Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/WHwsWPkZawPv6HJ3VjjZv35wW_s.roa
File: WHwsWPkZawPv6HJ3VjjZv35wW_s.roa (raw, json)
Hash identifier: 7dAiYc4h1BEb98kA+GlDh8FEYOPJcuxj2k3HdYrtKpE=
Subject key identifier: 58:7C:2C:58:F9:19:6B:03:EF:E8:72:77:56:38:D9:BF:7E:70:5B:FB
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0182B5D2518823FDBB6D23E90373E69A61B3
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/WHwsWPkZawPv6HJ3VjjZv35wW_s.roa
Signing time: Fri 19 Aug 2022 11:17:15 +0000
ROA not before: Fri 19 Aug 2022 11:17:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:b5:d2:51:88:23:fd:bb:6d:23:e9:03:73:e6:9a:61:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 19 11:17:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=587c2c58f9196b03efe872775638d9bf7e705bfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:83:ba:c7:6e:31:2f:b8:0a:90:d3:5f:a6:92:
f8:bd:0f:08:02:24:63:a9:a1:44:f2:84:ee:db:b3:
da:06:93:8d:93:15:0f:cf:d7:30:4b:cc:ab:09:a4:
fb:3f:1a:07:fc:2f:2b:46:70:0b:b5:c0:c6:80:7e:
8a:11:cb:d7:53:09:fc:70:70:95:6c:5e:a4:46:04:
3a:21:5a:20:54:8b:20:08:c6:ce:69:73:1e:91:76:
55:d3:a0:17:38:a2:0a:4f:ba:84:8c:66:59:e7:a9:
30:ea:9e:73:c0:70:9c:00:e7:48:6b:f3:0d:9e:5b:
e3:14:e2:45:c2:9a:e7:5f:0e:9e:92:b0:0c:c0:82:
4b:ed:2a:08:be:66:76:de:9b:27:55:7f:c9:12:40:
32:86:9c:5d:42:ea:70:e2:32:9b:05:68:da:63:30:
a4:18:66:9b:11:3f:7c:ac:c9:40:67:61:a5:dd:4d:
80:2d:c8:73:50:2e:83:5d:ed:e0:a8:68:ed:5f:1c:
2b:96:6d:e3:a9:d9:fe:dd:6e:7b:f7:a2:b4:fa:63:
c0:ce:74:19:74:65:b6:dc:bc:15:0e:66:d3:5e:e4:
ab:69:df:43:9c:79:5c:ba:68:4a:cc:96:c0:8a:ff:
54:cd:a8:47:43:00:64:aa:d5:a0:63:6b:f2:58:d0:
b7:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:7C:2C:58:F9:19:6B:03:EF:E8:72:77:56:38:D9:BF:7E:70:5B:FB
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/WHwsWPkZawPv6HJ3VjjZv35wW_s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
22:9f:22:e8:62:cd:75:1a:e3:24:b7:d2:1f:5f:4b:92:88:98:
d2:73:71:57:38:6f:0a:e5:cc:ca:38:c2:60:49:b5:cf:82:5c:
3d:71:da:53:d4:7b:ec:37:1d:3e:1d:3b:fa:bd:67:c0:62:16:
aa:ad:f3:47:b1:61:25:48:90:6e:9f:0a:a6:35:4c:6a:48:80:
2d:e9:81:42:ab:58:b3:50:78:f7:37:29:27:a3:1d:da:78:50:
0c:f8:72:8d:0a:c4:64:62:95:27:84:14:3f:03:1f:34:e8:f3:
05:79:05:b4:c9:da:d9:d5:34:08:01:ee:14:22:cd:22:cc:30:
99:4f:7b:73:e5:27:d1:00:45:5e:42:e6:5e:94:d5:80:84:44:
ef:5f:db:2b:4f:1f:1a:2d:90:89:a1:c0:cf:3e:23:24:15:8a:
f9:6a:c0:b0:a7:83:c6:94:32:aa:b1:bc:e7:ea:a2:43:2c:d1:
a9:20:de:e2:65:2f:ec:a5:b8:60:c0:78:e2:77:6e:5a:91:0d:
d6:63:d0:2e:c9:0c:c8:10:45:36:e6:6c:fa:f5:56:b3:fb:23:
cf:df:cb:bd:93:f8:16:1e:a8:b1:2b:59:74:53:fc:27:14:2b:
61:12:b5:e7:dc:66:1b:0d:d7:30:c0:94:3c:b1:48:8b:05:9a:
5c:54:54:92
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYK10lGII/27bSPpA3PmmmGzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIwODE5MTExNzE1WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ODdjMmM1OGY5MTk2YjAzZWZlODcyNzc1NjM4ZDliZjdlNzA1YmZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuIO6x24xL7gKkNNfppL4vQ8IAiRj
qaFE8oTu27PaBpONkxUPz9cwS8yrCaT7PxoH/C8rRnALtcDGgH6KEcvXUwn8cHCV
bF6kRgQ6IVogVIsgCMbOaXMekXZV06AXOKIKT7qEjGZZ56kw6p5zwHCcAOdIa/MN
nlvjFOJFwprnXw6ekrAMwIJL7SoIvmZ23psnVX/JEkAyhpxdQupw4jKbBWjaYzCk
GGabET98rMlAZ2Gl3U2ALchzUC6DXe3gqGjtXxwrlm3jqdn+3W5796K0+mPAznQZ
dGW23LwVDmbTXuSrad9DnHlcumhKzJbAiv9UzahHQwBkqtWgY2vyWNC3qwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFFh8LFj5GWsD7+hyd1Y42b9+cFv7MB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvV0h3c1dQa1phd1B2NkhKM1Zqalp2MzV3V19zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBACKfIuhizXUa4yS30h9f
S5KImNJzcVc4bwrlzMo4wmBJtc+CXD1x2lPUe+w3HT4dO/q9Z8BiFqqt80exYSVI
kG6fCqY1TGpIgC3pgUKrWLNQePc3KSejHdp4UAz4co0KxGRilSeEFD8DHzTo8wV5
BbTJ2tnVNAgB7hQizSLMMJlPe3PlJ9EARV5C5l6U1YCERO9f2ytPHxotkImhwM8+
IyQVivlqwLCng8aUMqqxvOfqokMs0akg3uJlL+yluGDAeOJ3blqRDdZj0C7JDMgQ
RTbmbPr1VrP7I8/fy72T+BYeqLErWXRT/CcUK2EStefcZhsN1zDAlDyxSIsFmlxU
VJI=
-----END CERTIFICATE-----
Generated at Wed Apr 30 17:34:49 2025 by rpki-client