Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/WLpm_MSbxchmR7VCD2QLGFFEUOw.roa
File: WLpm_MSbxchmR7VCD2QLGFFEUOw.roa (raw, json)
Hash identifier: S5bqleXQpoejTXfJVlxbiMBvnkanc2mIactUyWA+gs8=
Subject key identifier: 58:BA:66:FC:C4:9B:C5:C8:66:47:B5:42:0F:64:0B:18:51:44:50:EC
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 698EE679
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/WLpm_MSbxchmR7VCD2QLGFFEUOw.roa
Signing time: Thu 10 Feb 2022 23:09:19 +0000
ROA not before: Thu 10 Feb 2022 23:09:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17e:d600:60b0/128 maxlen: 128
2001:67c:64:ffff:0:17e:d524:ead9/128 maxlen: 128
2001:67c:64:ffff:0:17e:d9a6:5e4a/128 maxlen: 128
2001:67c:64:ffff:0:17e:ddba:7b5e/128 maxlen: 128
2001:67c:64:ffff:0:17e:db26:e5c4/128 maxlen: 128
2001:67c:64:ffff:0:17e:dab9:26f6/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:17e:da82:41aa/128 maxlen: 128
2001:67c:64:ffff:0:17e:dd83:3b9e/128 maxlen: 128
2001:67c:64:ffff:0:17e:dcde:5809/128 maxlen: 128
2001:67c:64:ffff:0:17e:d938:ba2e/128 maxlen: 128
2001:67c:64:ffff:0:17e:d85c:d348/128 maxlen: 128
2001:67c:64:ffff:0:17e:daf0:4034/128 maxlen: 128
2001:67c:64:ffff:0:17e:dc02:dc22/128 maxlen: 128
2001:67c:64:ffff:0:17e:d592:92a4/128 maxlen: 128
2001:67c:64:ffff:0:17e:d7ee:e040/128 maxlen: 128
2001:67c:64:ffff:0:17e:d6a5:23ae/128 maxlen: 128
2001:67c:64:ffff:0:17e:d901:fecb/128 maxlen: 128
2001:67c:64:ffff:0:17e:d7b8:3101/128 maxlen: 128
2001:67c:64:ffff:0:17e:a0dd:2f5b/128 maxlen: 128
2001:67c:64:ffff:0:17e:d826:2565/128 maxlen: 128
2001:67c:64:ffff:0:17e:dc39:b603/128 maxlen: 128
2001:67c:64:ffff:0:17e:db5e:7e8/128 maxlen: 128
2001:67c:64:ffff:0:17e:d713:9aeb/128 maxlen: 128
2001:67c:64:ffff:0:17e:d55b:c264/128 maxlen: 128
2001:67c:64:ffff:0:17e:d66e:8559/128 maxlen: 128
2001:67c:64:ffff:0:17e:d96f:7a13/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1770972793 (0x698ee679)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 10 23:09:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=58ba66fcc49bc5c86647b5420f640b18514450ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e3:bf:e5:8a:22:bf:6e:10:52:bb:35:73:02:
cd:0d:d4:5c:18:1a:c3:60:d5:f3:65:f0:38:52:bf:
73:b2:2c:f7:92:98:5e:1a:67:7f:3e:4a:90:54:a1:
41:79:1e:88:56:f4:26:1c:1e:a6:b8:bb:c3:42:ab:
34:c8:24:9c:1b:4e:83:ad:01:a5:21:1a:ef:9e:95:
7a:e6:8c:b1:e0:19:0a:c2:53:39:c0:40:f1:b5:d6:
06:67:ea:21:e3:12:20:51:c5:39:6d:11:e8:57:1f:
67:7b:4e:52:cc:db:69:4d:f5:2c:91:a6:1c:d4:fe:
89:73:07:09:0e:0c:f5:6f:ad:f4:47:dd:44:b1:77:
7a:88:34:e4:cc:a7:5d:81:e5:ca:a5:b9:8d:7a:86:
2a:da:86:e0:bd:51:41:25:76:58:7c:94:70:f5:f9:
2a:aa:00:56:83:b6:90:ef:0d:00:9a:55:5c:28:8b:
1b:91:2c:1e:31:c0:63:f9:ed:95:76:33:8c:45:19:
b9:31:07:f5:3a:a0:75:84:8d:ef:78:55:c3:da:6b:
3f:f5:5b:b9:6c:9b:52:78:64:75:bd:5b:1e:1a:68:
5e:82:fd:a9:02:17:8e:97:5d:57:96:7d:25:b9:2a:
b5:b8:4d:70:2e:ff:24:bd:f8:3f:9e:2b:3c:69:b4:
99:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:BA:66:FC:C4:9B:C5:C8:66:47:B5:42:0F:64:0B:18:51:44:50:EC
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/WLpm_MSbxchmR7VCD2QLGFFEUOw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3a:05:d7:19:07:4b:da:78:21:c8:6d:21:c5:ec:21:98:0c:f0:
67:67:46:d2:25:66:ce:58:03:a8:1a:b6:f1:ca:95:07:e0:fa:
a2:18:cf:2f:5d:ce:a2:04:fd:de:60:9b:8e:d4:3a:59:d1:a1:
96:96:1e:a2:46:a2:66:2d:53:5c:f4:e8:3b:d1:5a:86:88:18:
93:5a:0c:87:e3:a1:3b:f1:60:f8:d0:88:e6:7c:b9:52:ef:8c:
1b:0e:1a:3e:2c:a9:b5:ef:9f:4d:35:8b:c0:3b:17:8a:d6:7f:
61:6d:c1:5d:f0:7a:71:1b:a8:f2:81:36:57:36:e7:2c:d4:94:
e5:ce:5a:55:7b:13:7b:72:e8:98:3c:4a:ab:9f:b5:81:58:49:
41:2c:95:f7:17:e6:a0:cd:1c:85:28:18:23:10:a7:db:9c:37:
38:01:83:dd:92:96:e2:dd:ec:73:1b:66:72:54:89:ff:75:9c:
b3:88:25:29:72:95:aa:6d:0c:ba:2a:34:5f:20:13:b3:2c:51:
b0:fa:33:5c:b4:36:fa:51:55:41:f4:a4:87:8f:10:79:93:23:
ff:ac:a3:92:53:25:bc:f2:63:1b:f0:94:3d:bc:a9:33:2f:b1:
44:05:9f:49:1e:94:5f:0b:81:56:4b:82:57:0c:3f:fe:74:99:
fa:5f:91:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:34:56 2025 by rpki-client