Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/rWOWZEguIJFCFLoihVeR4E-77mU.roa
File: rWOWZEguIJFCFLoihVeR4E-77mU.roa (raw, json)
Hash identifier: VEOd8gFi/FhIlUlBz4PJrANCwJwW2Zp076GBExzIjyk=
Subject key identifier: AD:63:96:64:48:2E:20:91:42:14:BA:22:85:57:91:E0:4F:BB:EE:65
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A42F236D555085882057BF8507C9E2E3A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/rWOWZEguIJFCFLoihVeR4E-77mU.roa
Signing time: Tue 29 Aug 2023 20:18:04 +0000
ROA not before: Tue 29 Aug 2023 20:18:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:42:f2:36:d5:55:08:58:82:05:7b:f8:50:7c:9e:2e:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 29 20:18:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ad639664482e20914214ba22855791e04fbbee65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:6c:2d:ce:ad:45:2b:91:aa:45:72:8c:d6:d6:
b4:fb:2d:b4:ac:c7:f3:d2:8e:4c:8e:43:79:8c:fd:
18:76:92:99:b4:3b:c1:28:2b:83:37:5e:f3:34:2f:
c5:be:1b:1c:98:87:ff:f2:f5:ef:65:4b:70:75:7d:
7a:f1:55:cd:54:08:11:57:d1:b3:fa:86:6b:24:e1:
1b:78:5d:da:6c:5d:3b:bc:f5:a8:87:6b:9d:c0:f2:
83:7f:a3:c4:88:5e:74:ce:eb:f9:bd:ad:ca:73:cc:
46:b7:5c:c0:96:f8:0e:2b:26:27:e6:e5:40:28:b1:
f3:1b:07:15:e9:bb:8d:e3:bc:6e:f2:43:27:b1:46:
df:68:e5:c7:4c:4e:a5:2e:3d:d3:21:53:2f:08:9b:
8b:1c:55:97:23:0d:ed:b9:56:c2:b5:99:60:e6:ae:
83:3e:08:30:84:8c:39:89:23:45:49:1b:b4:7b:0f:
f4:eb:a0:69:32:e7:92:2a:67:8c:fc:59:c4:cf:ce:
8f:b2:45:d5:09:08:01:fd:7f:69:4b:6a:b7:b1:f1:
f8:76:86:60:49:3c:86:cf:d6:32:d0:36:c6:3e:2a:
e5:4d:57:9a:e3:fc:a7:f9:38:e4:d0:58:b4:fd:ca:
c0:0c:fb:ef:5e:b7:cd:b7:f8:d1:39:47:57:76:6c:
22:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:63:96:64:48:2E:20:91:42:14:BA:22:85:57:91:E0:4F:BB:EE:65
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/rWOWZEguIJFCFLoihVeR4E-77mU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7a:0e:d6:1e:50:15:63:bd:16:68:75:56:40:b3:03:ed:43:1e:
d7:df:02:b7:88:5f:b1:a7:c9:50:19:1f:7a:5c:ac:18:25:0c:
eb:e6:2b:4a:e6:07:b2:58:e4:d0:4e:e1:e8:b4:19:c5:c4:30:
4a:82:80:41:0e:69:75:3d:90:bf:fc:10:1f:6e:5f:c4:d3:a4:
57:20:20:31:ef:a2:6c:aa:c0:96:51:72:04:14:99:cd:75:93:
25:63:49:33:86:a1:67:0c:a4:dd:bd:4f:23:7f:18:a6:05:09:
60:0c:7b:53:b3:20:0b:1f:28:ef:05:65:bb:aa:35:05:cd:4a:
e9:53:03:dd:85:9e:20:f4:1b:32:ed:81:ae:f6:fd:f4:0e:32:
f1:89:a9:87:42:98:90:a2:6b:22:d9:e9:0c:05:aa:ed:8e:81:
d0:9d:81:d6:7d:5c:cd:d3:b2:0f:c0:93:c9:73:8b:65:64:99:
af:21:a8:3a:41:96:ef:db:2e:0f:b3:42:32:0d:2b:96:8a:d4:
3d:b0:e3:1b:03:90:b4:39:34:37:60:4c:3f:2d:ea:1b:0b:9f:
60:5a:70:11:d3:11:da:5b:66:b3:de:31:a1:33:58:83:5e:63:
fe:6b:43:ef:ae:7d:9e:fd:e4:4c:c6:4e:e1:e7:97:4c:fc:c4:
04:97:d3:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 18:05:59 2025 by rpki-client