Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1wpo__OL2sZBq5q3d0Ze7Y5sDX8.roa
File: 1wpo__OL2sZBq5q3d0Ze7Y5sDX8.roa (raw, json)
Hash identifier: eyYbt2tQkVUYmyvD4HO0Io4Gx8SoIAnVRhzyFy+qT9k=
Subject key identifier: D7:0A:68:FF:F3:8B:DA:C6:41:AB:9A:B7:77:46:5E:ED:8E:6C:0D:7F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 8911103E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1wpo__OL2sZBq5q3d0Ze7Y5sDX8.roa
Signing time: Wed 01 Jun 2022 18:08:41 +0000
ROA not before: Wed 01 Jun 2022 18:08:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:181:22f:7a99/128 maxlen: 128
2001:67c:64:ffff:0:180:ff9c:1e7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2299596862 (0x8911103e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 1 18:08:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d70a68fff38bdac641ab9ab777465eed8e6c0d7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:1d:b1:12:c8:fe:d9:12:bd:08:69:e7:d0:c5:
ad:5e:62:82:22:a8:0d:2b:b7:5f:a1:cf:50:18:de:
9f:2c:84:4e:b2:11:6f:ab:a8:53:1e:de:e2:8b:0d:
7e:4c:ff:18:f0:13:43:ed:00:92:cf:c5:02:cc:e8:
26:7a:ea:8f:79:7a:1d:d3:09:da:09:83:d7:bc:31:
0b:b4:da:93:38:86:6e:67:19:11:ad:57:13:d6:59:
ac:41:68:ef:fd:8a:f7:54:1e:95:09:39:04:da:26:
54:30:a2:83:87:ab:0d:37:f0:8f:ce:37:d1:94:a8:
51:8d:0d:3a:cc:d0:3e:86:15:08:da:fc:c6:e4:c0:
49:46:69:ff:e0:11:5e:1a:37:e6:c9:2d:24:93:83:
5f:ad:e8:30:de:3a:08:22:e3:45:c7:82:bf:33:25:
39:dd:cf:fe:7d:e2:6d:02:79:a2:2c:aa:a5:8b:4a:
b1:ff:ce:2b:c6:d4:b0:ed:b8:4f:91:0e:c0:bf:5e:
b0:3a:7d:eb:32:27:b8:fb:3e:19:c3:6f:40:58:08:
0f:04:6c:e7:66:15:85:21:05:b8:4b:e2:1d:d9:88:
9d:21:7f:f2:65:e8:a4:46:7c:7e:b8:65:66:b6:f5:
30:55:97:56:6c:ca:05:74:06:59:11:55:65:1f:ca:
6f:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:0A:68:FF:F3:8B:DA:C6:41:AB:9A:B7:77:46:5E:ED:8E:6C:0D:7F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1wpo__OL2sZBq5q3d0Ze7Y5sDX8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
42:b4:98:b8:d2:1d:95:57:03:fc:db:af:38:76:93:80:c4:6d:
ed:3d:c0:4a:92:4d:79:24:05:c0:82:cf:be:a1:5d:2d:50:66:
b8:c9:94:54:22:6e:0b:c8:a6:5a:de:a1:ea:c1:3f:27:4c:8c:
5d:26:50:15:89:f9:9a:f6:4c:12:61:e4:76:81:65:6e:33:ad:
13:dd:ff:32:e5:98:a3:ec:43:ec:d1:6b:d4:97:a6:79:03:5e:
09:44:74:84:4b:eb:31:0a:66:11:30:2e:2c:c8:a7:54:ab:c0:
c7:60:d6:f2:8a:3e:a0:9b:59:50:68:99:c5:42:16:e9:fb:0e:
29:99:2d:14:77:eb:72:2b:5b:a7:97:97:f4:27:88:fa:3a:23:
d8:fe:e7:3f:03:f0:76:28:0a:94:d7:cc:69:22:89:4c:c0:96:
b6:0b:29:2c:ff:47:62:2c:cb:97:89:f8:67:19:72:4c:2e:2f:
97:b7:69:fb:aa:25:65:a8:21:eb:f9:01:ae:f2:20:f5:e9:e8:
f5:30:32:8a:ff:19:59:3b:f7:f7:ba:8f:73:f5:18:da:2c:f8:
19:76:c6:c4:5b:ba:b8:cc:0d:7b:11:d0:ca:fe:0a:89:31:94:
25:c7:73:82:c8:22:d0:50:58:c1:6c:41:75:c9:a2:a6:e0:ac:
47:62:86:99
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgIFAIkRED4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMo
NzIwNDdiZTE1YjI3NTkwMmRjZjYxN2RjM2QwZTE2ZGMxZjMwODAyMjAeFw0yMjA2
MDExODA4NDFaFw0yMzA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKGQ3MGE2OGZmZjM4
YmRhYzY0MWFiOWFiNzc3NDY1ZWVkOGU2YzBkN2YwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDTHbESyP7ZEr0IaefQxa1eYoIiqA0rt1+hz1AY3p8shE6y
EW+rqFMe3uKLDX5M/xjwE0PtAJLPxQLM6CZ66o95eh3TCdoJg9e8MQu02pM4hm5n
GRGtVxPWWaxBaO/9ivdUHpUJOQTaJlQwooOHqw038I/ON9GUqFGNDTrM0D6GFQja
/MbkwElGaf/gEV4aN+bJLSSTg1+t6DDeOggi40XHgr8zJTndz/594m0CeaIsqqWL
SrH/zivG1LDtuE+RDsC/XrA6fesyJ7j7PhnDb0BYCA8EbOdmFYUhBbhL4h3ZiJ0h
f/Jl6KRGfH64ZWa29TBVl1ZsygV0BlkRVWUfym+7AgMBAAGjggIaMIICFjAdBgNV
HQ4EFgQU1wpo//OL2sZBq5q3d0Ze7Y5sDX8wHwYDVR0jBBgwFoAUcgR74VsnWQLc
9hfcPQ4W3B8wgCIwDgYDVR0PAQH/BAQDAgeAMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVM
VC9jZ1I3NFZzbldRTGM5aGZjUFE0VzNCOHdnQ0kuY2VyMIGNBggrBgEFBQcBCwSB
gDB+MHwGCCsGAQUFBzALhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9ERUZBVUxULzVlLzc5ODQ0Ny0yMWY0LTQ1YWItOTlkYy0xYWJlM2FjMTBhYTYv
MS8xd3BvX19PTDJzWkJxNXEzZDBaZTdZNXNEWDgucm9hMIGBBgNVHR8EejB4MHag
dKByhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVl
Lzc5ODQ0Ny0yMWY0LTQ1YWItOTlkYy0xYWJlM2FjMTBhYTYvMS9jZ1I3NFZzbldR
TGM5aGZjUFE0VzNCOHdnQ0kuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
MAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYDBAPBABgwDwQCAAIwCQMHACABBnwA
ZDANBgkqhkiG9w0BAQsFAAOCAQEAQrSYuNIdlVcD/NuvOHaTgMRt7T3ASpJNeSQF
wILPvqFdLVBmuMmUVCJuC8imWt6h6sE/J0yMXSZQFYn5mvZMEmHkdoFlbjOtE93/
MuWYo+xD7NFr1JemeQNeCUR0hEvrMQpmETAuLMinVKvAx2DW8oo+oJtZUGiZxUIW
6fsOKZktFHfrcitbp5eX9CeI+joj2P7nPwPwdigKlNfMaSKJTMCWtgspLP9HYizL
l4n4ZxlyTC4vl7dp+6olZagh6/kBrvIg9eno9TAyiv8ZWTv397qPc/UY2iz4GXbG
xFu6uMwNexHQyv4KiTGUJcdzgsgi0FBYwWxBdcmipuCsR2KGmQ==
-----END CERTIFICATE-----
Generated at Thu May 1 03:02:46 2025 by rpki-client