Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/WzeqtccbCjwtzFwWLXPtYxt7di0.roa
File: WzeqtccbCjwtzFwWLXPtYxt7di0.roa (raw, json)
Hash identifier: KrorogQ7wsg1LjhuT3cuMx/ImacM9hbF19WiRSO4MeA=
Subject key identifier: 5B:37:AA:B5:C7:1B:0A:3C:2D:CC:5C:16:2D:73:ED:63:1B:7B:76:2D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 924F6031
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/WzeqtccbCjwtzFwWLXPtYxt7di0.roa
Signing time: Mon 04 Jul 2022 11:11:25 +0000
ROA not before: Mon 04 Jul 2022 11:11:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2454675505 (0x924f6031)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 4 11:11:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5b37aab5c71b0a3c2dcc5c162d73ed631b7b762d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:42:8b:e7:c7:f3:a8:b5:b0:8a:5d:80:51:bb:
45:c1:48:bf:13:e8:75:70:f6:5f:7f:27:eb:24:eb:
01:88:ec:80:b9:c3:cc:17:5c:ef:87:8c:85:38:7a:
3f:80:b1:59:f9:09:64:b1:05:93:59:54:a9:de:d1:
71:cd:95:11:78:09:24:c4:1f:66:c1:81:28:ed:f1:
a2:22:05:12:80:7a:0a:43:b4:7b:2b:2f:10:d1:9b:
63:78:ee:d4:7b:64:7f:ec:ec:4b:f6:23:4f:65:98:
56:bd:4e:70:f1:52:27:7e:b0:d1:ae:f2:eb:58:1e:
1a:73:2d:d5:12:e0:66:24:38:18:c8:dd:68:54:b2:
63:9d:76:c0:27:21:a9:f1:f0:9e:d0:53:3e:c4:c7:
72:81:95:38:1f:0b:72:fe:15:45:48:e9:aa:d5:96:
80:d7:e2:0a:f5:b2:2a:b8:3b:11:9c:3e:04:04:8f:
3e:0b:b4:9c:7d:0f:c2:7c:d9:b8:e2:7a:93:a4:8e:
42:41:54:61:94:4c:aa:63:b3:ad:c3:2a:ef:0e:19:
d0:28:d3:b1:46:61:23:00:9d:ad:6d:af:e3:3b:30:
09:19:18:80:08:08:7b:11:51:01:39:cf:f6:25:18:
b3:14:96:22:c3:3f:80:77:39:dd:53:ed:19:69:4d:
fa:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:37:AA:B5:C7:1B:0A:3C:2D:CC:5C:16:2D:73:ED:63:1B:7B:76:2D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/WzeqtccbCjwtzFwWLXPtYxt7di0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
47:a0:ca:a6:f1:9d:fd:f5:25:71:41:f1:6e:9a:d1:6b:af:b6:
3b:10:26:f8:59:42:81:dd:99:b1:2f:d2:d2:da:ec:50:d9:6d:
ef:c3:70:25:de:37:85:22:7e:13:83:59:38:30:60:e9:b9:1f:
bf:f1:ef:fb:8b:f1:fd:f4:25:d6:d1:81:35:05:77:16:58:e3:
e0:97:b7:cd:ef:a9:4a:22:44:71:14:42:56:f8:75:4b:d5:95:
1e:5a:f3:50:03:e7:43:c2:44:09:0d:c7:1a:a7:20:07:e4:29:
70:20:5e:3a:52:45:c2:e1:46:0f:0b:2e:2b:f9:23:03:45:24:
f4:fe:8a:a0:df:09:fc:67:39:b0:04:10:f9:74:bf:45:6c:9d:
bd:2d:30:70:ad:89:67:49:6a:f5:0b:4d:16:87:ea:5d:1d:87:
08:b8:d9:3f:f8:0c:df:19:48:13:f7:5b:50:4b:39:57:a8:6b:
82:df:ea:c9:7e:70:61:2d:86:4c:9b:c3:d9:01:b0:e7:c9:bb:
ea:ed:30:f4:f5:1f:80:79:d4:0a:b2:8e:56:74:93:b2:db:64:
c6:f1:ea:83:5e:0b:b2:a0:c6:17:2e:01:71:54:db:8c:4e:1f:
a8:34:5c:a6:72:7a:a7:64:40:62:22:dc:a6:78:90:73:35:0f:
b2:55:92:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:25:43 2025 by rpki-client