5b:4f:13:65:79:0d:68:f4:e6:78:58:e0:2f:
be:87:f4:fb:ac:c5:42:0b:f7:21:2b:0a:90:52:02:
e7:fa:bc:1d:9e:d9:cc:cf:d8:f8:c3:29:4d:6e:9e:
14:d6:74:56:5b:79:08:22:0c:7b:8e:1a:db:0f:e7:
ca:47:35:2a:91:f1:8f:2b:6d:fe:eb:c1:61:dd:6e:
16:12:cd:8d:80:6c:e6:da:a6:c0:55:1a:2c:9c:88:
6c:bd:71:e3:81:f2:92:13:f3:83:46:ed:d5:d6:28:
a3:57:03:d1:ec:a2:e8:9c:d7:42:89:5e:5d:62:d1:
0c:d7:62:86:6f:be:fd:e1:c5:33:4e:47:fe:ad:15:
85:d9:de:c4:27:cc:57:8b:9f:5a:81:b3:e0:28:08:
39:b0:ca:a2:71:b5:f2:03:8f:3a:62:61:7d:ed:e0:
d8:a5:f8:1a:f1:b3:8d:9f:bc:5b:4c:ca:c8:18:62:
4f:af:96:a8:e5:d8:bb:e4:31:92:7f:a8:0a:de:3e:
8e:df:73:b8:19:79:a5:bd:4d:12:65:3d:6e:28:f1:
c6:35:b1:9f:88:67:b0:7e:15:15:db:f8:2a:ad:b9:
7c:5f:19:f2:c7:42:6b:a4:a6:2c:1e:cd:b8:06:04:
a6:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:8A:C7:6A:59:BF:9A:AC:D7:C3:D0:CC:6F:04:23:72:42:91:B5:7F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/WYrHalm_mqzXw9DMbwQjckKRtX8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6e:0b:2a:5f:34:04:8a:9c:90:34:de:e8:af:44:45:3e:81:66:
01:5f:c6:0c:5a:89:c7:41:24:5d:85:c1:32:69:27:50:59:5e:
64:ce:7f:5d:df:4f:e0:0f:4a:5b:e8:28:91:c0:cd:cb:ed:b7:
d3:61:03:67:fb:dd:04:ca:0f:13:77:c2:d2:c8:27:6f:f8:05:
ac:f5:a4:44:0b:db:dd:b5:a5:aa:a4:7b:21:48:e2:83:d5:aa:
0e:d8:50:ca:63:57:e8:68:d7:a6:4e:fe:da:b6:4d:6d:6a:aa:
af:74:56:e0:56:6d:05:9a:47:74:7c:d0:68:e7:ff:70:a4:8d:
ed:c2:3d:ac:cd:16:05:30:f1:23:96:a4:c4:10:8a:6f:dc:cc:
2b:a8:5c:f2:16:69:5d:f9:e7:3e:ec:ba:37:1e:74:df:ff:77:
bc:dd:69:d2:2e:38:59:c9:1f:cb:44:c9:94:95:1a:73:92:24:
48:2c:82:ce:9f:7f:a8:10:27:a2:43:10:8a:43:50:61:4e:c3:
d7:cb:a0:5a:e0:8a:6f:12:d8:00:cf:97:0a:22:81:96:a4:fb:
70:93:7f:da:92:55:1d:ea:23:f5:cf:24:f9:23:b6:22:08:db:
2f:2b:0b:7c:4c:b7:d1:11:76:d6:bd:ad:fc:e5:9c:74:70:2b:
5a:9c:50:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 23:36:05 2025 by rpki-client