Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/w-D3cVO_Wwh9JshikkdTpog_hRM.roa
File: w-D3cVO_Wwh9JshikkdTpog_hRM.roa (raw, json)
Hash identifier: inSMKZ1/DxW4Hz4xUiBhBOrJAfz+hePUxuk7+ioZyw8=
Subject key identifier: C3:E0:F7:71:53:BF:5B:08:7D:26:C8:62:92:47:53:A6:88:3F:85:13
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188E06FB3F0BB033B6765F53E7339A2A34F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/w-D3cVO_Wwh9JshikkdTpog_hRM.roa
Signing time: Thu 22 Jun 2023 00:09:56 +0000
ROA not before: Thu 22 Jun 2023 00:09:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:e0:6f:b3:f0:bb:03:3b:67:65:f5:3e:73:39:a2:a3:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 22 00:09:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c3e0f77153bf5b087d26c862924753a6883f8513
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:7c:f7:d1:bf:3f:a1:72:9d:11:d9:cd:c8:e6:
00:ad:78:a8:3c:46:07:67:08:4f:cd:d7:d3:f5:ce:
02:b3:4f:c2:c8:33:ab:3b:ca:48:ca:1a:c2:d0:3f:
d2:1f:42:30:4a:e0:c3:37:2d:18:b9:91:1d:6a:93:
05:86:6e:d9:16:3b:73:57:ed:a8:a9:6b:1b:91:4f:
cc:47:c7:5c:6b:43:99:62:de:cc:45:71:f6:db:a8:
fa:e8:b6:95:a9:f3:9d:16:26:c0:10:23:54:23:97:
ff:cd:36:83:43:1e:94:20:70:9b:2e:2a:92:dc:5f:
f6:cf:dd:aa:d1:f8:c3:99:2d:84:b7:3d:cd:e5:d8:
b8:fa:97:11:bb:6c:91:9a:79:d3:2a:07:cc:39:7c:
e6:bb:d5:f2:56:ad:f5:6f:b5:f8:48:23:22:57:5e:
f1:3f:f3:e8:c3:59:99:b3:61:39:1e:9a:dd:af:3c:
d4:5e:b7:16:a8:44:36:2f:a3:d7:6c:3a:bb:9e:f7:
39:bd:71:9d:9d:65:0c:2c:53:74:07:8c:5b:83:1a:
81:22:8a:e4:a7:20:ea:5e:8c:06:13:3a:36:77:2d:
b0:5a:1b:51:99:d0:70:dd:81:35:43:08:3b:17:1e:
36:70:e3:90:5a:85:78:af:15:60:85:30:a9:ea:b4:
60:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:E0:F7:71:53:BF:5B:08:7D:26:C8:62:92:47:53:A6:88:3F:85:13
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/w-D3cVO_Wwh9JshikkdTpog_hRM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
25:60:ce:32:b8:c6:bc:3c:44:d3:b2:e1:f0:26:53:4c:b7:0b:
57:ed:45:e0:d6:09:a9:76:1d:e8:fd:9a:9b:c8:87:0a:af:fc:
06:95:13:cf:ea:fd:0e:8e:0b:20:2e:b3:93:6e:1c:54:db:92:
45:e5:17:34:6f:d8:f2:ce:e3:79:78:46:f9:1a:7d:f5:17:7d:
08:f0:5a:8e:b1:84:a2:e8:37:74:28:be:2b:53:e3:3d:e8:bd:
2f:6d:10:1e:05:72:75:f0:65:f1:8d:dd:c0:34:c3:c8:75:b3:
24:75:cd:20:f5:8f:65:e5:f2:88:14:4f:21:1b:28:fb:b6:27:
f5:0b:8e:34:55:c3:63:37:b7:f2:ac:2a:7c:5c:a3:a1:17:be:
e9:4f:cf:dd:c4:13:b2:ca:ab:83:ea:37:97:37:83:e2:7b:4b:
78:b1:78:2d:ab:87:f3:ee:99:cb:38:82:b7:77:af:7e:fc:9e:
68:c0:79:79:f6:74:e5:c3:ae:6d:2f:98:8f:78:0a:6d:51:e0:
bc:76:4b:2e:28:5f:54:74:00:c3:46:2c:cd:92:6c:59:3c:c1:
e5:39:27:8d:fd:28:84:0b:77:3b:1f:db:57:15:8b:ca:c4:5f:
73:7f:7d:65:32:4b:52:55:8e:f4:a1:ee:8c:d0:a9:02:0c:8e:
9e:b2:d9:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 23:23:42 2025 by rpki-client