Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wwXYEzIQmhngQOIy8fufR95BZv0.roa
File: wwXYEzIQmhngQOIy8fufR95BZv0.roa (raw, json)
Hash identifier: v599TqxrQXyJZ1mm2yPYGAmqc5BRbA0BG64EvZ/whEo=
Subject key identifier: C3:05:D8:13:32:10:9A:19:E0:40:E2:32:F1:FB:9F:47:DE:41:66:FD
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187C8375275A06D3C586287A2A9B51F1B3B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wwXYEzIQmhngQOIy8fufR95BZv0.roa
Signing time: Fri 28 Apr 2023 14:14:41 +0000
ROA not before: Fri 28 Apr 2023 14:14:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:c8:37:52:75:a0:6d:3c:58:62:87:a2:a9:b5:1f:1b:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 28 14:14:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c305d81332109a19e040e232f1fb9f47de4166fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c6:d8:b6:57:07:4e:68:a6:aa:94:31:d9:e8:
84:99:59:65:e8:c7:f0:fa:d0:92:b9:90:34:27:29:
24:6c:af:a5:d0:16:d8:d3:1c:59:3a:f2:c9:36:ae:
22:2a:95:0c:51:ec:0f:cb:01:e2:2d:21:e5:e9:33:
a3:cc:0c:31:2e:94:ab:f0:81:fd:b4:f2:bc:f7:1c:
3c:0f:17:9d:cb:2b:bf:95:c2:12:50:2d:0d:95:51:
f5:28:ab:2d:3f:df:d7:3d:67:f4:99:d0:5b:05:81:
9a:c6:23:8c:b9:f6:c1:57:71:b5:30:f7:67:8f:91:
c3:b8:e1:43:42:8d:7a:28:c9:8a:da:3e:08:01:6d:
17:7c:4a:6f:e3:23:ae:ee:4a:ed:70:51:e3:c9:0c:
58:84:35:af:ea:fa:0a:41:32:e4:59:71:05:2d:5a:
b7:e7:19:e6:ea:b3:1c:22:c4:ad:b5:fa:92:90:e6:
d0:fa:e4:a4:26:d9:7c:c8:61:33:5f:eb:b4:71:eb:
69:17:ee:4e:50:b4:07:ef:ab:1b:17:4e:48:64:c1:
34:5b:a8:1c:fc:f9:87:91:a6:39:c5:ca:1d:4d:0b:
fe:05:d3:15:06:40:05:c8:24:9d:c2:69:7c:9a:a5:
8a:77:e6:05:d1:e8:f4:7b:76:5b:dc:c6:57:43:69:
fb:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:05:D8:13:32:10:9A:19:E0:40:E2:32:F1:FB:9F:47:DE:41:66:FD
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wwXYEzIQmhngQOIy8fufR95BZv0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
83:4f:05:7e:46:5a:18:70:49:5c:d0:5b:37:d8:a9:cc:03:6c:
07:e6:80:c5:00:06:3d:c4:85:0e:b6:04:3e:ef:f7:bd:4d:3c:
4c:c5:85:c5:c8:02:fd:7c:a3:b6:9a:df:dc:6e:94:f6:09:12:
e1:9b:34:99:c6:43:3a:c0:80:06:da:2a:f8:07:db:77:fd:ec:
a1:b1:aa:e4:4b:05:99:0c:cb:11:bc:22:23:27:88:84:c5:49:
7d:46:f9:e2:1e:25:1e:1d:4d:e2:37:ea:a4:41:2e:2f:80:24:
5c:9e:1a:9a:a3:cd:5d:88:9e:0b:17:46:ea:78:56:28:aa:0b:
a1:cc:5f:db:1a:ce:e3:2b:51:b9:a7:74:8e:55:1b:30:d1:01:
de:95:45:37:a2:3c:f0:f0:f0:82:de:48:25:4e:2c:f4:0c:97:
af:99:e6:f2:9a:05:39:ea:02:19:57:97:b6:c9:a3:0e:a8:04:
0e:e4:91:c4:7a:86:50:f4:92:d4:32:47:83:49:26:47:e4:2c:
04:1d:a8:34:82:cf:8d:34:43:dc:95:f4:bf:9d:aa:4a:7d:cd:
b6:7f:2f:d5:e4:39:30:57:d3:0a:f3:0c:37:93:33:2b:80:f4:
c1:44:5f:dc:d5:e6:24:fa:9a:35:72:7c:77:d4:d8:50:74:55:
de:ef:e2:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 23:49:25 2025 by rpki-client