Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/WdxCc5-N4r1dcQj9qD8DvDwTEqA.roa
File: WdxCc5-N4r1dcQj9qD8DvDwTEqA.roa (raw, json)
Hash identifier: 33nmPhuhrBKPo0T58gdm5JiE8byMRDthM1OPLN3JYT4=
Subject key identifier: 59:DC:42:73:9F:8D:E2:BD:5D:71:08:FD:A8:3F:03:BC:3C:13:12:A0
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0183D4EF01193FB641220022D432D6CDAC58
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/WdxCc5-N4r1dcQj9qD8DvDwTEqA.roa
Signing time: Fri 14 Oct 2022 05:19:36 +0000
ROA not before: Fri 14 Oct 2022 05:19:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:d4:ef:01:19:3f:b6:41:22:00:22:d4:32:d6:cd:ac:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Oct 14 05:19:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=59dc42739f8de2bd5d7108fda83f03bc3c1312a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:c5:ac:09:06:da:2e:87:08:7a:15:a3:97:a3:
ac:e2:52:4d:5a:d5:90:eb:3d:b2:6a:d0:d6:d3:5a:
46:03:48:da:9e:17:31:0a:be:cf:5e:3f:47:75:02:
b4:81:03:cf:82:25:77:f3:b7:1f:ea:62:a3:06:b8:
9c:0b:6e:99:a5:dd:a2:2f:1d:58:e1:86:48:9f:c0:
ad:d4:00:b3:af:60:2a:45:b2:cf:7e:ab:4e:b3:b1:
ae:05:34:f4:a6:04:9e:f3:69:6a:5b:9f:e8:52:57:
65:d1:82:45:5c:da:90:b5:19:0b:57:8e:c5:1f:74:
4e:36:77:9b:1a:7a:2a:ed:42:51:13:14:55:85:3a:
76:8a:87:2e:86:42:3a:c2:f0:4a:23:e6:c2:1d:b9:
11:49:34:eb:56:64:df:00:ed:ce:77:66:fe:33:83:
5f:56:5b:04:0e:f0:61:fc:53:c3:30:7c:f6:02:59:
a1:26:3d:56:ed:9b:76:78:c1:f5:e1:37:a5:fd:e8:
ea:5a:34:cf:15:8b:f2:58:b4:ad:28:49:ca:b4:b6:
41:ce:30:39:74:61:29:52:74:3a:02:1b:5f:bc:96:
7b:c5:1b:34:3c:a4:95:b3:2c:c3:9e:69:31:c0:e5:
34:2a:6c:6c:82:04:1d:56:50:b5:5d:69:13:4c:bf:
a9:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:DC:42:73:9F:8D:E2:BD:5D:71:08:FD:A8:3F:03:BC:3C:13:12:A0
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/WdxCc5-N4r1dcQj9qD8DvDwTEqA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
25:48:19:11:36:7f:d4:86:22:b9:3d:16:29:74:ed:f0:5a:2b:
85:5d:39:1a:50:da:4a:b8:73:8f:57:41:bf:2e:73:26:43:0a:
5a:17:8e:f2:a3:46:d7:32:aa:1d:ee:0f:54:9b:0d:2d:39:de:
e3:4f:8f:89:ad:f9:1b:20:a4:18:ba:95:fd:bf:d7:30:6f:e2:
c5:d8:30:ce:4e:55:4e:8c:00:ca:fa:9d:95:87:8a:c7:9b:50:
9f:23:64:42:5a:f1:8a:da:3b:92:ac:4e:ec:58:37:af:58:70:
49:c8:60:cd:5f:7c:ad:5f:f1:4e:c6:78:bf:0e:0a:80:0c:cb:
28:8b:6a:80:f6:a7:5e:28:02:6c:6c:c3:f1:03:01:1f:56:ac:
fc:e1:7d:50:ea:0a:40:77:b8:f1:18:08:07:85:f9:2d:93:df:
a4:9f:77:86:20:f2:60:17:52:4b:c9:91:30:9f:3a:4c:42:a5:
2c:b6:e4:68:2d:8a:52:68:c7:0a:8e:ce:6d:e9:cc:3d:80:20:
b6:fa:75:f8:19:d7:9a:35:64:47:a1:99:f2:c7:af:81:09:f6:
eb:31:0c:0f:b4:bc:86:90:17:b2:81:6f:0f:c7:2f:b5:16:a9:
63:94:fc:e9:9c:d4:02:ce:25:f1:cd:2d:a3:99:4e:ce:78:8f:
84:b4:d0:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 04:51:25 2025 by rpki-client