Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/WZzszBA9Gt81h4AolvXC3ZNNnaY.roa
File: WZzszBA9Gt81h4AolvXC3ZNNnaY.roa (raw, json)
Hash identifier: 7Wik+CJiS27JhB9kPe5ftbHLlYjqfYeZGsZ+jESJWEA=
Subject key identifier: 59:9C:EC:CC:10:3D:1A:DF:35:87:80:28:96:F5:C2:DD:93:4D:9D:A6
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0182482B731D8AB109899C8A8876A2843888
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/WZzszBA9Gt81h4AolvXC3ZNNnaY.roa
Signing time: Fri 29 Jul 2022 04:16:23 +0000
ROA not before: Fri 29 Jul 2022 04:16:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:48:2b:73:1d:8a:b1:09:89:9c:8a:88:76:a2:84:38:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 29 04:16:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=599ceccc103d1adf3587802896f5c2dd934d9da6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:3d:35:5b:27:a3:eb:66:1c:0f:23:cf:b5:c8:
3c:a1:ed:0e:b2:27:7c:c1:1d:19:d4:54:e1:8f:5a:
a5:05:ad:e5:92:f0:1e:aa:81:d0:28:f6:72:f1:ec:
9d:5d:13:bf:9f:7d:d2:c6:5d:50:54:b3:04:5c:52:
53:ee:29:63:32:fd:a3:a2:5a:8c:1d:22:7d:86:20:
9b:85:b3:b1:d1:26:fc:13:b8:2e:be:1d:a3:e5:6f:
fb:59:c1:12:c9:59:d3:94:66:4a:11:f7:d3:d7:75:
30:d6:9c:9a:b9:5f:07:d9:85:ab:39:18:a1:be:60:
dd:48:b5:3c:09:fc:24:59:83:8d:c3:cc:53:30:79:
65:65:36:d2:41:f8:1c:cb:b6:70:86:fb:7c:85:f2:
a2:ef:01:c2:dd:d3:b2:16:c7:49:7a:ce:d0:c2:3c:
ee:98:7c:21:65:5c:5f:e1:b4:e7:16:0f:6e:31:38:
a3:ed:a7:6a:59:6a:ed:94:aa:82:74:11:93:fa:d8:
de:80:75:2c:bc:14:8c:e8:44:f0:fb:0b:10:e5:6a:
94:2b:ec:7f:d5:5e:d8:24:2d:a3:8f:9b:2e:46:08:
ca:ed:2b:46:ad:e0:4d:99:8b:66:29:86:0c:31:33:
5f:64:24:9d:f7:01:f4:41:09:21:3c:4f:05:be:9e:
0f:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:9C:EC:CC:10:3D:1A:DF:35:87:80:28:96:F5:C2:DD:93:4D:9D:A6
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/WZzszBA9Gt81h4AolvXC3ZNNnaY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5e:56:27:b7:d1:d3:a5:2b:e3:e9:ea:58:76:11:0e:f9:4c:dc:
e6:a5:34:32:a1:f7:8f:dd:1a:53:ac:89:c3:ca:2d:f1:86:be:
d5:5b:df:6a:0b:bc:3a:e4:d4:90:45:0c:b9:d6:78:64:aa:c0:
d1:2f:7d:80:cd:d7:dd:bb:f1:cc:68:38:24:8a:7b:ce:d7:c0:
8b:b8:75:35:61:c6:a5:f0:90:ae:23:cf:9f:e9:02:da:a6:82:
59:94:3e:c7:ea:c1:bd:ec:a9:df:8b:b9:8c:1d:68:54:84:fd:
31:58:d0:f1:2f:4c:65:4c:0d:c8:b5:e4:2e:70:1f:01:c2:f4:
db:34:e0:b8:95:43:1f:72:88:ab:3e:e0:0d:65:d8:f0:52:5b:
b1:09:5f:43:56:a2:7a:65:19:94:76:1f:ce:b7:66:44:bc:43:
37:71:a6:7f:a5:7b:c7:de:51:b1:8f:1f:4d:e1:3e:58:ba:48:
ad:6e:bc:c7:95:af:da:47:dd:3d:41:f2:d5:bd:2d:d3:a4:9d:
67:cc:c4:aa:5c:52:d4:d1:8f:65:32:87:47:b1:1d:35:c2:03:
5b:38:11:1b:a6:3c:e8:70:1e:8c:90:a7:61:6e:c8:c8:bd:54:
d8:65:28:93:61:31:50:e6:b7:ad:7f:54:55:79:bf:1a:61:9b:
a7:a9:12:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 03:36:24 2025 by rpki-client