Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_wf0icto3qWLaq7iBqtgxM-4cfk.roa
File: _wf0icto3qWLaq7iBqtgxM-4cfk.roa (raw, json)
Hash identifier: LOTy2SLfZEhvQ20mUrwzXoYj+RaquOLqKfyFyyGl9R4=
Subject key identifier: FF:07:F4:89:CB:68:DE:A5:8B:6A:AE:E2:06:AB:60:C4:CF:B8:71:F9
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01896EB5AB6CBE478D801DE5E58CEC42F2B7
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_wf0icto3qWLaq7iBqtgxM-4cfk.roa
Signing time: Wed 19 Jul 2023 15:12:26 +0000
ROA not before: Wed 19 Jul 2023 15:12:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:6e:b5:ab:6c:be:47:8d:80:1d:e5:e5:8c:ec:42:f2:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 19 15:12:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ff07f489cb68dea58b6aaee206ab60c4cfb871f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:56:09:7b:bd:ed:8e:0d:78:27:f1:e4:54:16:
47:5d:07:f4:46:21:6c:bb:4c:29:d7:9c:6d:23:6b:
92:7d:e1:b6:fb:ff:83:f9:01:77:a7:77:3a:29:de:
f0:2c:8a:e6:9f:25:c4:0e:7a:7c:d2:c5:93:ed:e8:
2f:89:42:8f:da:6c:25:0f:27:5c:9b:fb:3e:6c:2d:
57:ba:58:a5:4d:3d:af:0e:47:dc:da:5d:aa:71:85:
bc:1a:d3:ff:8a:c3:d1:31:ef:ca:4a:92:43:3f:c3:
2a:24:58:f8:2c:44:ba:b1:10:65:c5:30:6d:74:1b:
cd:f3:6b:b9:f3:98:25:85:b2:42:10:1f:90:19:d2:
72:d6:0b:45:8e:f5:28:84:e8:a5:b0:77:09:e9:a2:
8b:42:f2:54:69:2b:1f:73:67:d4:87:0a:27:53:8e:
50:09:cc:45:64:89:36:78:7c:a1:0c:c0:5f:e0:ca:
39:98:c9:32:4f:2d:77:96:39:2a:b2:83:84:15:24:
75:46:c5:2c:14:06:16:88:b5:36:66:51:8e:14:d3:
59:67:73:db:1f:3b:2c:18:54:d1:04:10:e8:b1:00:
c7:bc:44:73:22:24:f3:73:1c:96:65:bd:e2:81:2c:
17:b0:0d:92:db:82:2f:4e:f4:de:31:29:84:9b:a6:
d9:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:07:F4:89:CB:68:DE:A5:8B:6A:AE:E2:06:AB:60:C4:CF:B8:71:F9
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_wf0icto3qWLaq7iBqtgxM-4cfk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9a:23:5c:da:76:cf:fa:2b:e8:75:f9:96:9f:02:fb:75:66:ff:
8a:2a:da:e7:a6:9d:07:1b:90:c4:7b:a0:e0:7d:37:30:97:b4:
0b:de:75:2d:5f:19:c9:80:80:d7:04:83:79:0d:f0:cb:75:d6:
b3:2b:aa:10:55:ee:6c:ba:a8:da:e1:f0:b9:0e:ca:ff:85:f7:
da:e3:8e:a3:fd:a5:e0:89:48:01:b6:7e:fe:ec:18:08:d2:2b:
8c:6d:fa:c3:21:90:df:98:da:78:86:40:fd:bb:5a:87:98:3c:
b3:32:c8:20:e2:80:b7:0c:da:a0:de:c9:7a:a1:93:ce:bc:07:
5a:57:e5:65:8a:00:b1:43:f9:9f:a9:83:a6:33:a1:31:07:69:
a5:d9:36:69:81:41:24:f9:c2:42:9e:1b:e6:7a:ad:82:dd:f4:
18:df:93:2e:dd:f6:0d:98:2d:cc:80:39:0e:48:c8:e0:d7:0b:
c0:3d:95:33:59:32:c9:fa:1b:7b:f7:47:b8:53:44:03:d2:31:
14:1b:c5:b5:a8:45:c1:c5:8c:55:aa:1c:0c:a2:c7:a9:52:b2:
8f:75:fe:04:d6:43:34:f6:6f:ab:73:12:6c:99:0e:22:3f:24:
8b:77:6d:6e:c5:3d:0b:24:e6:cd:8b:4c:d4:a5:c3:da:6b:8a:
22:cf:8d:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:32:43 2025 by rpki-client