Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wBX1o77FwXxGhRRySrZ3iIiN3KI.roa
File: wBX1o77FwXxGhRRySrZ3iIiN3KI.roa (raw, json)
Hash identifier: 1E/K3XEvfYvBmZFTfvN9lI/l++Mwph6js+q8O0pyt/Y=
Subject key identifier: C0:15:F5:A3:BE:C5:C1:7C:46:85:14:72:4A:B6:77:88:88:8D:DC:A2
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186933B5968EBA83B0888E8EAF0C73B9AEB
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wBX1o77FwXxGhRRySrZ3iIiN3KI.roa
Signing time: Mon 27 Feb 2023 14:16:25 +0000
ROA not before: Mon 27 Feb 2023 14:16:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:93:3b:59:68:eb:a8:3b:08:88:e8:ea:f0:c7:3b:9a:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 27 14:16:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c015f5a3bec5c17c468514724ab67788888ddca2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:d1:ab:b3:15:87:38:2f:1d:b6:8e:bc:e5:aa:
2d:77:ee:ae:8c:5c:43:41:46:cb:c1:df:a5:11:12:
df:c8:09:29:c0:72:ff:86:cf:82:da:2b:8e:23:c2:
7f:f6:3b:9c:e9:cb:1c:5e:13:27:5c:d6:74:73:98:
37:ba:7a:9c:17:55:38:f0:06:06:7d:29:3d:c2:cd:
b4:45:68:cf:11:88:9e:e5:45:e6:9c:01:8b:d6:68:
b3:c7:7e:62:02:73:7b:13:cf:5c:18:4b:76:8a:43:
b8:07:cb:8e:8d:74:8c:b8:12:cc:55:ed:c6:f7:dc:
d6:1d:b2:5b:60:ea:31:c4:aa:69:03:89:50:42:4f:
f0:8b:8a:24:f7:6f:3f:82:68:cc:86:b6:17:3a:80:
c6:3d:b2:81:23:c8:08:d8:0e:21:f6:37:41:77:df:
99:b3:de:64:de:c2:f3:29:ca:ef:80:a6:ba:a0:d2:
ea:1f:54:28:64:52:ca:08:7e:84:9c:03:bb:5b:e1:
43:2d:02:6d:f8:e6:bb:eb:f8:e0:3b:08:5a:b2:db:
20:c7:b1:28:a1:cb:58:64:35:30:78:df:2a:ae:cb:
e9:dd:cb:5a:5d:f9:f9:f4:cd:30:55:75:d3:b9:6c:
3b:ff:7c:20:af:6e:98:da:36:a7:6d:d9:e1:93:7c:
1c:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:15:F5:A3:BE:C5:C1:7C:46:85:14:72:4A:B6:77:88:88:8D:DC:A2
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wBX1o77FwXxGhRRySrZ3iIiN3KI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
ad:ae:9d:fd:02:d8:8f:ff:1a:75:9b:1c:f4:2b:34:9c:ef:75:
39:d5:37:11:21:b6:3e:c0:05:ad:ae:cb:55:cf:7b:28:f2:8c:
15:7e:4e:34:65:32:35:a9:a4:81:d5:be:b3:59:83:35:a0:fb:
6c:c2:73:37:78:ff:b5:64:d4:dc:f3:f8:b7:8e:9b:13:a3:e0:
1c:e3:f7:26:69:a0:05:a3:a6:44:92:7d:a1:e3:cf:36:ec:dd:
b4:3d:8c:78:3d:12:1e:89:89:6d:b3:16:b0:9c:85:f5:48:18:
e3:27:ff:c0:17:1a:2b:0e:21:4b:2d:3d:3a:7b:da:55:f1:b6:
c5:0f:51:bc:e2:c0:a1:87:12:64:6b:e1:74:33:c5:b2:e7:7a:
dc:ca:82:fd:34:88:06:e8:66:e0:a4:f3:ca:f7:e5:9c:5a:1e:
36:6f:04:b0:2b:6c:d3:75:8e:06:3f:37:58:db:86:da:38:00:
6b:ee:e2:96:2e:b3:2c:d0:23:73:bf:78:d1:a9:f3:bc:6f:af:
1f:4a:de:e2:16:7a:e7:98:0b:c1:a5:7b:68:e9:0a:ad:53:cd:
5d:77:e9:64:3c:38:29:fc:89:8d:34:ab:54:e9:7d:3e:9a:80:
d2:78:32:56:e2:8f:cc:c7:38:0b:8e:8b:94:0f:86:9e:95:c1:
1f:cf:71:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 23:36:15 2025 by rpki-client