Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wgWwvT3rJK6ekczEnHe_K4_PV9E.roa
File: wgWwvT3rJK6ekczEnHe_K4_PV9E.roa (raw, json)
Hash identifier: w328K8FyaeOpouHSEIWyQ59Dhbil+xt9FmJoEAmA7MM=
Subject key identifier: C2:05:B0:BD:3D:EB:24:AE:9E:91:CC:C4:9C:77:BF:2B:8F:CF:57:D1
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0182406F29A9861775925F59ADA9AA3A1F3B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wgWwvT3rJK6ekczEnHe_K4_PV9E.roa
Signing time: Wed 27 Jul 2022 16:13:23 +0000
ROA not before: Wed 27 Jul 2022 16:13:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:40:6f:29:a9:86:17:75:92:5f:59:ad:a9:aa:3a:1f:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 27 16:13:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c205b0bd3deb24ae9e91ccc49c77bf2b8fcf57d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:8c:65:59:fd:ba:fc:f5:b2:69:54:6a:80:c8:
60:e1:c9:97:d9:14:b1:0b:03:57:30:83:73:b2:51:
1f:6b:0b:bb:13:62:7b:0d:77:57:c1:51:16:d3:c3:
c7:cf:19:03:cc:c2:8b:28:4d:25:12:a5:13:72:61:
20:64:18:b4:07:74:e8:93:4d:4d:d0:df:3c:ca:0c:
5b:f0:a8:c2:a1:38:86:e5:f6:d4:86:f8:fb:e4:98:
d9:50:be:15:c9:aa:68:c4:d1:59:fc:e5:39:64:6b:
f1:2a:89:24:2c:9b:89:d9:f9:5c:55:c3:c2:fe:59:
1c:05:5e:3d:c5:27:57:1d:68:5e:4a:5d:42:c5:28:
81:03:9e:d8:ef:6e:d2:06:ed:7c:0b:0e:bd:c5:1d:
22:23:9a:af:53:3d:1f:12:16:59:c6:6e:a0:2f:91:
a5:16:f9:23:16:85:bc:a2:65:28:f5:ff:1c:1f:b0:
62:44:47:01:d6:fa:81:d4:48:9e:a3:42:d9:5a:88:
f1:9a:59:69:06:16:2f:a4:b9:80:df:e9:f4:76:a7:
a9:86:4f:71:8c:96:cb:c5:75:80:19:53:8b:cb:7e:
43:4a:1d:b2:e1:dc:b7:c7:3b:42:4f:0a:da:23:d4:
f2:47:c7:e4:06:c4:c6:38:cb:28:64:3d:9a:f8:82:
47:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:05:B0:BD:3D:EB:24:AE:9E:91:CC:C4:9C:77:BF:2B:8F:CF:57:D1
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wgWwvT3rJK6ekczEnHe_K4_PV9E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
99:12:0b:91:dc:cb:d1:5a:f3:a0:fb:bf:71:80:f5:a2:d1:14:
b9:19:85:e1:3b:a3:71:ce:65:99:5a:85:3a:ea:ba:ba:b6:72:
3f:5b:37:20:ed:de:9f:27:43:96:45:dd:6b:49:e9:2e:e0:28:
41:a5:dd:e5:b7:91:f6:51:0d:8b:7c:c5:29:de:55:5f:86:c7:
44:ac:90:cf:80:4d:c9:4d:90:26:8f:b0:7a:56:54:54:f1:82:
87:77:70:14:fa:dc:7b:b0:d5:5d:57:ea:91:75:6f:0c:d6:b0:
b9:11:c6:97:b9:2f:5e:89:c5:3d:bd:a2:5c:63:a9:25:35:c9:
f3:f4:83:dd:8d:15:38:5f:6a:3a:00:b8:86:e5:e4:97:dc:1c:
27:9e:45:0b:f0:bf:20:ef:b4:c5:ef:77:ad:59:7e:c4:bb:33:
95:d6:33:1b:c1:1d:ad:5d:5b:46:b9:1c:ea:f0:60:81:a4:40:
a3:38:5f:e9:f1:31:cc:91:8a:51:0c:b5:83:fa:23:4d:cc:8b:
84:83:fc:3a:51:13:eb:24:d6:b1:cf:8d:5f:70:e4:98:2e:39:
7e:99:4a:13:16:63:98:9e:3c:e6:94:21:49:f9:cd:80:ad:af:
38:df:c2:82:94:0f:fb:3f:83:a0:94:86:db:7c:bd:1e:b7:63:
9e:80:73:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 22:31:52 2025 by rpki-client