Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wDoG_g5ufZbFdOk3UzpHph5p7Mo.roa
File: wDoG_g5ufZbFdOk3UzpHph5p7Mo.roa (raw, json)
Hash identifier: Sdp5KC8UKRwbC/vcrWKf8G5WWLv0BwwUu6CVlJ2/pbY=
Subject key identifier: C0:3A:06:FE:0E:6E:7D:96:C5:74:E9:37:53:3A:47:A6:1E:69:EC:CA
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0181F1E510B7B4A6D9DEB0E73560B767F666
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wDoG_g5ufZbFdOk3UzpHph5p7Mo.roa
Signing time: Tue 12 Jul 2022 10:12:09 +0000
ROA not before: Tue 12 Jul 2022 10:12:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:f1:e5:10:b7:b4:a6:d9:de:b0:e7:35:60:b7:67:f6:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 12 10:12:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c03a06fe0e6e7d96c574e937533a47a61e69ecca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:6e:c4:a1:17:ee:1e:53:e9:d1:73:80:ac:7b:
6a:cc:4e:c3:40:aa:65:f3:89:24:0e:ea:f2:a8:27:
4a:5c:76:60:4b:9d:ae:34:76:d2:3d:e8:6d:d5:36:
37:40:17:e9:f3:b8:3e:0b:72:5b:3b:fa:80:51:65:
0d:9e:6f:e6:e3:1d:64:93:26:6c:e6:78:56:2a:e0:
6b:0b:8f:3b:7a:6b:d3:0e:ac:35:79:af:91:fd:ec:
62:86:ee:ce:59:70:85:f0:f3:3b:33:0b:d1:0e:43:
4d:d4:bd:bd:3f:a1:88:c9:29:61:74:d3:2c:6d:b5:
32:ae:35:14:45:ee:5d:5e:81:9d:e0:21:7a:a0:c5:
c2:67:6e:8c:78:b1:87:35:be:ed:5a:68:b7:5f:02:
4b:71:c0:b5:55:fd:fe:07:3a:c9:a4:f9:7d:df:d4:
24:73:be:17:90:51:41:17:42:98:6c:fd:3e:63:99:
25:77:d8:e6:c2:2d:cf:9e:7e:7c:d7:42:43:ea:e6:
0b:93:82:f5:5c:84:92:e9:54:a3:6f:cc:f3:b0:3b:
b8:6f:5c:a5:1d:86:ce:d7:36:90:8f:56:86:80:a3:
07:2c:c0:9f:1d:a6:a6:4f:70:d4:fa:97:20:1d:38:
1a:f6:2d:e7:16:3f:7a:b1:d1:2d:a3:35:a5:ef:bd:
ce:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:3A:06:FE:0E:6E:7D:96:C5:74:E9:37:53:3A:47:A6:1E:69:EC:CA
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wDoG_g5ufZbFdOk3UzpHph5p7Mo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
30:98:43:67:db:b1:0e:86:d8:32:51:bd:7c:d0:3b:0f:b9:47:
47:ab:37:ad:f8:89:10:c8:46:d8:97:d9:53:11:dd:1e:a1:b7:
e2:65:37:6f:60:e3:72:ca:34:61:a4:20:9d:ba:5b:c6:14:02:
03:54:54:8e:28:76:4d:a3:ba:27:d3:c1:4e:a7:59:6c:7c:aa:
c2:09:0b:5f:fb:25:45:20:7f:48:29:bf:57:9e:17:6e:39:60:
12:1a:2e:05:e0:6d:dd:7f:d0:27:56:81:21:91:d5:b6:16:e4:
a3:c4:0f:56:bd:24:d9:5f:5c:39:82:31:19:58:9f:df:5d:3b:
b6:89:42:4e:b5:37:16:73:50:17:bc:98:73:25:7c:3f:91:d3:
76:87:c9:ed:48:a5:6b:e4:af:67:90:8a:a9:5f:a4:22:84:33:
af:e8:38:cd:9b:70:d6:8f:12:2d:e0:6b:a0:40:8d:74:ea:2f:
8c:22:d9:10:a9:b8:32:b4:d6:cc:bd:8c:e1:40:3d:36:66:68:
b0:9d:a4:25:2c:e7:6f:b0:4a:65:d3:18:22:4d:8c:6f:bc:df:
70:21:9b:89:24:09:9d:17:d5:09:de:03:39:b2:b1:0f:59:75:
db:28:65:36:78:c1:c9:15:53:70:12:01:d1:b7:87:81:46:86:
d3:df:b3:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:33:26 2025 by rpki-client