Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/w-mzvI1YuUjWRJHq6YZg_kD-pwA.roa
File: w-mzvI1YuUjWRJHq6YZg_kD-pwA.roa (raw, json)
Hash identifier: LCGsrkgyJMcQCDNbzsxZgLlG0z//+pgPmkgSx6SOzj8=
Subject key identifier: C3:E9:B3:BC:8D:58:B9:48:D6:44:91:EA:E9:86:60:FE:40:FE:A7:00
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186481B845E580576EBEE97938F6D0E45F8
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/w-mzvI1YuUjWRJHq6YZg_kD-pwA.roa
Signing time: Mon 13 Feb 2023 00:10:08 +0000
ROA not before: Mon 13 Feb 2023 00:10:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:48:1b:84:5e:58:05:76:eb:ee:97:93:8f:6d:0e:45:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 13 00:10:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c3e9b3bc8d58b948d64491eae98660fe40fea700
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:11:3f:ca:a0:a4:95:d2:89:48:08:1c:85:d3:
ae:2a:89:92:6b:f3:bf:14:a3:23:7a:74:47:9e:f7:
76:56:6f:dc:54:b3:24:fe:90:46:be:10:b7:6c:93:
4a:40:8e:9c:f2:9f:3e:64:5a:1f:be:ee:69:1e:f0:
64:38:d3:be:ba:d9:cd:16:e8:5f:b0:7e:e9:b7:31:
3a:23:aa:ef:99:54:77:39:cc:1b:63:51:0a:f9:d4:
fb:be:c0:95:fc:c2:41:7f:96:78:89:67:4f:f1:b0:
9a:f4:c5:72:32:c3:3d:7d:1c:b3:9c:ea:21:b6:ad:
69:40:ff:b9:ca:16:2e:ce:6f:8d:b8:d4:be:6e:b7:
93:88:3e:26:6f:70:6b:f7:d4:2f:81:e5:4f:46:8d:
cb:5c:c0:66:13:e0:e7:22:5e:2e:db:aa:be:af:54:
73:a6:67:2a:22:9b:c4:73:d7:b6:bc:d5:74:f6:19:
03:bb:27:e0:21:e3:0f:f5:e9:cd:f9:b5:71:8a:af:
42:cd:0f:a9:e2:46:9f:b9:1b:08:67:80:59:cf:b4:
ad:58:29:87:4f:25:38:60:da:97:bf:e3:67:d3:e6:
64:c5:59:1d:44:34:aa:e2:f2:68:02:07:f2:35:84:
d7:46:a2:67:78:24:18:86:ae:97:6c:19:9e:54:b9:
34:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:E9:B3:BC:8D:58:B9:48:D6:44:91:EA:E9:86:60:FE:40:FE:A7:00
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/w-mzvI1YuUjWRJHq6YZg_kD-pwA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
72:bf:fe:af:3e:7a:97:b5:fc:8a:d9:af:41:b5:9f:54:87:a3:
9a:05:83:4b:c2:ad:22:b4:d6:98:54:81:72:bc:82:83:7b:36:
87:26:c2:66:8b:80:4c:4b:d3:5f:bb:1e:f2:7d:0c:12:e3:96:
e9:1b:b0:5e:c3:2a:6a:c2:d4:bf:78:f0:58:46:dd:34:8d:f5:
2a:e6:1c:df:1b:c3:cd:4a:da:ba:66:f5:48:66:61:8d:01:56:
32:5e:06:3d:bf:af:79:13:8a:12:07:0d:e4:d8:4a:fd:91:2f:
80:0e:52:ca:36:8e:d3:55:b4:c5:0a:41:98:b5:f6:bf:18:19:
97:6b:ef:ee:5b:55:f2:c1:e3:bf:ef:7a:ef:a5:07:b4:4d:0d:
24:a2:6d:a2:4e:f7:ae:6a:db:b7:b4:b1:c9:8a:7f:d2:92:54:
af:9f:02:9e:cf:db:18:77:99:4f:7d:98:0f:b3:17:cb:23:8d:
53:e9:b1:74:19:c5:27:7c:be:25:d2:11:9d:9e:9c:33:b6:ab:
99:ea:34:08:3e:18:e1:1d:ac:0e:83:86:db:ae:db:4d:1e:db:
94:d7:62:d3:db:ac:9e:44:8c:51:b8:79:40:ca:5b:55:8d:3a:
98:df:4b:80:8d:fe:8f:eb:4a:a1:25:04:ae:de:e9:22:ca:81:
0b:d2:ea:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 21:47:45 2025 by rpki-client