Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/WkMxHurdt2KCLHKd5o8gE5_0U6Y.roa
File: WkMxHurdt2KCLHKd5o8gE5_0U6Y.roa (raw, json)
Hash identifier: 9vxl3Phb4/VJZqvqOWvhEOEk2nAABAzkXSSoJ3Z/8lI=
Subject key identifier: 5A:43:31:1E:EA:DD:B7:62:82:2C:72:9D:E6:8F:20:13:9F:F4:53:A6
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018662B903A4F3B0CE4846B42F0B3D6DA98C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/WkMxHurdt2KCLHKd5o8gE5_0U6Y.roa
Signing time: Sat 18 Feb 2023 04:12:17 +0000
ROA not before: Sat 18 Feb 2023 04:12:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:62:b9:03:a4:f3:b0:ce:48:46:b4:2f:0b:3d:6d:a9:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 18 04:12:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5a43311eeaddb762822c729de68f20139ff453a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:9d:b6:6c:41:92:a4:af:07:19:d1:5d:45:6e:
f8:a4:61:72:51:d3:43:a5:3f:27:0c:9d:36:61:a3:
e8:e4:1c:28:fc:9f:27:18:6c:c6:ed:c2:8c:1f:d0:
23:b6:ce:ed:8e:8f:d4:e5:da:98:82:ab:f7:9c:98:
33:18:d4:93:86:03:ef:af:bc:ba:a1:aa:92:95:98:
29:ec:f2:27:5a:42:3b:c7:21:46:70:59:02:5d:79:
43:e9:0c:fc:74:24:38:23:0d:56:03:04:f5:40:af:
fd:a8:34:4d:da:f4:a7:97:d1:31:a0:3a:d7:a3:9c:
8b:a2:f9:2e:55:ba:5f:ef:38:17:51:c8:7e:7e:c1:
37:31:c0:8c:ad:2e:e1:6e:45:0f:67:83:b3:4c:dc:
39:6e:84:d6:6b:e5:84:e0:96:5a:83:3d:9a:4a:be:
23:fb:0b:6b:81:26:18:65:a9:2a:13:f3:b3:80:3f:
c0:14:cd:69:c6:b9:6b:ca:ec:a0:28:1e:f2:57:37:
27:b2:7e:5c:65:78:d5:61:23:c2:97:4f:48:42:b4:
d6:b2:a2:45:51:74:75:28:24:88:fa:62:fe:d3:36:
55:4d:0c:93:3b:b7:c3:9d:a4:2f:36:70:b0:43:f4:
96:0f:1c:c2:dd:cf:db:c6:85:8c:19:b3:60:6f:8b:
95:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:43:31:1E:EA:DD:B7:62:82:2C:72:9D:E6:8F:20:13:9F:F4:53:A6
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/WkMxHurdt2KCLHKd5o8gE5_0U6Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8c:75:8e:d8:47:de:d4:06:3e:6c:c7:0c:32:94:e4:f7:35:7b:
52:03:0b:3d:8c:75:4b:76:a4:db:71:81:80:9d:1a:c9:b3:0b:
85:15:75:a6:5f:56:38:57:f2:e5:c1:05:54:ff:ee:77:b5:39:
05:ff:13:9d:79:d2:6b:f9:aa:d4:dd:83:cc:f9:f5:c2:80:e5:
ab:f6:5b:56:bc:9a:ef:5b:a8:f0:b9:7e:42:7c:4e:e5:bf:7b:
c5:03:48:76:92:04:2a:37:09:eb:89:42:7a:e1:c2:3e:6e:a7:
bb:76:01:9a:05:1e:39:5c:84:27:08:c1:a5:cd:3d:35:62:5f:
d1:a6:6d:02:fa:95:f8:fb:c4:cf:0e:9e:42:d9:f0:07:74:9c:
f0:c3:52:c8:d6:c5:b1:67:e5:b0:54:35:b8:22:9f:19:6c:43:
42:2d:3c:fa:7a:25:39:08:5b:ae:3c:1c:f3:d4:e5:12:cf:69:
4b:b8:e2:58:1b:01:9b:f8:81:f2:0b:15:4a:51:fb:71:73:50:
1a:21:90:61:3e:f4:64:dc:71:88:3c:13:a1:a6:50:c2:ee:28:
db:85:99:2f:08:79:b3:e2:53:61:5b:6d:ac:6a:56:42:8f:7b:
b1:cc:52:7a:ad:9e:bc:72:bc:0a:84:27:23:fd:59:b6:45:c4:
25:a8:3c:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 13:57:56 2025 by rpki-client