Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/WOlgytk78bGGwhutmyZRgreIIk4.roa
File: WOlgytk78bGGwhutmyZRgreIIk4.roa (raw, json)
Hash identifier: 5nkQby5hjhar39LyUyoNu+XxxC8thebJ3w2GGPENpxU=
Subject key identifier: 58:E9:60:CA:D9:3B:F1:B1:86:C2:1B:AD:9B:26:51:82:B7:88:22:4E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188782CA6F1BB4A11B334A110D353D8B390
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/WOlgytk78bGGwhutmyZRgreIIk4.roa
Signing time: Thu 01 Jun 2023 18:16:12 +0000
ROA not before: Thu 01 Jun 2023 18:16:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:78:2c:a6:f1:bb:4a:11:b3:34:a1:10:d3:53:d8:b3:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 1 18:16:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=58e960cad93bf1b186c21bad9b265182b788224e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:c8:fa:a0:57:b2:92:04:5c:19:6a:d6:8f:4c:
19:6c:9f:75:1f:54:17:ba:bb:6f:63:35:d4:10:4e:
85:e2:0e:d5:d0:b5:35:de:8a:8c:1b:26:97:60:b7:
4d:4f:60:31:e3:35:c0:d6:2d:e2:f4:b1:2e:0b:7a:
d1:9f:41:80:88:59:3a:11:76:bf:0c:fe:de:77:6e:
3f:20:a9:e6:0a:14:83:b8:4e:8c:8d:b9:eb:db:e3:
9f:c1:58:f5:97:09:be:61:c7:8b:49:9a:11:df:18:
d6:62:0c:05:cf:8e:63:e5:65:81:d6:f4:d2:80:a0:
af:b9:e0:79:25:c5:a0:0f:10:95:9e:b2:83:c5:68:
94:a0:e4:98:96:e3:77:32:de:83:81:e8:18:cc:75:
8a:a9:f7:0e:4c:f1:17:62:37:22:13:d1:23:60:1c:
ad:9c:5e:a1:cd:2c:97:8f:5a:4a:76:80:47:5b:bc:
fe:97:45:84:70:17:36:4e:63:88:93:a2:0e:41:9b:
67:30:d1:54:52:e3:55:a7:70:f1:5a:c9:37:b6:06:
49:91:3e:24:6d:01:49:41:b9:02:49:95:5f:3f:60:
d6:02:99:cd:28:86:b0:bb:f7:bc:0d:73:60:f1:1f:
59:c4:6c:9a:1f:44:26:58:a7:12:dc:9e:8a:d6:b7:
e3:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:E9:60:CA:D9:3B:F1:B1:86:C2:1B:AD:9B:26:51:82:B7:88:22:4E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/WOlgytk78bGGwhutmyZRgreIIk4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
79:b0:72:36:2c:4c:56:cd:ed:46:7e:05:15:c2:f7:a2:b6:d1:
7c:51:4a:3b:9c:56:6a:83:2c:c1:53:7c:23:39:5e:5f:91:f4:
c7:e3:d9:da:15:2b:b1:30:b9:f1:9c:30:60:56:42:ca:89:d7:
9f:6f:9b:a6:6b:c2:1e:bf:30:45:71:e0:c1:30:3b:aa:16:01:
45:80:81:b9:4e:dd:3d:4d:12:b3:fb:35:5d:2e:69:20:d8:4f:
1e:08:1e:c6:2b:43:fb:14:ab:44:f5:22:c4:31:c4:ae:1c:8c:
bb:67:3a:53:17:5c:68:50:f1:4e:11:bd:27:6d:76:75:f3:c2:
fd:e1:10:e0:84:7d:0a:e6:63:9f:30:16:6f:d7:6c:e6:e0:20:
3e:4f:84:6b:0e:b3:af:8d:31:ec:78:3b:4b:fa:7a:7d:86:83:
cb:36:1e:c2:0c:9c:e9:e7:2d:92:1e:81:4e:9a:6e:a4:a5:9a:
7f:08:41:ed:7d:a7:8e:5b:e6:16:57:43:4f:83:a9:da:22:96:
a1:c7:6c:00:0d:4b:ed:cb:84:43:b5:8b:1c:75:be:68:82:d3:
0e:a1:1d:94:9b:e7:4f:d6:77:60:3a:5c:12:54:a7:c8:8c:c7:
e3:a3:6e:0e:22:58:a1:e7:53:8e:70:aa:a0:4a:d8:c1:be:a5:
45:3a:df:36
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYh4LKbxu0oRszShENNT2LOQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNjAxMTgxNjEyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1OGU5NjBjYWQ5M2JmMWIxODZjMjFiYWQ5YjI2NTE4MmI3ODgyMjRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlcj6oFeykgRcGWrWj0wZbJ91H1QX
urtvYzXUEE6F4g7V0LU13oqMGyaXYLdNT2Ax4zXA1i3i9LEuC3rRn0GAiFk6EXa/
DP7ed24/IKnmChSDuE6Mjbnr2+OfwVj1lwm+YceLSZoR3xjWYgwFz45j5WWB1vTS
gKCvueB5JcWgDxCVnrKDxWiUoOSYluN3Mt6DgegYzHWKqfcOTPEXYjciE9EjYByt
nF6hzSyXj1pKdoBHW7z+l0WEcBc2TmOIk6IOQZtnMNFUUuNVp3DxWsk3tgZJkT4k
bQFJQbkCSZVfP2DWApnNKIawu/e8DXNg8R9ZxGyaH0QmWKcS3J6K1rfjJwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFFjpYMrZO/GxhsIbrZsmUYK3iCJOMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvV09sZ3l0azc4YkdHd2h1dG15WlJncmVJSWs0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAHmwcjYsTFbN7UZ+BRXC
96K20XxRSjucVmqDLMFTfCM5Xl+R9Mfj2doVK7EwufGcMGBWQsqJ159vm6Zrwh6/
MEVx4MEwO6oWAUWAgblO3T1NErP7NV0uaSDYTx4IHsYrQ/sUq0T1IsQxxK4cjLtn
OlMXXGhQ8U4RvSdtdnXzwv3hEOCEfQrmY58wFm/XbObgID5PhGsOs6+NMex4O0v6
en2Gg8s2HsIMnOnnLZIegU6abqSlmn8IQe19p45b5hZXQ0+DqdoilqHHbAANS+3L
hEO1ixx1vmiC0w6hHZSb50/Wd2A6XBJUp8iMx+Ojbg4iWKHnU45wqqBK2MG+pUU6
3zY=
-----END CERTIFICATE-----
Generated at Thu May 1 01:47:55 2025 by rpki-client