Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5WJzkvsXyA-fRwZz66KIh10NYtQ.roa
File: 5WJzkvsXyA-fRwZz66KIh10NYtQ.roa (raw, json)
Hash identifier: 203gk3oj3NZLNJbSebiahzMe3Ud50A6kwEEzs9MVsRc=
Subject key identifier: E5:62:73:92:FB:17:C8:0F:9F:47:06:73:EB:A2:88:87:5D:0D:62:D4
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189DADBB2A4B22497478F9CBCF1E1894E12
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5WJzkvsXyA-fRwZz66KIh10NYtQ.roa
Signing time: Wed 09 Aug 2023 15:12:58 +0000
ROA not before: Wed 09 Aug 2023 15:12:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:da:db:b2:a4:b2:24:97:47:8f:9c:bc:f1:e1:89:4e:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 9 15:12:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e5627392fb17c80f9f470673eba288875d0d62d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:11:d3:48:12:68:05:cb:17:b5:11:97:1f:c2:
e6:77:10:cb:f1:42:9d:2d:c7:0e:f4:12:65:bd:d4:
2f:55:c4:15:32:53:82:08:9d:c9:48:88:37:19:fa:
a5:b9:10:bc:2a:5e:0d:e5:0c:43:07:9f:28:c9:a9:
f1:24:c7:fa:07:1f:7d:90:00:69:e7:46:0a:62:40:
85:6e:eb:2b:42:55:af:1d:61:ac:a8:0f:cc:30:24:
7e:c3:27:4b:79:18:55:cd:7f:36:35:b1:b9:63:ba:
e3:a4:36:ab:dc:38:91:96:56:ac:74:59:51:f1:69:
ac:08:ab:6b:3d:ca:58:f6:bd:c3:02:87:18:0f:3e:
48:87:e9:e9:d5:8d:97:4a:a3:e7:25:1a:74:35:8c:
ef:b2:11:dd:f7:1c:34:2c:b6:fd:70:ee:1f:a3:21:
0e:dc:11:48:00:82:b5:8d:a0:ff:f5:2e:e9:0a:47:
0a:ff:1f:4a:a8:bd:ee:d4:71:c4:14:98:dc:da:54:
4f:1d:5f:3b:be:d5:99:3b:ce:e2:ed:c2:17:98:68:
1d:c5:0a:6f:10:2a:20:21:20:a5:b1:11:b2:17:c0:
3e:4e:ae:60:57:d8:63:ae:20:9f:91:38:b5:48:0b:
84:03:82:ac:5c:23:0e:6b:f7:8d:c8:37:85:3c:3a:
43:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:62:73:92:FB:17:C8:0F:9F:47:06:73:EB:A2:88:87:5D:0D:62:D4
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5WJzkvsXyA-fRwZz66KIh10NYtQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5a:a3:77:1b:d5:22:62:07:8f:7c:da:e6:c7:45:bd:8c:7c:04:
72:93:d5:7d:9d:7f:35:30:94:6f:f2:fb:c4:81:71:5d:3f:40:
e9:52:8e:dc:c2:23:c6:27:23:35:d6:2a:f5:80:75:cf:b4:20:
37:21:26:ef:30:7d:1a:3d:27:26:d0:0b:55:08:93:84:d0:a6:
a0:18:46:8a:86:ca:29:71:23:47:c0:69:c3:ab:97:49:67:66:
39:52:59:00:e6:b9:50:71:88:f9:80:40:40:d3:a2:3a:9e:7d:
29:30:d5:f7:3a:5b:cd:37:ad:6e:a8:e2:25:fc:1b:c5:ce:af:
77:9d:b6:b3:b5:58:0a:ef:ea:24:4e:4f:28:9e:44:b4:e0:d7:
35:d9:5f:09:91:69:21:31:58:e9:80:0e:6b:fd:95:06:91:2a:
9f:98:db:57:e7:55:1a:cc:d2:f0:78:43:50:21:e6:95:87:3a:
43:32:ac:7d:b0:5a:fe:bf:a7:58:56:32:f5:9c:a2:7c:a7:d0:
c3:97:d8:2b:31:b7:ca:cd:f3:3c:28:d6:7b:f4:b2:d1:3a:95:
23:74:a3:88:f9:9d:f1:79:66:e5:ed:6b:dd:b2:75:55:dc:61:
3a:da:d3:65:f5:84:af:68:2a:99:3e:10:1c:49:62:d1:88:f1:
ba:fe:c1:d4
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYna27KksiSXR4+cvPHhiU4SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwODA5MTUxMjU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNTYyNzM5MmZiMTdjODBmOWY0NzA2NzNlYmEyODg4NzVkMGQ2MmQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhhHTSBJoBcsXtRGXH8LmdxDL8UKd
LccO9BJlvdQvVcQVMlOCCJ3JSIg3GfqluRC8Kl4N5QxDB58oyanxJMf6Bx99kABp
50YKYkCFbusrQlWvHWGsqA/MMCR+wydLeRhVzX82NbG5Y7rjpDar3DiRllasdFlR
8WmsCKtrPcpY9r3DAocYDz5Ih+np1Y2XSqPnJRp0NYzvshHd9xw0LLb9cO4foyEO
3BFIAIK1jaD/9S7pCkcK/x9KqL3u1HHEFJjc2lRPHV87vtWZO87i7cIXmGgdxQpv
ECogISClsRGyF8A+Tq5gV9hjriCfkTi1SAuEA4KsXCMOa/eNyDeFPDpD8QIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFOVic5L7F8gPn0cGc+uiiIddDWLUMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvNVdKemt2c1h5QS1mUndaejY2S0loMTBOWXRRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAFqjdxvVImIHj3za5sdF
vYx8BHKT1X2dfzUwlG/y+8SBcV0/QOlSjtzCI8YnIzXWKvWAdc+0IDchJu8wfRo9
JybQC1UIk4TQpqAYRoqGyilxI0fAacOrl0lnZjlSWQDmuVBxiPmAQEDTojqefSkw
1fc6W803rW6o4iX8G8XOr3edtrO1WArv6iROTyieRLTg1zXZXwmRaSExWOmADmv9
lQaRKp+Y21fnVRrM0vB4Q1Ah5pWHOkMyrH2wWv6/p1hWMvWconyn0MOX2Csxt8rN
8zwo1nv0stE6lSN0o4j5nfF5ZuXta92ydVXcYTra02X1hK9oKpk+EBxJYtGI8br+
wdQ=
-----END CERTIFICATE-----
Generated at Sun May 4 14:46:46 2025 by rpki-client