Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wbs0iUCsYSk7x8KZEAGnoeo5PBo.roa
File: wbs0iUCsYSk7x8KZEAGnoeo5PBo.roa (raw, json)
Hash identifier: vWG9cQRcactu830ZkIEOkQEghUS/bFd2EoXFO2l4BHQ=
Subject key identifier: C1:BB:34:89:40:AC:61:29:3B:C7:C2:99:10:01:A7:A1:EA:39:3C:1A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 7949A04E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wbs0iUCsYSk7x8KZEAGnoeo5PBo.roa
Signing time: Thu 07 Apr 2022 16:14:20 +0000
ROA not before: Thu 07 Apr 2022 16:14:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2034868302 (0x7949a04e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 7 16:14:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c1bb348940ac61293bc7c2991001a7a1ea393c1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:cc:95:a3:64:ab:3a:49:87:4a:a2:ec:d2:2d:
95:44:2c:50:91:99:02:8d:11:49:3e:8b:60:e1:57:
c3:bb:a0:91:cc:0d:37:a1:54:eb:64:f3:47:07:f8:
b1:82:40:55:15:7d:fc:aa:e0:1d:44:07:eb:53:39:
ef:a7:0b:41:93:4b:c2:02:3a:38:37:a2:c9:6d:47:
40:81:dd:54:c1:1c:b1:8a:d4:53:80:0e:47:9d:05:
7c:cb:67:02:a2:6d:ac:f4:3e:b8:b1:66:54:90:da:
95:16:92:90:e4:79:35:d0:b2:c5:71:c7:cc:97:a3:
ab:2d:46:54:36:f6:53:f0:7f:83:98:53:2f:3f:ce:
d5:f0:8c:da:dd:a4:3f:fd:79:4e:08:e5:eb:b6:f2:
f2:68:7f:ef:bb:a9:69:87:19:70:67:bd:9a:74:3b:
43:e2:2f:1d:c2:7a:ac:29:0e:e3:7a:7e:05:df:3a:
31:f5:53:58:4b:0b:3a:d4:dc:ba:48:7e:d1:20:27:
2f:7a:a3:42:36:61:72:8c:18:07:87:50:32:fa:72:
28:69:2a:c8:8d:8a:51:0a:ea:86:11:43:a5:e0:87:
27:e8:d6:7f:41:27:3f:3f:d6:49:5b:3e:34:99:66:
a9:4e:03:9f:93:51:62:1e:59:65:8a:9e:f2:76:2d:
51:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:BB:34:89:40:AC:61:29:3B:C7:C2:99:10:01:A7:A1:EA:39:3C:1A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wbs0iUCsYSk7x8KZEAGnoeo5PBo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a4:d7:84:36:db:e4:34:5e:e5:b6:e2:d9:e4:2b:ea:6c:1a:e4:
5a:66:35:b0:c1:bf:6d:13:2f:35:b2:58:7c:56:0a:94:d2:a3:
24:3d:3e:38:b4:3b:b1:4d:dd:93:dc:b3:e6:9a:60:d3:c3:17:
af:40:06:fe:b9:af:d1:87:32:cb:1e:c6:40:b1:9b:3e:fc:00:
16:5c:0d:eb:d5:1c:25:78:e1:d5:2c:7f:a3:35:38:75:50:5c:
36:60:3f:6a:f0:ec:c6:55:d1:63:66:ab:4f:3e:51:3b:e8:39:
15:65:06:9c:66:04:da:d5:16:1e:f4:f3:78:57:45:87:64:79:
2a:5c:02:b7:c7:1a:84:e0:d8:64:78:e9:22:1b:46:a7:1a:70:
41:0a:b6:74:0d:0e:6a:82:94:0e:a0:61:03:65:9e:bc:30:2f:
8e:f5:d9:26:64:c6:bc:67:54:f2:7c:08:61:d2:84:3b:97:0f:
b9:0f:63:97:d0:70:c3:04:af:72:be:7c:f2:da:c4:3f:01:fb:
65:06:38:7d:a3:eb:0d:cd:b2:55:50:fe:71:12:9e:81:80:00:
5e:f5:8e:2f:33:5c:c8:10:68:44:d6:1a:a9:cc:88:b0:e7:c1:
03:c4:94:a7:8b:ff:db:4f:96:ca:da:89:e9:aa:df:9d:34:e1:
78:30:38:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 16:50:44 2025 by rpki-client