Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0WEI4uRqGSABl_i49JFskVG-ATI.roa
File: 0WEI4uRqGSABl_i49JFskVG-ATI.roa (raw, json)
Hash identifier: jraY9YCv+CFOEJWNaiReTlB7Fx5QcLqGCUtTZhpzc5M=
Subject key identifier: D1:61:08:E2:E4:6A:19:20:01:97:F8:B8:F4:91:6C:91:51:BE:01:32
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018810B92643BA61E4FFAFC169D1AD1E3F45
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0WEI4uRqGSABl_i49JFskVG-ATI.roa
Signing time: Fri 12 May 2023 16:09:09 +0000
ROA not before: Fri 12 May 2023 16:09:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:10:b9:26:43:ba:61:e4:ff:af:c1:69:d1:ad:1e:3f:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 12 16:09:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d16108e2e46a19200197f8b8f4916c9151be0132
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:4f:75:1d:1e:82:f9:7f:c9:08:e9:d8:2e:ed:
aa:f5:7e:a4:85:ef:22:50:09:14:d9:c8:68:c4:b8:
a1:18:b6:a2:1e:46:af:30:10:83:3d:14:96:5b:44:
4d:08:1e:d4:f4:b8:5a:b3:c5:fd:ff:8b:bc:f0:9e:
76:80:63:f1:d5:37:4b:18:ee:e1:c9:93:8c:ac:c2:
27:e3:96:2e:3d:4f:b1:5b:90:52:7b:91:4e:3c:d2:
a7:f6:6b:2e:96:88:ab:08:75:fa:df:3b:47:86:87:
33:74:35:55:4f:71:26:b9:9d:1a:02:83:88:79:10:
eb:b0:1e:e0:29:ec:6b:95:80:19:68:40:18:f0:0e:
65:9b:af:5b:ba:fe:fe:fd:00:31:e7:03:5c:5f:64:
23:1e:42:65:0a:20:63:e6:d3:6c:09:7f:0c:27:b9:
bc:30:63:1c:88:2d:49:8e:cd:47:ff:64:c9:30:07:
a7:25:72:ee:75:34:36:05:c2:13:1a:70:1f:7d:df:
78:ef:73:a2:cf:c8:69:4d:5d:f1:39:b0:5d:01:f3:
17:e5:43:4e:62:7c:a4:12:22:7f:90:16:83:f4:34:
cd:99:fc:f2:fa:2a:25:89:e7:23:96:f0:2d:19:22:
5a:1a:59:fe:21:7f:96:a8:08:dd:3f:2a:04:58:88:
6c:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:61:08:E2:E4:6A:19:20:01:97:F8:B8:F4:91:6C:91:51:BE:01:32
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0WEI4uRqGSABl_i49JFskVG-ATI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9e:73:1f:79:e9:e4:a5:a7:6d:b0:43:9d:06:7d:21:65:4b:c5:
86:80:60:e5:33:62:0b:e5:a5:62:48:82:ac:88:e6:f7:51:cb:
77:7a:81:e7:53:4f:68:b7:a4:ec:ee:b4:d0:4f:97:56:00:01:
16:96:47:7e:b7:e0:8b:50:fa:f2:6f:4f:09:74:46:d6:b3:bf:
71:a0:a2:65:2c:01:a2:95:1d:80:61:8b:63:5e:0b:8f:fa:9f:
a7:89:b5:10:31:4e:39:4f:c5:7a:99:c0:34:9e:cd:08:a0:cf:
5b:e7:c4:c5:57:69:b1:46:f0:fd:2a:fe:95:cb:05:37:e1:d1:
4b:5e:7c:4b:90:f0:37:66:4c:25:74:62:66:ec:ea:42:69:b9:
44:cb:5a:64:3e:cf:ad:c3:d1:4a:cc:7d:7f:d6:dc:f8:09:a3:
5a:5d:3a:b3:6a:8d:14:d0:01:e9:79:f5:97:2c:b5:a3:25:a5:
56:a6:99:86:f5:8a:38:ae:63:e0:1c:52:b7:4d:d8:9a:e0:7b:
42:f2:38:8a:8e:3c:5f:de:6b:63:10:4f:1d:6b:a0:ec:5c:5b:
e3:b3:1e:fe:bc:65:42:bd:c2:1c:7d:d8:31:ee:3c:4d:cb:28:
e2:0e:bd:90:45:fc:cf:fb:60:36:95:2d:8b:b6:f8:6a:15:c1:
43:8f:d9:73
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYgQuSZDumHk/6/BadGtHj9FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNTEyMTYwOTA5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMTYxMDhlMmU0NmExOTIwMDE5N2Y4YjhmNDkxNmM5MTUxYmUwMTMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAik91HR6C+X/JCOnYLu2q9X6khe8i
UAkU2choxLihGLaiHkavMBCDPRSWW0RNCB7U9Lhas8X9/4u88J52gGPx1TdLGO7h
yZOMrMIn45YuPU+xW5BSe5FOPNKn9msuloirCHX63ztHhoczdDVVT3EmuZ0aAoOI
eRDrsB7gKexrlYAZaEAY8A5lm69buv7+/QAx5wNcX2QjHkJlCiBj5tNsCX8MJ7m8
MGMciC1Jjs1H/2TJMAenJXLudTQ2BcITGnAffd9473Oiz8hpTV3xObBdAfMX5UNO
YnykEiJ/kBaD9DTNmfzy+ioliecjlvAtGSJaGln+IX+WqAjdPyoEWIhs6wIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFNFhCOLkahkgAZf4uPSRbJFRvgEyMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvMFdFSTR1UnFHU0FCbF9pNDlKRnNrVkctQVRJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAJ5zH3np5KWnbbBDnQZ9
IWVLxYaAYOUzYgvlpWJIgqyI5vdRy3d6gedTT2i3pOzutNBPl1YAARaWR3634ItQ
+vJvTwl0Rtazv3GgomUsAaKVHYBhi2NeC4/6n6eJtRAxTjlPxXqZwDSezQigz1vn
xMVXabFG8P0q/pXLBTfh0UtefEuQ8DdmTCV0Ymbs6kJpuUTLWmQ+z63D0UrMfX/W
3PgJo1pdOrNqjRTQAel59ZcstaMlpVammYb1ijiuY+AcUrdN2Jrge0LyOIqOPF/e
a2MQTx1roOxcW+OzHv68ZUK9whx92DHuPE3LKOIOvZBF/M/7YDaVLYu2+GoVwUOP
2XM=
-----END CERTIFICATE-----
Generated at Wed Apr 30 17:34:59 2025 by rpki-client