Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wgmlzu_KWwBgkAz5otx5ncHDMPU.roa
File: wgmlzu_KWwBgkAz5otx5ncHDMPU.roa (raw, json)
Hash identifier: 5oqU4ao5Y/akVaCTCWn/eppq8W9JtXukFMk4QYmsjKc=
Subject key identifier: C2:09:A5:CE:EF:CA:5B:00:60:90:0C:F9:A2:DC:79:9D:C1:C3:30:F5
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0182A8E6D02112CC50BA50C71D037E92A67B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wgmlzu_KWwBgkAz5otx5ncHDMPU.roa
Signing time: Tue 16 Aug 2022 23:04:35 +0000
ROA not before: Tue 16 Aug 2022 23:04:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:182:a8e6:ae52/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:a8:e6:d0:21:12:cc:50:ba:50:c7:1d:03:7e:92:a6:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 16 23:04:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c209a5ceefca5b0060900cf9a2dc799dc1c330f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:14:6e:08:58:e8:20:81:f1:18:c2:62:80:8e:
bb:e7:74:a2:a7:3d:9e:8f:7b:d5:74:8d:2a:af:13:
73:57:ae:14:0e:80:26:74:6d:84:84:03:3a:21:d0:
ac:81:de:15:1b:ab:e2:40:81:12:2a:20:64:14:d1:
0e:d4:90:65:e9:bd:42:9e:a0:4d:53:44:d8:40:4c:
96:fd:96:58:d8:80:91:a5:9c:22:c7:d4:88:cc:64:
4a:03:aa:4d:89:73:b8:a6:4f:1b:85:ec:14:67:12:
ce:d1:67:3f:9c:45:bf:e0:da:55:fa:b7:3f:53:b2:
bf:b7:99:40:7b:73:34:87:07:e1:12:af:61:8a:99:
47:f7:6e:94:78:a5:51:c1:38:dc:db:25:30:d5:b2:
c2:8d:b0:06:47:8a:e4:b9:1f:a8:6e:9c:5a:62:87:
b6:ba:05:f1:b7:7e:06:c6:e4:1b:ff:c8:d3:9f:71:
f7:14:36:f3:e0:4d:40:56:f1:73:b1:21:72:a9:2b:
3d:27:da:80:c5:0f:d9:9c:f4:1e:4e:6a:33:d4:a0:
b9:44:3a:a1:60:b6:86:4b:77:5e:3b:9a:f5:59:68:
de:66:7d:e9:53:46:d3:e7:a6:db:4c:bd:7b:a2:13:
1c:5e:d2:b1:01:a9:8d:9c:01:21:5e:71:ba:d1:ed:
37:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:09:A5:CE:EF:CA:5B:00:60:90:0C:F9:A2:DC:79:9D:C1:C3:30:F5
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wgmlzu_KWwBgkAz5otx5ncHDMPU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
12:c6:69:b8:42:48:64:fe:e6:35:52:8d:c0:5c:68:9c:2f:8f:
e3:33:dd:9c:30:7a:8e:81:e2:37:b2:29:0d:73:b6:9c:56:b0:
f2:95:dc:8f:f8:75:0d:27:57:bd:35:44:96:aa:30:b0:3a:cd:
c7:7d:a2:e2:cd:05:33:6b:ab:e1:f6:47:b8:d7:39:0f:f4:7e:
fc:9b:b1:5e:37:1c:bd:e9:fd:7e:5e:3e:40:e2:b1:e5:5d:a2:
67:a3:56:28:24:02:58:13:c9:0b:61:9f:3b:03:af:75:09:0a:
87:1a:a3:47:41:f7:0e:bb:59:8f:30:3e:f8:ad:41:b2:5b:f2:
7b:49:5b:79:27:cb:ee:c2:d2:fc:37:b7:7d:ab:28:38:1c:79:
f9:69:98:ad:63:96:71:d0:6b:af:5d:5e:56:90:5c:6c:2d:d2:
20:54:65:ff:d0:e1:33:8a:b4:d7:ae:d6:a1:09:df:fa:00:a4:
72:3c:0c:9c:7c:f3:ea:73:d5:df:0f:da:6e:b5:f0:f9:34:c6:
57:57:b8:23:a7:54:c9:ad:fa:34:08:1b:68:60:8d:6a:6e:e3:
2d:f0:6c:c1:97:a4:13:c9:a0:8f:4f:61:ce:48:9d:c0:8b:16:
69:18:42:63:cd:8e:ea:32:9a:74:3c:87:35:f7:56:62:52:e8:
70:ce:d0:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 18:35:59 2025 by rpki-client