Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/WniH1k0vsGzIvpWImF0dn-5Hq2Q.roa
File: WniH1k0vsGzIvpWImF0dn-5Hq2Q.roa (raw, json)
Hash identifier: JVeQAILK2VDoDMSJxIKDv1UmY6vjUpG71qgk8htwX3Q=
Subject key identifier: 5A:78:87:D6:4D:2F:B0:6C:C8:BE:95:88:98:5D:1D:9F:EE:47:AB:64
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185A953927FAF21FC59C6091E6812E5F8C6
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/WniH1k0vsGzIvpWImF0dn-5Hq2Q.roa
Signing time: Fri 13 Jan 2023 04:11:44 +0000
ROA not before: Fri 13 Jan 2023 04:11:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:a9:53:92:7f:af:21:fc:59:c6:09:1e:68:12:e5:f8:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 13 04:11:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5a7887d64d2fb06cc8be9588985d1d9fee47ab64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:76:74:57:71:e3:9c:3d:1a:23:68:ad:cc:26:
5c:f8:6b:33:0c:c3:ec:db:a1:b2:6c:00:68:14:a1:
01:15:67:0c:f3:37:63:81:d9:bf:32:39:51:8b:6a:
8a:cf:2d:85:50:ae:be:d0:4b:cb:9a:cb:32:62:b8:
fe:7f:d7:72:3d:85:0d:de:df:a7:a6:55:df:e5:d6:
21:3c:b2:68:0b:40:ba:43:fa:2c:41:07:ba:7e:72:
7f:d2:7b:f8:ef:60:b5:08:75:5d:ae:bf:cc:d4:25:
ea:c6:85:30:64:76:13:db:2e:68:68:c9:77:36:ab:
d5:49:d4:f2:d4:38:11:6b:18:87:10:d6:8b:3a:98:
2b:c6:cf:51:29:69:62:1a:74:c1:e2:1a:db:ff:12:
00:56:d8:1a:df:b8:dd:12:60:66:dd:57:0f:eb:ca:
c7:b7:69:58:6c:cc:9d:1b:34:58:e0:46:a4:3b:cd:
83:6c:62:60:55:a8:ae:7d:b1:b7:50:38:13:43:45:
4d:54:b0:7d:96:cb:c1:55:8b:b6:16:68:28:58:e1:
4d:bf:cd:7a:0e:67:7a:7b:79:16:af:06:e2:92:74:
32:d8:07:c4:86:50:0b:18:53:d6:18:65:93:f6:16:
1c:ee:0d:5b:1f:57:ed:55:0e:d3:ff:aa:3a:19:16:
ca:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:78:87:D6:4D:2F:B0:6C:C8:BE:95:88:98:5D:1D:9F:EE:47:AB:64
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/WniH1k0vsGzIvpWImF0dn-5Hq2Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
75:40:e0:b1:d3:ae:fe:f8:a0:4a:b6:4a:b0:e3:c9:4c:49:b6:
37:1d:61:a4:75:c5:c0:05:72:90:c3:86:8d:b4:ac:77:ae:f4:
17:ea:4c:c0:04:4b:19:cb:e8:7f:d3:f4:50:9c:3c:c7:94:f9:
6b:31:79:5a:f2:a9:bf:1c:11:33:94:dd:6e:e7:f3:6e:86:84:
40:78:c3:3d:4b:1f:14:b4:af:cb:19:25:80:99:21:e4:69:a3:
4c:61:74:99:09:7a:6a:82:91:d3:22:49:fd:0c:88:47:92:1d:
f4:ba:33:0b:fe:fb:3b:e5:a0:b0:9e:83:a3:f0:64:35:ce:5b:
a1:aa:c3:53:70:d6:48:cf:0b:54:1c:14:24:e0:3a:29:f5:49:
27:e6:a3:4f:30:c1:ec:8c:cb:40:b2:a9:09:43:07:38:2b:29:
d4:55:cb:57:8c:21:aa:16:3d:5f:1a:d0:35:ae:a2:80:be:b9:
8d:3e:f0:96:24:db:c8:b1:20:d1:55:f3:bb:32:90:6f:6d:b8:
a8:31:ed:78:73:24:e4:3e:e9:26:a7:bd:8f:f1:e3:02:38:73:
29:45:d9:93:21:c8:8c:98:ed:34:ba:3b:df:7b:8c:3e:1f:be:
df:18:f7:57:fb:7f:26:8a:e1:6d:8b:d3:6c:3c:ed:f6:db:8b:
d0:21:a6:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 04:21:37 2025 by rpki-client