Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/w_I2DJsb8q_-sN8Gt2WvWC5q3KI.roa
File: w_I2DJsb8q_-sN8Gt2WvWC5q3KI.roa (raw, json)
Hash identifier: 3yLMRQyYcCWVrzbgtvz1qLFvalOfWQQCb+zj+QptE3M=
Subject key identifier: C3:F2:36:0C:9B:1B:F2:AF:FE:B0:DF:06:B7:65:AF:58:2E:6A:DC:A2
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01850A513A2FE5AAFB400181A29CF679894E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/w_I2DJsb8q_-sN8Gt2WvWC5q3KI.roa
Signing time: Tue 13 Dec 2022 07:09:33 +0000
ROA not before: Tue 13 Dec 2022 07:09:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:0a:51:3a:2f:e5:aa:fb:40:01:81:a2:9c:f6:79:89:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 13 07:09:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c3f2360c9b1bf2affeb0df06b765af582e6adca2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:39:4d:ca:6d:14:ce:ed:75:b9:a2:21:5d:88:
a3:da:f4:eb:78:88:42:a6:88:46:c4:90:d0:1c:02:
7e:56:75:72:55:ff:07:30:8c:7d:df:78:0c:c4:c0:
db:85:81:18:db:7a:0c:9c:3d:cd:be:89:5f:ea:1f:
f7:00:27:0a:6f:5d:02:de:0c:ef:aa:96:a3:2f:1b:
e5:30:51:4f:67:0b:0b:72:3b:e2:78:d5:9c:36:9f:
29:2c:5a:7d:b8:d3:42:25:80:85:51:cf:e6:91:07:
eb:ef:43:b3:b2:76:24:13:ef:97:0c:1c:e2:65:96:
2f:68:25:2d:d9:a9:3c:81:21:f1:90:06:64:ae:0f:
22:57:f2:b0:52:f8:5c:d8:d9:61:a0:93:c7:48:94:
66:3d:9a:c5:8f:9a:9c:20:f1:6b:69:9f:ab:b1:28:
99:7f:34:f1:85:ac:8c:5d:5e:09:80:03:ec:ce:95:
54:d5:87:d2:d2:97:51:b4:46:b1:92:85:11:79:a7:
7f:cf:07:73:9c:39:3c:6d:4b:cc:0c:da:e4:0d:ce:
62:1f:d3:6b:b8:4e:02:2d:d2:09:e9:78:70:dc:86:
18:c1:82:c4:b9:e2:7c:ad:99:90:0c:69:bc:74:d4:
3a:b4:52:ae:c4:87:bd:82:fe:68:91:47:80:90:c0:
59:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:F2:36:0C:9B:1B:F2:AF:FE:B0:DF:06:B7:65:AF:58:2E:6A:DC:A2
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/w_I2DJsb8q_-sN8Gt2WvWC5q3KI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
54:1b:55:ce:5e:ce:b1:72:84:f1:dc:ac:11:e6:37:87:34:25:
1a:7b:e6:26:e5:8b:d6:07:68:33:b3:da:ae:50:9d:d2:a4:9f:
6f:da:df:67:58:fd:71:1b:ab:28:63:a2:1c:c0:cd:c8:46:cb:
c4:dc:28:50:4e:78:24:06:2f:2d:50:e4:5d:1d:2c:c4:ad:df:
34:81:1d:aa:89:30:6c:82:e7:07:c4:d7:e0:03:fa:2b:93:18:
23:b1:fe:5d:3e:ab:f4:08:c5:51:be:ff:55:32:ff:74:80:44:
92:8f:4a:86:79:71:7d:b5:a6:ca:21:43:ea:0d:bb:e4:8d:95:
37:af:f7:b3:b4:e0:0f:dd:4e:83:a0:c7:27:14:83:3b:d9:07:
9f:3e:17:9f:2a:00:27:f8:2a:6d:b0:52:8b:1b:5f:0c:97:82:
da:a1:32:75:cf:53:d1:79:b5:10:f9:f7:97:97:f9:fc:df:54:
1d:97:70:9d:eb:29:2d:5e:20:f0:c7:c0:1b:9e:76:25:02:1e:
25:b6:96:49:60:43:c9:72:f5:5d:ea:b8:d2:14:56:80:96:99:
ce:0e:01:b6:75:0f:c1:f3:6c:15:62:2d:2b:cd:ea:2c:c4:83:
82:c6:79:a5:e9:f3:b4:9c:8b:ff:76:e6:6a:50:a9:40:a2:ef:
1f:ff:fb:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 04:07:13 2025 by rpki-client