Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/WlGJ10vVWz8uOPPgFrZyG1KEnn4.roa
File: WlGJ10vVWz8uOPPgFrZyG1KEnn4.roa (raw, json)
Hash identifier: qabWjKMJcsGEJitQvIxgpSWsgLjbnkyOZSWoXjBhhx4=
Subject key identifier: 5A:51:89:D7:4B:D5:5B:3F:2E:38:F3:E0:16:B6:72:1B:52:84:9E:7E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018237DCA4A1C4A1AEEF1030EADA029556A0
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/WlGJ10vVWz8uOPPgFrZyG1KEnn4.roa
Signing time: Tue 26 Jul 2022 00:16:23 +0000
ROA not before: Tue 26 Jul 2022 00:16:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:37:dc:a4:a1:c4:a1:ae:ef:10:30:ea:da:02:95:56:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 26 00:16:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5a5189d74bd55b3f2e38f3e016b6721b52849e7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:50:f6:f5:43:be:cd:55:34:42:52:1d:3a:81:
43:f8:e6:0d:dc:82:96:d2:92:15:97:28:91:a8:39:
6e:aa:e8:d7:c6:7f:ee:12:fe:39:a5:27:a0:4a:2a:
01:76:5f:0a:0c:e4:ce:63:47:48:8c:19:ae:4d:de:
b6:83:ac:93:30:76:c3:ce:ce:26:60:d2:d1:00:70:
4d:4b:a9:dc:1c:48:17:c3:2a:84:9c:2a:e9:66:1a:
47:ab:03:77:ed:79:ff:45:99:52:d3:fc:05:ae:9b:
e2:2b:81:66:f2:8d:7e:bb:9f:c0:75:83:1c:18:cc:
d6:31:24:d1:24:fd:8a:8b:bb:3b:7d:e8:eb:3a:fd:
18:85:89:7d:f7:b4:dc:09:3f:ce:c8:6e:9f:b0:1a:
f7:f0:3c:fa:f9:11:fc:28:61:d3:02:01:6c:fe:5f:
3e:9d:7d:ca:9b:85:b9:7c:87:dc:42:bd:fc:16:4d:
ed:36:ff:91:58:c6:26:90:ca:62:89:0f:2a:1f:18:
18:6d:34:72:f2:41:90:8c:9b:f3:41:0c:d5:7f:3e:
0b:d7:95:e9:be:eb:92:f1:fe:94:da:22:0a:27:41:
cf:36:57:44:7d:c9:a2:16:0c:53:80:1c:55:8b:09:
8b:6f:f2:a6:3c:d1:2b:30:7e:84:88:d1:2d:14:43:
83:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:51:89:D7:4B:D5:5B:3F:2E:38:F3:E0:16:B6:72:1B:52:84:9E:7E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/WlGJ10vVWz8uOPPgFrZyG1KEnn4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6a:c6:1f:19:cd:92:e3:6b:d9:b9:7d:2e:b0:a8:b0:c1:78:70:
4c:7a:73:00:da:81:36:5a:ff:4f:78:8f:a7:96:5d:0f:15:0a:
e0:f6:92:f9:98:02:92:f0:6e:07:a0:f7:d5:f1:81:ae:ce:b8:
22:85:5e:f0:c8:f1:f8:ed:d6:38:c4:ff:49:6b:79:7f:c4:bd:
d8:e8:6c:01:76:59:16:bf:1d:6c:f9:85:f6:f5:b8:2c:38:11:
15:2d:c3:93:9c:23:fc:38:8c:96:24:10:b0:30:6e:aa:13:fe:
28:87:cb:3a:9d:76:3d:98:17:ca:86:d7:e1:f2:94:16:2f:e4:
18:0d:f6:d2:fd:97:83:10:5b:74:4d:e4:b5:77:69:4b:6f:7c:
96:15:4b:1c:1f:50:aa:cf:43:b2:63:3a:78:c9:fb:79:a3:d2:
a0:08:38:b4:9b:f7:ac:0c:48:41:71:fd:97:b5:b1:2f:9e:4a:
2b:a2:5d:c5:17:45:1a:ba:34:43:b6:78:f3:72:18:21:de:a2:
e3:b4:ca:30:87:3e:a9:43:90:40:6f:b0:81:51:f1:68:4f:4e:
9d:76:eb:17:a4:54:54:ee:ad:be:fc:d8:7f:12:7b:09:18:88:
c3:12:98:47:45:5f:b1:ca:cb:3e:01:35:a6:3d:4a:00:92:3d:
2b:18:bc:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:24:04 2025 by rpki-client