Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wodl6rT_Um98m13w7tRwOl-jI-4.roa
File: wodl6rT_Um98m13w7tRwOl-jI-4.roa (raw, json)
Hash identifier: bEZTvJPv50QJ/BNz3rUOXxkKDWmOYi1BMc2yk28N4nM=
Subject key identifier: C2:87:65:EA:B4:FF:52:6F:7C:9B:5D:F0:EE:D4:70:3A:5F:A3:23:EE
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01850F3CFDA77269D2F49D678928AED9330D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wodl6rT_Um98m13w7tRwOl-jI-4.roa
Signing time: Wed 14 Dec 2022 06:05:33 +0000
ROA not before: Wed 14 Dec 2022 06:05:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:185:f3c:1e79/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:0f:3c:fd:a7:72:69:d2:f4:9d:67:89:28:ae:d9:33:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 14 06:05:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c28765eab4ff526f7c9b5df0eed4703a5fa323ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:fe:8d:c2:7b:c0:6a:37:5b:35:b4:64:4d:62:
79:06:be:cd:46:1d:ef:da:08:c4:67:70:c5:86:4c:
ba:47:02:b5:67:14:16:17:e5:1e:9c:30:2d:49:87:
db:ba:bc:6a:57:c0:fd:32:c3:19:cc:97:42:85:e7:
b0:8a:e6:b9:ec:56:02:09:08:14:c8:b0:23:b0:00:
eb:0e:7c:96:b4:84:54:e2:19:eb:9c:1c:3e:1a:11:
73:b3:02:dd:97:f3:94:36:a6:cb:6d:64:86:68:a8:
9d:26:1b:a4:19:0c:a3:7a:ba:97:7e:33:a2:a1:3a:
b6:23:72:ab:36:34:bc:14:41:94:17:b7:ef:81:bb:
cf:45:93:7a:12:ad:12:19:57:0a:81:91:e2:86:8b:
e3:53:07:7e:42:1f:e8:a8:e8:8d:ce:a0:eb:50:b0:
5a:d4:6e:38:2c:0d:c5:ce:20:8d:a3:a4:fc:82:24:
92:5f:3f:72:2a:1e:15:94:16:24:2d:7c:89:e1:7c:
75:51:2f:64:a3:47:6a:60:2a:73:b6:f3:ae:fe:2c:
ad:a4:90:cc:7b:d7:00:66:2d:c0:0c:3d:d4:a0:9b:
8e:99:72:de:1a:b7:ce:13:98:93:9d:73:90:9d:17:
58:a1:06:0b:f6:b1:a8:e4:3a:5a:12:71:bf:ec:e0:
6b:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:87:65:EA:B4:FF:52:6F:7C:9B:5D:F0:EE:D4:70:3A:5F:A3:23:EE
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wodl6rT_Um98m13w7tRwOl-jI-4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9f:0d:08:c6:10:e4:f0:eb:00:36:64:d3:18:de:f2:47:f8:3a:
a0:14:f6:ce:58:1c:02:be:8c:67:19:a9:0e:87:50:29:9a:e7:
2b:7f:6f:19:58:90:e8:11:f7:7c:5c:5b:6b:00:3d:b5:c3:31:
86:2e:c6:97:a2:c6:38:5f:d2:5e:01:a4:d9:b3:36:a9:18:17:
06:c5:0d:76:6e:e3:51:d7:59:e3:4d:f0:ba:bb:e0:94:86:bf:
cb:ea:ed:37:22:58:d9:bc:6a:ab:92:b1:e6:9a:70:a4:2b:9a:
ec:50:25:9d:97:f6:e0:d8:df:02:32:d4:b6:89:9e:27:b4:6b:
53:7e:bb:13:ad:a5:bb:53:08:9f:ca:18:73:f7:2d:ed:be:07:
5b:80:b0:31:1e:9c:6a:33:c0:c4:61:27:12:6d:9f:c0:b0:3c:
69:2f:0b:03:9f:99:39:b9:57:3b:c6:9b:3d:6c:eb:4e:53:db:
24:b2:23:ea:23:0f:10:05:d4:9b:88:4d:15:2a:33:4a:cc:a6:
c7:31:1d:44:22:0d:ef:c6:0c:9a:15:03:d9:f4:33:ca:79:05:
e5:0f:e0:be:7d:ef:36:38:3f:1c:c4:fe:57:a9:39:6f:e9:8a:
8a:df:03:53:9e:a3:06:18:10:ff:e2:ea:99:4f:7f:4f:5d:90:
cc:d7:0c:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 02:03:26 2025 by rpki-client