Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wyfvgPZBaWXdr_x8qm9ME0EkM44.roa
File: wyfvgPZBaWXdr_x8qm9ME0EkM44.roa (raw, json)
Hash identifier: GPDwuhoFGHFP+7UyLfu8VhyIlyqQzjVJ2WVP25UNGl0=
Subject key identifier: C3:27:EF:80:F6:41:69:65:DD:AF:FC:7C:AA:6F:4C:13:41:24:33:8E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01839ED5F70F4501814D154B1F8279A809E2
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wyfvgPZBaWXdr_x8qm9ME0EkM44.roa
Signing time: Mon 03 Oct 2022 17:12:45 +0000
ROA not before: Mon 03 Oct 2022 17:12:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:183:50b3:5643/128 maxlen: 128
2001:67c:64:ffff:0:183:5f81:ab13/128 maxlen: 128
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:183:1279:659d/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:9e:d5:f7:0f:45:01:81:4d:15:4b:1f:82:79:a8:09:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Oct 3 17:12:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c327ef80f6416965ddaffc7caa6f4c134124338e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f9:2c:7e:53:f5:31:ae:13:d1:58:8e:95:a0:
fc:c2:a8:bb:ef:15:b5:07:4a:ab:78:63:14:c2:5c:
1f:d5:ce:f5:9f:dc:40:e8:3a:02:ab:5c:99:53:c3:
44:a4:3e:44:f1:47:1a:c9:b6:10:b9:da:55:fe:93:
5f:cf:32:7a:ff:0a:c0:60:8b:ae:26:47:67:b4:45:
e3:c7:c7:e9:59:31:09:b6:5f:b7:ff:c2:06:b3:98:
30:d3:49:e7:1f:1d:58:e1:2a:79:93:dd:65:aa:f9:
6d:5f:cb:45:0b:ce:b5:e9:65:de:e6:7c:41:b8:f0:
08:4c:3c:5c:35:0f:a5:3f:17:18:6b:f5:d6:d4:3c:
30:d9:d3:f0:80:3a:6e:a1:97:23:39:ee:22:ce:89:
25:e7:fb:77:5f:0a:e1:79:8f:a5:72:32:12:73:5e:
fa:88:75:8a:23:28:7f:f4:10:87:6c:01:b9:b5:85:
04:f1:1b:19:0d:e6:49:ec:63:23:9c:a9:52:d6:29:
1e:da:f6:a0:99:2e:89:55:84:95:93:b3:48:89:4e:
d1:f3:34:c3:2d:fc:94:5c:b3:e7:19:54:a2:79:5a:
79:e8:8f:ac:8d:90:78:e5:d5:e0:17:9d:ae:6b:24:
2e:55:3d:3e:e5:c9:f3:09:11:be:8e:8b:b3:bd:30:
d1:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:27:EF:80:F6:41:69:65:DD:AF:FC:7C:AA:6F:4C:13:41:24:33:8E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wyfvgPZBaWXdr_x8qm9ME0EkM44.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
90:8e:0d:e3:2f:ee:67:b4:22:c2:e4:ac:e2:8a:b3:e7:ae:ec:
1d:5a:20:5c:ff:c4:9d:f4:e9:5e:38:3c:4b:96:10:c6:50:ef:
73:1b:58:5a:b3:ba:7f:d5:fc:66:b5:ad:24:aa:23:09:1e:08:
9f:7e:00:42:c4:5a:b3:c4:01:62:cb:01:fb:ad:8b:b4:8f:dc:
ec:7b:6d:cf:33:d5:27:59:5b:e9:3e:41:7b:a8:d7:7a:3e:b0:
e7:ce:97:d0:ac:99:b4:3d:cb:75:a8:58:02:ea:ff:4f:0f:af:
91:19:a8:b9:60:a4:bb:6a:59:13:22:0d:0c:a3:fa:e1:3d:cc:
e4:8d:65:83:71:2d:8c:8a:ff:66:f2:3a:91:27:33:4f:3c:39:
6e:8b:46:aa:49:e1:f0:eb:b1:4d:4d:88:a1:1b:a6:9b:0b:1d:
91:56:53:2e:a2:7b:79:90:c0:fe:07:9e:6b:00:f2:2f:24:41:
ff:2d:d7:b3:cf:18:20:4f:b2:40:71:f5:ae:15:68:06:c8:78:
d3:09:9a:c3:a2:a4:8a:83:9d:54:33:d7:96:22:a5:d9:89:75:
fc:c8:b4:da:d6:ef:d5:d5:ba:85:24:f4:6d:7a:e2:ad:b7:4b:
20:98:7a:48:bd:c8:54:1d:d6:42:1f:e2:41:86:84:26:f3:1c:
23:d2:1b:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 22:37:06 2025 by rpki-client