Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wEC6CWsBPRzbv9HnvuLA_G91C7w.roa
File: wEC6CWsBPRzbv9HnvuLA_G91C7w.roa (raw, json)
Hash identifier: 0o6UabASEqV5NdhMZjqWQrLQSg1I6aEHtJlRcC+hkuc=
Subject key identifier: C0:40:BA:09:6B:01:3D:1C:DB:BF:D1:E7:BE:E2:C0:FC:6F:75:0B:BC
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188258A8F0FE1701AD55B85F1E64558C9D6
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wEC6CWsBPRzbv9HnvuLA_G91C7w.roa
Signing time: Tue 16 May 2023 17:10:17 +0000
ROA not before: Tue 16 May 2023 17:10:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:25:8a:8f:0f:e1:70:1a:d5:5b:85:f1:e6:45:58:c9:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 16 17:10:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c040ba096b013d1cdbbfd1e7bee2c0fc6f750bbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:bc:20:1a:76:d2:1b:d8:c0:a9:37:fd:35:a2:
15:69:b0:be:bd:ef:a1:52:5d:54:09:9a:7c:7c:84:
c9:d5:85:36:d4:85:1a:94:c5:2a:71:bf:17:29:e7:
7e:9b:b3:6b:16:8d:6a:87:fd:e2:02:20:87:1b:3f:
62:55:d1:4f:4c:1e:4f:36:2f:cb:88:ef:19:c3:4f:
30:ef:e1:ca:42:45:88:ac:b0:f2:f8:da:c5:fe:bc:
51:44:84:77:f5:f4:7f:c3:97:6f:cd:83:91:3b:90:
f3:af:db:be:07:6e:29:93:bb:7f:fe:3a:5f:3b:c0:
c6:1a:fd:81:9a:a2:1d:57:98:33:ed:5d:51:0b:de:
d2:67:ed:a1:d1:9c:18:aa:19:07:1e:fd:83:c2:28:
12:ab:b3:3c:93:24:6c:bc:10:d3:3a:ea:ee:8f:80:
8a:a3:cd:4c:55:04:33:3f:00:62:e9:86:90:ed:dc:
53:39:6d:4c:5b:68:21:e3:49:48:94:59:6d:d7:ad:
dd:c9:80:57:7e:96:05:ad:61:11:22:a6:69:95:0d:
c1:9c:8e:45:a6:45:d3:04:cf:6d:e4:66:05:55:bd:
24:2d:3d:a3:91:6c:8e:57:b6:34:95:a6:62:e9:0f:
cf:b5:d3:97:9e:2d:2a:a4:44:37:89:fa:f6:8e:06:
f4:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:40:BA:09:6B:01:3D:1C:DB:BF:D1:E7:BE:E2:C0:FC:6F:75:0B:BC
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wEC6CWsBPRzbv9HnvuLA_G91C7w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
91:64:bd:e7:a2:0b:ee:42:e4:54:2a:64:fb:a6:95:f2:a8:11:
50:d6:37:93:f5:ba:93:82:28:9d:8e:67:23:d0:62:67:2e:b8:
7f:aa:c1:ad:5b:26:be:3f:22:f4:12:61:5c:06:3e:f6:b7:ec:
ed:47:3a:b3:7d:5c:45:c5:b5:88:62:8b:81:a9:a6:91:06:7e:
46:c9:e9:98:a2:9e:d3:05:61:e6:2b:ea:4c:73:a8:b7:fa:b9:
87:49:0b:e5:0c:44:75:e2:92:22:c8:05:eb:c5:32:8c:f2:c0:
9e:ee:1a:8d:49:11:a6:16:67:fd:3d:c6:c1:cf:37:ee:b7:f7:
e5:25:cf:f4:4f:d6:07:1a:b9:cd:e4:20:9d:3a:b9:d0:1f:4f:
7d:30:df:58:b4:1d:14:55:ea:b3:a6:c4:5e:42:34:24:f1:19:
95:9c:7e:d2:73:ee:4a:7d:1e:6e:53:f1:d6:f0:57:98:91:17:
e6:f6:54:f5:c5:11:09:eb:1e:a1:3e:12:d2:aa:f9:7a:c5:01:
b5:52:6b:22:3f:c8:e6:bf:09:a6:a6:ac:dc:87:b0:ee:53:8f:
5f:bd:62:1f:ad:99:ed:87:ee:60:b5:ca:bf:ff:a7:9b:54:2f:
13:67:7b:31:c0:ee:60:8e:aa:b6:3f:ac:71:7f:60:14:2f:ba:
37:7c:7f:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:30:13 2025 by rpki-client