Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wBrWoMyhHDpVAThPKKW2-hbA_NY.roa
File: wBrWoMyhHDpVAThPKKW2-hbA_NY.roa (raw, json)
Hash identifier: Md7v+yxS+yBicbnrJR3Dnu6i2/kJRzXTLKYobo7d0Ow=
Subject key identifier: C0:1A:D6:A0:CC:A1:1C:3A:55:01:38:4F:28:A5:B6:FA:16:C0:FC:D6
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189C3B0E876D965C70AB94CEAA45B1E94C8
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wBrWoMyhHDpVAThPKKW2-hbA_NY.roa
Signing time: Sat 05 Aug 2023 03:14:58 +0000
ROA not before: Sat 05 Aug 2023 03:14:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:c3:b0:e8:76:d9:65:c7:0a:b9:4c:ea:a4:5b:1e:94:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 5 03:14:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c01ad6a0cca11c3a5501384f28a5b6fa16c0fcd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:87:ed:f0:ef:f5:c6:6a:c8:d7:fc:14:6b:2f:
7e:ec:85:a3:80:5d:fd:1a:2f:da:af:eb:eb:69:cc:
1c:21:97:33:f5:b7:6d:f2:02:05:ad:d8:18:1c:84:
a8:4c:a2:de:87:f3:a4:78:f1:9d:67:f0:3c:d7:87:
6f:15:4f:ad:9a:b9:00:7f:00:8d:73:bf:af:dc:ed:
67:94:f3:28:90:cc:79:e4:59:db:8f:54:0a:aa:fd:
86:b1:db:23:aa:7e:4f:d5:5c:89:67:67:29:d8:2a:
63:d5:25:6f:ed:c2:37:82:fd:05:e1:7f:43:40:ff:
1b:f0:e7:6f:85:c8:1d:a8:ac:34:d4:5f:3c:30:82:
6a:5f:b3:e5:46:e9:fe:71:41:be:3a:a7:ba:88:85:
2f:6c:00:29:b5:96:a1:f6:9a:29:74:bb:57:99:8e:
3b:9f:2c:53:c4:e7:4f:5d:40:d3:39:4b:1c:d4:63:
fc:ed:c4:24:08:e4:1c:f0:f9:f5:9b:b8:a0:83:f5:
60:de:c1:f1:9c:80:40:b6:d5:75:26:42:1c:86:fb:
be:96:22:1f:8f:2f:f4:fc:30:d7:18:b1:23:ed:77:
90:d6:c8:3e:fc:9b:c2:6a:dc:18:9e:2f:ff:fd:73:
9c:7a:d6:ba:12:48:26:81:12:2f:41:14:97:7e:4b:
dc:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:1A:D6:A0:CC:A1:1C:3A:55:01:38:4F:28:A5:B6:FA:16:C0:FC:D6
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wBrWoMyhHDpVAThPKKW2-hbA_NY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
ac:3f:49:81:9e:df:04:75:df:99:a2:9f:2c:b6:cd:89:22:4e:
e7:41:34:75:76:e7:04:d7:71:69:f6:42:b2:f9:b8:11:e9:d1:
4a:fd:8b:83:d5:b9:c4:9f:2a:cf:9f:8e:f0:6e:80:12:24:21:
6b:3e:27:84:dc:79:d1:f9:74:26:10:cb:01:99:6e:14:13:a1:
af:48:00:49:2a:59:b2:a9:c7:01:ec:24:3a:1c:bf:c9:c8:f1:
d0:ae:04:4b:bc:2e:01:52:da:4e:89:76:0b:03:a0:cd:86:e4:
aa:75:70:bf:88:a7:4d:0c:51:a1:6d:f6:fd:93:ef:ed:52:55:
9b:3d:fe:e0:41:8e:1a:cf:63:b8:66:6c:42:43:5d:19:1f:26:
c0:5d:58:54:0c:ee:39:d7:57:c2:7f:05:27:e3:ef:e1:b2:11:
2f:7e:9f:c7:a1:43:6a:fb:9f:71:8c:15:fd:87:17:f1:fa:e5:
0b:b0:d9:15:57:57:6e:50:d4:e2:17:a4:42:e1:3e:11:7d:07:
d4:8a:c8:68:d0:51:5e:08:8b:2a:bf:52:37:28:54:8d:a1:66:
dd:e7:0a:4c:bc:77:98:b5:20:3a:37:c3:78:e1:2b:25:9f:fc:
03:92:00:88:a0:93:22:09:6d:26:51:fb:d6:31:81:b3:70:55:
9b:a4:21:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:26:48 2025 by rpki-client