Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/W3Q_Ww3dAFDViHDMjUz6o7GoRCE.roa
File: W3Q_Ww3dAFDViHDMjUz6o7GoRCE.roa (raw, json)
Hash identifier: EN89JcnzWxsg7TZIMqOTTkvgfweVqmdDsmvhpGDc+D0=
Subject key identifier: 5B:74:3F:5B:0D:DD:00:50:D5:88:70:CC:8D:4C:FA:A3:B1:A8:44:21
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01825FBAF4B7E93DBC2FD97323DE90E36D70
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/W3Q_Ww3dAFDViHDMjUz6o7GoRCE.roa
Signing time: Tue 02 Aug 2022 18:04:24 +0000
ROA not before: Tue 02 Aug 2022 18:04:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
2001:67c:64:ffff:0:182:5fba:d8dd/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:5f:ba:f4:b7:e9:3d:bc:2f:d9:73:23:de:90:e3:6d:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 2 18:04:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5b743f5b0ddd0050d58870cc8d4cfaa3b1a84421
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:55:4f:8a:93:4e:de:89:9a:0f:c3:96:e1:50:
a9:c4:05:73:45:09:23:1b:80:d4:3b:db:a0:f2:46:
93:e6:46:24:37:d1:62:72:0d:3c:cd:48:3c:fd:9b:
cf:0e:82:88:55:74:8a:08:d0:57:c1:fd:5a:cf:45:
00:1d:bc:96:99:c7:e0:23:76:65:a5:2b:82:95:4c:
b9:a4:af:0c:b7:0b:75:49:9b:ca:28:76:37:4f:11:
e7:09:fe:c1:61:6e:ab:2a:6f:dd:e3:08:de:e8:76:
d9:54:22:8c:a1:24:5d:e6:86:57:60:b6:3d:38:7a:
6a:77:1d:bd:06:1b:ce:5b:19:0b:6e:33:c9:75:1b:
7d:43:ef:eb:96:4d:29:14:97:80:ca:86:0b:d3:e6:
57:e1:b9:c3:ec:e3:e4:e0:b4:af:14:4c:3f:60:c2:
64:40:35:f8:f7:cb:8b:ec:c6:79:86:63:2c:cc:a2:
f6:86:09:5a:9e:fe:c7:77:3b:80:f2:e2:83:b1:b7:
54:73:9f:87:7e:01:d4:5f:80:cd:c6:39:b5:98:62:
1d:5b:f6:a1:22:c9:2e:e7:50:a4:69:1c:df:31:36:
b2:cb:78:0a:e8:4e:f8:a6:94:43:47:80:27:ef:0a:
4e:bc:a2:39:b1:46:0f:dc:35:1b:1d:b5:94:14:67:
24:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:74:3F:5B:0D:DD:00:50:D5:88:70:CC:8D:4C:FA:A3:B1:A8:44:21
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/W3Q_Ww3dAFDViHDMjUz6o7GoRCE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
82:14:1b:f6:f2:b0:d6:2d:f0:2a:9b:d5:ff:fd:7b:3c:88:0f:
5d:f6:27:52:39:b0:32:99:f0:f2:a6:23:75:a7:86:6e:d9:47:
5c:05:80:5f:8b:d2:5c:87:fc:7c:99:c8:c5:bb:f1:9a:2d:b0:
2f:34:ce:f4:64:6a:39:28:b9:11:aa:4c:e5:33:43:08:2e:d1:
db:72:21:c2:f9:27:1c:da:3b:65:e5:b0:f9:ab:b3:4c:2a:5d:
a6:92:db:d7:b8:26:73:92:f4:38:5f:32:19:e4:66:4f:36:65:
15:0b:5e:f7:a7:1b:29:f2:6b:1d:c0:5b:16:1b:05:d8:08:26:
0f:79:72:9f:b7:c4:fd:fc:4e:79:3d:ec:8a:e4:89:37:57:dc:
e8:d6:df:9d:3d:bd:bd:85:93:50:fe:88:1d:1b:5c:9c:35:81:
04:25:ec:97:f9:18:c5:48:8b:e9:23:b7:51:61:f7:28:39:36:
6d:c4:7e:a8:b0:d0:fd:f1:42:24:ec:0a:6f:2d:b0:b8:f2:25:
ab:f6:83:d4:7a:6c:4f:46:70:f3:04:80:24:7d:01:75:0d:03:
15:55:07:4a:9c:16:97:6e:0e:ea:ee:72:af:76:c5:bc:b5:39:
77:bf:b1:d0:bf:4e:c6:82:11:8d:f7:81:1a:f1:91:c0:8c:9c:
d7:71:33:3a
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYJfuvS36T28L9lzI96Q421wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIwODAyMTgwNDI0WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1Yjc0M2Y1YjBkZGQwMDUwZDU4ODcwY2M4ZDRjZmFhM2IxYTg0NDIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp1VPipNO3omaD8OW4VCpxAVzRQkj
G4DUO9ug8kaT5kYkN9Ficg08zUg8/ZvPDoKIVXSKCNBXwf1az0UAHbyWmcfgI3Zl
pSuClUy5pK8Mtwt1SZvKKHY3TxHnCf7BYW6rKm/d4wje6HbZVCKMoSRd5oZXYLY9
OHpqdx29BhvOWxkLbjPJdRt9Q+/rlk0pFJeAyoYL0+ZX4bnD7OPk4LSvFEw/YMJk
QDX498uL7MZ5hmMszKL2hglanv7HdzuA8uKDsbdUc5+HfgHUX4DNxjm1mGIdW/ah
Isku51CkaRzfMTayy3gK6E74ppRDR4An7wpOvKI5sUYP3DUbHbWUFGck/QIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFFt0P1sN3QBQ1YhwzI1M+qOxqEQhMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvVzNRX1d3M2RBRkRWaUhETWpVejZvN0dvUkNFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAIIUG/bysNYt8Cqb1f/9
ezyID132J1I5sDKZ8PKmI3Wnhm7ZR1wFgF+L0lyH/HyZyMW78ZotsC80zvRkajko
uRGqTOUzQwgu0dtyIcL5JxzaO2XlsPmrs0wqXaaS29e4JnOS9DhfMhnkZk82ZRUL
XvenGynyax3AWxYbBdgIJg95cp+3xP38Tnk97IrkiTdX3OjW3509vb2Fk1D+iB0b
XJw1gQQl7Jf5GMVIi+kjt1Fh9yg5Nm3Efqiw0P3xQiTsCm8tsLjyJav2g9R6bE9G
cPMEgCR9AXUNAxVVB0qcFpduDurucq92xby1OXe/sdC/TsaCEY33gRrxkcCMnNdx
Mzo=
-----END CERTIFICATE-----
Generated at Wed Apr 30 18:44:15 2025 by rpki-client