Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/WdlJqzx0PPy8vmKPAYIj_yHFg04.roa
File: WdlJqzx0PPy8vmKPAYIj_yHFg04.roa (raw, json)
Hash identifier: M91REh9MjWv71BReg4MTKwJSL3wMHriUeEtKkvIa4J4=
Subject key identifier: 59:D9:49:AB:3C:74:3C:FC:BC:BE:62:8F:01:82:23:FF:21:C5:83:4E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018691E786AFB172A84B078F0BA03B6465E9
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/WdlJqzx0PPy8vmKPAYIj_yHFg04.roa
Signing time: Mon 27 Feb 2023 08:05:14 +0000
ROA not before: Mon 27 Feb 2023 08:05:14 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:91e6:d089/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:91:e7:86:af:b1:72:a8:4b:07:8f:0b:a0:3b:64:65:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 27 08:05:14 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=59d949ab3c743cfcbcbe628f018223ff21c5834e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:bd:b4:2b:5c:00:2d:96:19:df:0a:67:e5:4c:
88:09:ee:df:c8:69:d0:a2:61:e6:5a:7e:20:c6:ea:
2e:71:83:73:c0:e1:bc:f5:67:20:93:90:f1:07:af:
6e:4d:7e:15:b1:8d:16:f6:49:dc:07:f6:36:b9:8a:
f1:d7:b1:f8:05:6b:46:e2:19:9f:03:95:2b:95:06:
de:81:84:d0:9f:42:52:1f:52:13:02:14:76:36:c8:
77:9e:5b:c6:93:64:6d:ff:8d:24:d7:ec:a7:6a:c0:
2f:8d:2c:f4:a8:a1:28:ee:86:04:18:0f:95:25:f5:
7f:9f:b6:f8:19:25:e2:0f:0e:ed:71:4b:75:10:38:
dd:dd:de:d0:93:96:26:f5:57:d8:20:15:a7:15:24:
f3:3f:e9:31:32:43:21:80:60:09:5b:0b:38:71:99:
e0:3b:0b:dd:da:a6:0f:1a:a7:06:57:24:04:1b:7f:
85:6d:f1:75:aa:c5:fd:e1:32:d6:86:80:6e:ce:04:
1c:1a:d1:95:76:70:94:72:19:6d:8a:9e:23:ad:15:
c1:73:43:2f:67:8f:00:69:2e:49:80:a3:f8:57:10:
ff:f6:e1:cb:34:e1:a9:c4:d8:ec:73:3a:27:9e:1c:
2f:04:bc:4a:03:81:06:23:0a:81:6b:73:f9:17:55:
67:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:D9:49:AB:3C:74:3C:FC:BC:BE:62:8F:01:82:23:FF:21:C5:83:4E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/WdlJqzx0PPy8vmKPAYIj_yHFg04.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
72:8c:6c:ed:05:8f:7a:01:d6:b2:47:c4:7b:be:7f:d5:58:fd:
f8:83:d8:4e:be:fa:4e:45:33:c0:c4:7b:c7:0a:48:51:e0:bd:
5e:b7:29:7e:82:bb:b6:44:5c:89:51:0c:cb:29:35:c0:a4:ce:
2c:4a:2c:ee:40:10:05:f8:1e:df:3c:c2:83:db:61:ff:20:d7:
c8:71:11:85:58:43:cd:a6:58:c0:4b:21:13:09:92:68:62:ee:
0f:4b:c4:90:58:a9:c8:1f:9d:40:35:97:d1:39:ac:f2:7e:50:
ae:c6:b9:70:26:ed:77:03:e5:7a:6a:cf:27:27:3c:b5:22:e1:
5b:20:01:50:ab:b2:05:75:e2:6d:f8:4a:b3:26:91:aa:9f:f6:
72:f1:7c:f9:9d:0e:9b:55:3f:d7:9d:16:dd:a6:ce:82:c7:40:
9b:bc:a2:4b:82:ed:ea:53:52:f8:c6:d2:2d:d8:f1:3d:44:01:
75:24:1e:54:fb:36:32:37:eb:9b:2c:7f:22:36:0f:83:91:a4:
8a:2b:f7:51:b3:03:87:bd:f9:a6:50:6d:1d:51:98:37:62:09:
dc:ed:90:2d:8c:ef:62:42:fb:48:de:d0:8f:b0:18:e5:30:00:
7c:ae:0a:e3:21:a4:d0:07:ac:1b:ce:2d:46:bc:45:0c:24:b9:
1e:28:ba:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 15:22:23 2025 by rpki-client