Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wtixODzYirNT-nSh_YOV6WoCb7Q.roa
File: wtixODzYirNT-nSh_YOV6WoCb7Q.roa (raw, json)
Hash identifier: ZAafVdfwsSNN3IRsZWkbpazGcRWUA9dDhaeNgMxLmSo=
Subject key identifier: C2:D8:B1:38:3C:D8:8A:B3:53:FA:74:A1:FD:83:95:E9:6A:02:6F:B4
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 7E10FA61
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wtixODzYirNT-nSh_YOV6WoCb7Q.roa
Signing time: Sun 24 Apr 2022 10:08:44 +0000
ROA not before: Sun 24 Apr 2022 10:08:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:180:466e:42dd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2115041889 (0x7e10fa61)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 24 10:08:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c2d8b1383cd88ab353fa74a1fd8395e96a026fb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:be:aa:58:c5:e2:95:28:42:d5:f9:23:f2:bb:
ea:96:97:ee:1d:0f:2b:4d:d2:50:1a:0d:48:ab:c3:
f7:96:ca:8a:aa:10:66:eb:64:bd:fb:d4:3c:ff:5d:
77:fb:2b:a2:76:75:e9:32:4f:65:9b:6c:d9:57:b4:
93:06:c8:69:e7:66:0f:2f:99:90:29:41:00:fe:67:
18:f1:af:e7:19:ec:6d:a6:ec:0a:14:4b:09:b1:75:
c0:2f:71:8f:1d:ad:6b:91:19:1c:f7:eb:bd:27:6c:
8d:51:a0:48:f9:b4:71:76:8d:1c:e8:96:a7:08:6d:
d9:35:19:3e:b3:cb:b6:6c:6b:7f:ca:fc:a4:0d:fb:
d1:2d:c9:8d:a1:98:d9:94:11:71:ee:b1:ea:e6:b6:
b6:98:44:05:a0:de:ab:51:74:68:1b:24:c4:90:fc:
39:98:b9:b2:f2:98:76:46:c0:7c:ad:e4:02:27:f3:
48:95:6a:91:1f:03:04:f5:7a:54:82:51:82:d6:74:
82:c6:50:96:f2:88:36:88:a2:ad:36:16:ad:e8:09:
de:f2:77:3c:b3:b4:15:7d:b7:04:1b:b0:7c:ef:6e:
73:65:70:44:2d:68:d4:d3:fb:af:12:6e:e4:0a:5c:
4a:1f:95:e8:3c:98:ad:b7:a7:4b:6c:6c:2b:9f:09:
b1:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:D8:B1:38:3C:D8:8A:B3:53:FA:74:A1:FD:83:95:E9:6A:02:6F:B4
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wtixODzYirNT-nSh_YOV6WoCb7Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0c:12:92:34:85:1f:ed:78:9b:0d:2b:7e:e6:1d:86:02:a0:1e:
c3:48:ea:75:16:0c:15:bd:3d:23:00:86:27:3b:b8:e0:ce:4f:
36:a5:9e:f0:5c:40:f2:90:e8:c4:1b:d0:27:37:5c:a8:48:6e:
21:8e:d9:b0:ea:dc:02:30:de:6c:1e:b0:eb:8c:98:9a:ee:2c:
73:6c:19:5a:c6:3c:45:71:d1:52:f9:57:dd:74:71:c3:18:37:
72:7d:93:73:c1:7a:7f:ac:63:85:70:9e:3c:e0:9d:af:6f:f1:
be:2d:dc:16:ee:08:a4:27:ce:41:2d:58:a7:5f:7f:2e:d7:a2:
8c:51:03:51:9b:0e:98:fd:d7:d2:52:b6:6d:18:f6:c8:01:64:
cc:31:80:13:7b:2e:e8:35:c0:1c:e2:01:c5:e5:a8:8e:0a:34:
3e:05:66:fa:a3:c9:3d:79:31:6f:ae:fe:96:ca:e9:44:6f:35:
33:be:b3:4f:2e:8c:33:dd:75:8d:e2:f2:33:71:12:34:68:39:
9e:79:b2:27:36:55:92:30:11:e4:94:63:83:8d:60:b7:3d:2b:
b6:8c:e1:82:7d:06:87:21:2c:d9:ee:78:de:6c:e3:74:8e:bb:
7b:b2:25:d4:0f:7a:ee:73:a9:f8:67:33:2e:a7:e7:6b:54:dd:
f5:25:c9:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 08:57:12 2025 by rpki-client