Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_wHA0-yVi9hjP3yONJ1IXA3SmSk.roa
File: _wHA0-yVi9hjP3yONJ1IXA3SmSk.roa (raw, json)
Hash identifier: k0IHEcxKluDCfRoDQ96YnFHWSti1E4k1+zKRBspoIzw=
Subject key identifier: FF:01:C0:D3:EC:95:8B:D8:63:3F:7C:8E:34:9D:48:5C:0D:D2:99:29
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018551C5971B1A496B1BBC161ACC52D8AE41
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_wHA0-yVi9hjP3yONJ1IXA3SmSk.roa
Signing time: Tue 27 Dec 2022 04:09:41 +0000
ROA not before: Tue 27 Dec 2022 04:09:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:51:c5:97:1b:1a:49:6b:1b:bc:16:1a:cc:52:d8:ae:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 27 04:09:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ff01c0d3ec958bd8633f7c8e349d485c0dd29929
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:dd:2a:2a:6b:a5:19:14:c3:b1:e5:8e:3c:a9:
53:1a:6b:f4:b1:55:9f:b8:e4:9c:33:dd:d1:a3:08:
49:6d:ff:b1:0e:9f:36:ad:9e:8d:2c:7b:e3:93:36:
82:a7:27:8a:db:42:5c:d5:5d:50:03:55:b4:bb:c5:
41:d5:ea:9e:50:33:51:aa:09:9d:1f:18:c4:bf:1b:
73:02:39:e1:0f:6f:45:1e:86:1a:a0:91:e9:5e:34:
3c:14:81:30:47:f7:4d:ee:a9:71:77:33:f5:96:dc:
c7:a2:bf:f6:6b:fc:ca:c8:05:3f:6f:f4:e3:19:01:
34:0a:27:8a:44:e9:f3:84:ab:9d:7a:35:dd:93:db:
6d:d0:9a:cf:2b:99:06:8e:6c:65:14:84:02:5f:c5:
22:e0:8e:f3:7a:5a:bb:27:cf:b8:6e:97:67:2f:63:
03:e7:a2:5c:ce:b8:b8:5d:1c:51:0d:06:4d:56:e9:
8b:d9:2c:fe:7e:fc:32:c8:94:c3:1a:0a:46:a2:25:
e9:15:73:95:2b:5c:49:bd:c9:b2:17:87:2d:76:5a:
b8:78:be:94:bb:3e:0e:77:bc:dd:94:97:d5:26:ff:
98:ea:c6:55:83:70:d2:ff:86:31:bc:2c:f9:88:0c:
89:77:5c:7d:b3:8a:79:fd:f8:5a:c3:e0:83:4b:2b:
6e:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:01:C0:D3:EC:95:8B:D8:63:3F:7C:8E:34:9D:48:5C:0D:D2:99:29
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_wHA0-yVi9hjP3yONJ1IXA3SmSk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
54:61:aa:fd:88:77:d2:77:b5:54:12:1c:08:00:10:52:60:7d:
d4:21:e9:d9:fb:26:be:20:25:08:d6:60:e6:98:f0:2a:3e:94:
56:d8:e6:d6:45:f5:50:6f:a8:11:72:5f:ba:c5:45:4e:e3:ee:
04:ce:ff:f1:aa:82:7d:ed:3e:69:de:7a:79:3a:ce:c1:fe:13:
8a:3e:76:ed:7f:8d:36:e4:69:d7:6b:f1:32:52:0e:7a:05:3e:
e6:76:56:15:0d:cf:b9:99:dd:5c:26:57:32:ea:90:9a:ce:a8:
7e:a8:a7:63:d2:83:82:03:fd:d3:d5:1b:a7:01:57:75:60:2d:
79:79:b9:35:fb:62:33:8d:9a:e0:73:39:6f:ef:8d:64:1d:c5:
ee:a4:aa:bb:21:42:ef:e5:5f:b6:f4:9f:8f:14:ff:56:93:55:
15:73:2d:27:ee:dd:43:6c:da:ad:57:98:eb:ba:1d:f8:81:ff:
34:b4:a6:88:15:ea:31:fb:63:4b:fd:09:e1:18:2e:9b:0f:58:
4f:49:5b:f7:be:c5:77:99:22:5f:7f:b7:2b:eb:51:30:81:04:
f0:6c:f8:b4:54:47:a3:3c:30:6a:17:c3:01:fa:47:04:68:e1:
d4:16:ca:68:11:9a:a5:fa:b8:34:a5:4f:52:c9:d3:49:7e:e4:
fd:d2:78:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:34:09 2025 by rpki-client