Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wrhZnBr1mDlgPAcAoH83oozMhUA.roa
File: wrhZnBr1mDlgPAcAoH83oozMhUA.roa (raw, json)
Hash identifier: Y4aUVE4n+EzhRiD3dflgDVTxG8PP1+5JywNocMyoyF4=
Subject key identifier: C2:B8:59:9C:1A:F5:98:39:60:3C:07:00:A0:7F:37:A2:8C:CC:85:40
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188B95DAB620B33AE73BEC557214A158E2D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wrhZnBr1mDlgPAcAoH83oozMhUA.roa
Signing time: Wed 14 Jun 2023 10:05:03 +0000
ROA not before: Wed 14 Jun 2023 10:05:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
2001:67c:64:ffff:0:188:b95d:2952/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:b9:5d:ab:62:0b:33:ae:73:be:c5:57:21:4a:15:8e:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 14 10:05:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c2b8599c1af59839603c0700a07f37a28ccc8540
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:14:ad:a4:99:9f:2e:43:58:da:cc:04:6b:89:
39:5f:58:6c:52:f8:a0:6c:6c:46:3d:e8:e8:4a:63:
44:50:1a:23:60:c0:c8:f3:3b:3d:86:be:5f:c4:54:
96:72:76:f8:47:8e:f3:4c:c4:49:d7:04:18:c2:74:
ac:18:f4:50:89:2e:13:50:2a:1d:ea:81:f1:54:24:
a3:96:8c:00:2a:ad:fb:47:61:39:b4:a5:66:0a:59:
f5:8f:f3:f9:43:3a:40:9c:46:7c:7a:c4:4f:2e:da:
9b:97:01:8d:bb:d5:a2:d5:70:e9:3b:11:90:d7:32:
cb:e0:35:8a:e3:40:71:70:9c:13:31:29:2c:3c:b0:
95:7c:13:b0:47:9c:16:d8:8a:08:9f:a7:28:61:3c:
b5:b5:1e:87:92:60:b5:90:b5:0d:16:6a:29:56:b1:
cf:df:35:71:e1:cf:9f:18:48:eb:27:e7:25:b6:05:
9e:b7:7e:eb:8a:ea:e8:68:e9:f5:31:ac:23:0a:1f:
e5:bb:22:61:40:1f:d8:3a:c8:04:56:c3:81:5f:9a:
7d:d4:bb:9e:a1:c4:3d:25:9f:06:46:1c:72:bc:79:
e5:6e:52:7d:07:b2:c3:31:ce:35:03:1f:5a:a6:e5:
ad:f3:ec:dc:1f:56:5c:98:24:8e:f8:22:4d:6f:42:
6e:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:B8:59:9C:1A:F5:98:39:60:3C:07:00:A0:7F:37:A2:8C:CC:85:40
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wrhZnBr1mDlgPAcAoH83oozMhUA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
50:5b:f3:cb:d4:89:f5:fd:a5:9f:78:ec:33:9d:f6:e2:38:90:
36:c3:1b:77:bf:03:35:a6:0d:db:a3:09:77:f4:a9:81:88:65:
db:98:30:80:75:0b:e2:59:8c:93:ee:5c:be:56:20:67:04:d2:
a7:4f:d5:4e:16:53:99:fc:01:75:6c:b5:55:d1:5a:f8:8d:a5:
6d:10:f3:bc:61:b0:0a:d4:94:43:97:08:ff:f6:d7:f7:39:e2:
d9:bc:7f:44:31:e4:66:41:9e:08:05:74:2c:ad:19:6d:06:32:
c9:99:b9:9a:04:b5:51:10:7e:4c:93:30:45:c5:eb:cf:5a:d5:
49:93:67:4e:85:ca:67:ce:5e:43:e0:3e:0d:01:10:0c:26:87:
aa:f8:c0:ea:c4:b4:ba:59:4f:28:0e:ee:60:74:24:f9:d5:d5:
0a:04:b4:9b:47:39:52:82:dd:34:4b:18:46:88:f8:6a:1a:12:
fa:06:22:a9:49:a8:2d:04:22:f7:63:10:30:05:a9:39:35:e8:
0c:c0:37:4c:00:81:bb:4d:43:0d:c9:89:9b:5b:df:83:97:06:
8b:95:e9:00:65:38:e2:18:ef:cf:66:61:70:77:93:c5:6f:ec:
02:e1:27:24:3b:3f:5c:01:43:d6:cb:3d:ae:00:cf:e4:e6:66:
27:20:0f:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 15:17:09 2025 by rpki-client