Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wmLZZ5Ien5v8iy-PooQgD6xl1e8.roa
File: wmLZZ5Ien5v8iy-PooQgD6xl1e8.roa (raw, json)
Hash identifier: 6486A899QX7FprX8UFbvFe91V6D1LUXBmYXnTkMWX90=
Subject key identifier: C2:62:D9:67:92:1E:9F:9B:FC:8B:2F:8F:A2:84:20:0F:AC:65:D5:EF
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 84EEA0DC
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wmLZZ5Ien5v8iy-PooQgD6xl1e8.roa
Signing time: Tue 17 May 2022 20:14:29 +0000
ROA not before: Tue 17 May 2022 20:14:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:180:a810:6542/128 maxlen: 128
2001:67c:64:ffff:0:180:466e:42dd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:8961:505f/128 maxlen: 128
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2230231260 (0x84eea0dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 17 20:14:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c262d967921e9f9bfc8b2f8fa284200fac65d5ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:86:0f:09:ca:d2:ca:3e:cc:97:12:b1:4b:28:
bb:aa:18:17:80:e1:0e:2f:26:73:fb:33:87:cd:85:
b2:a5:2c:5d:e1:d2:08:8a:6e:5f:d6:19:24:90:8e:
a2:3e:43:de:eb:ae:a6:54:cb:c3:2d:f1:44:eb:df:
c2:a1:c6:96:0f:6a:1d:f1:9c:8e:5e:23:eb:8e:a2:
4f:96:b9:f4:e5:23:60:ba:5d:28:5d:0d:51:bd:32:
11:44:7a:e5:a9:5c:ca:f1:23:40:f5:aa:1b:06:f1:
62:94:48:ef:3a:9d:98:c4:83:3e:1c:db:ab:af:17:
d4:91:88:19:81:2d:18:b8:cc:76:88:0d:9e:0e:8c:
f3:df:4a:1c:eb:bd:26:01:3c:17:35:d3:9f:cf:a2:
0c:13:29:ff:ef:4e:51:7d:13:61:ec:a3:6d:f4:4a:
38:49:74:98:81:8d:65:be:d1:99:06:46:ba:81:4c:
4a:01:a1:e5:e2:94:63:56:90:65:aa:b7:f4:23:4e:
29:9b:f9:de:36:a5:ff:90:d3:4a:ae:53:a4:df:ee:
0a:8e:56:db:9e:3d:07:82:d4:fe:14:09:1b:6d:76:
da:d3:3f:52:99:3e:01:00:52:b4:74:82:09:70:0c:
bd:f8:cb:30:22:1f:8b:2f:16:ea:fe:e9:6e:ae:90:
6f:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:62:D9:67:92:1E:9F:9B:FC:8B:2F:8F:A2:84:20:0F:AC:65:D5:EF
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wmLZZ5Ien5v8iy-PooQgD6xl1e8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9b:62:00:6f:06:4f:54:5a:8c:a4:9b:3d:b4:24:55:a4:ab:23:
b5:50:e6:58:6f:22:c1:b0:0a:1b:04:48:e5:55:c4:57:79:50:
9b:98:64:4d:29:53:8d:53:06:8e:41:93:d9:3c:87:a8:84:44:
de:21:f6:f5:77:25:1c:c7:ed:bf:a1:39:ed:63:fc:2a:8c:0b:
69:3f:21:c5:03:75:9e:5d:e9:20:d2:56:bc:50:60:06:7a:ec:
8f:da:65:a3:16:65:86:99:2b:7c:75:1a:28:77:bc:8d:ab:0a:
ff:28:77:bd:e6:86:4b:fa:09:03:51:62:ce:5c:59:56:c7:ce:
6d:2e:51:6a:fd:f4:fe:e0:b6:7e:01:71:b1:17:b4:e8:ee:f3:
d7:4a:cd:a9:e2:0e:a4:59:db:24:65:04:a5:36:d7:d3:dd:aa:
21:37:27:4e:e2:4b:85:8e:d5:9a:0d:17:95:66:95:c0:b7:e4:
be:88:f4:61:88:60:ae:b5:a0:89:8f:03:43:77:8b:e7:12:7d:
10:d7:87:a1:d0:6e:2a:62:1e:ed:2a:b2:83:14:0b:60:71:a6:
3a:e0:03:42:2c:1b:1f:7e:82:6f:d3:50:7b:a8:aa:70:d6:7f:
a8:a0:f8:35:3a:f8:4e:75:fb:ee:42:f3:24:5e:32:79:f1:30:
c4:61:31:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 00:28:35 2025 by rpki-client