Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wbvKjadYjakBLxSdfDKJOMxViP8.roa
File: wbvKjadYjakBLxSdfDKJOMxViP8.roa (raw, json)
Hash identifier: l1/WsJoMXKGpZxgomXHAJ9gOmqzz0dZFamKjlHxY2ps=
Subject key identifier: C1:BB:CA:8D:A7:58:8D:A9:01:2F:14:9D:7C:32:89:38:CC:55:88:FF
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A1720904F2A00DE2F8737F74541EF295E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wbvKjadYjakBLxSdfDKJOMxViP8.roa
Signing time: Mon 21 Aug 2023 08:05:24 +0000
ROA not before: Mon 21 Aug 2023 08:05:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:18a:171f:a349/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:17:20:90:4f:2a:00:de:2f:87:37:f7:45:41:ef:29:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 21 08:05:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c1bbca8da7588da9012f149d7c328938cc5588ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:7e:35:34:3f:9d:53:60:e2:aa:4b:90:fe:da:
5e:43:3e:cb:3c:e4:3e:7e:6d:50:d4:82:79:17:08:
32:e1:d5:7d:62:71:4e:3d:80:8d:37:43:98:06:d6:
8b:94:b8:fa:09:54:9e:b1:8f:a6:92:e4:2d:cd:b0:
f4:3f:25:15:bd:7b:91:8c:39:0c:92:d7:b4:e7:78:
31:8d:6c:3d:2c:34:92:f9:46:45:05:d2:60:ea:fd:
cb:15:e3:11:56:13:39:77:b1:19:9a:4c:93:18:94:
a9:91:96:8b:68:88:a4:11:d6:5f:d2:07:9f:f6:64:
55:97:b1:98:d9:85:57:18:9c:17:64:5c:dc:23:03:
0d:ab:ce:c6:a5:07:d6:1e:0c:2a:89:0f:7e:16:33:
b3:fc:b0:ce:3f:94:20:10:b6:50:0c:0e:ae:7c:15:
ce:18:37:37:39:f2:77:9f:bc:41:83:33:d6:af:e7:
4f:99:f8:90:71:5a:ec:c2:cf:3a:02:e4:a0:41:74:
c1:c6:7f:1a:bc:4b:6c:dc:2d:92:a7:1a:9e:9e:c6:
36:d7:31:38:a2:5f:f4:51:31:06:e5:5b:f3:85:d1:
37:cf:d0:1a:43:fb:5c:cb:2b:41:2a:7f:1f:36:3b:
b5:5f:68:2b:64:39:4f:8f:b1:e6:fc:bd:0a:c9:3f:
80:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:BB:CA:8D:A7:58:8D:A9:01:2F:14:9D:7C:32:89:38:CC:55:88:FF
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wbvKjadYjakBLxSdfDKJOMxViP8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b4:a9:7c:57:61:46:1c:42:47:f7:33:7e:8b:2d:7b:52:82:90:
d2:cf:91:8f:67:c2:56:d6:a8:49:fe:8c:06:68:91:dd:a3:75:
54:46:66:7c:39:bb:1b:4d:87:2e:cb:50:81:3e:82:9d:ae:1b:
27:98:6f:b9:74:82:f0:c9:de:23:74:be:c4:4b:ce:6b:df:0d:
0a:c7:81:a0:e9:90:8a:96:67:db:80:f8:b4:05:4a:98:0f:91:
a2:cf:31:5f:19:da:52:70:c7:40:2b:fd:c5:93:89:08:5c:a1:
24:2b:da:86:2f:e0:ee:6d:8e:1e:c3:96:3e:f5:aa:f5:de:75:
35:39:0c:6f:13:89:96:c9:3d:75:a8:55:91:b3:ed:95:b9:04:
ab:01:a7:fd:9e:0f:72:ad:68:e4:2c:89:91:53:4d:a7:3e:02:
e2:7d:8e:e5:67:87:4c:02:e4:e2:51:a7:ea:a0:ed:cd:97:81:
4f:14:4a:ae:7e:89:5c:40:2b:4a:56:7a:23:10:25:bd:b1:65:
d2:0f:70:fc:f8:09:4d:7e:a8:84:e6:69:15:1e:a1:d3:50:91:
36:4e:16:05:53:03:78:3e:31:c6:7a:78:5d:f0:1c:c2:30:d6:
88:1b:89:f3:a7:a4:86:2f:f0:d8:f8:a4:b7:9b:a0:7c:27:66:
c9:8a:26:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:33:43 2025 by rpki-client