Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/WOrT5cyqAmvFsgmrwp2YqFEHCmQ.roa
File: WOrT5cyqAmvFsgmrwp2YqFEHCmQ.roa (raw, json)
Hash identifier: 0qktRPO9G9hpIAXMilKR3gxcLdSMkY/C6e5H8AthhJ8=
Subject key identifier: 58:EA:D3:E5:CC:AA:02:6B:C5:B2:09:AB:C2:9D:98:A8:51:07:0A:64
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188A67F931B13F34051D1F88279715BF453
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/WOrT5cyqAmvFsgmrwp2YqFEHCmQ.roa
Signing time: Sat 10 Jun 2023 18:09:18 +0000
ROA not before: Sat 10 Jun 2023 18:09:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:a6:7f:93:1b:13:f3:40:51:d1:f8:82:79:71:5b:f4:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 10 18:09:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=58ead3e5ccaa026bc5b209abc29d98a851070a64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:47:8e:78:cf:01:94:d2:3c:b4:be:cf:23:c7:
12:4d:77:23:df:ce:e3:ed:c1:d3:fd:2a:c7:bc:79:
55:78:93:04:7f:3b:0b:49:ce:9c:b4:76:72:10:84:
00:06:a8:65:dc:c3:ab:31:16:8f:72:b5:dd:f1:58:
35:60:ca:89:46:b8:c6:5a:a0:89:ee:f9:6c:bb:47:
20:24:9b:30:9a:df:6f:3d:84:b4:e0:85:73:2b:0c:
4c:b2:2d:84:eb:9e:cb:8b:50:04:d3:46:68:f7:3b:
15:3f:28:bd:35:e0:ed:50:ea:71:7e:53:ae:6f:9c:
0f:84:12:d6:f7:da:39:d9:ec:26:0c:c2:d6:7d:f1:
b3:92:25:b6:4c:8c:e3:b6:96:d1:91:a6:d7:44:6f:
bd:8a:d6:4f:7f:30:5d:a7:f2:91:ba:bc:d4:26:06:
8d:cd:25:cb:2a:dd:14:1f:f7:27:22:f3:ce:0e:9d:
c5:35:08:4f:b3:65:10:63:c6:17:eb:a4:59:5e:95:
1b:ff:bd:8e:a8:d7:ea:01:9f:f5:d4:6d:bb:6f:a7:
17:0a:0a:da:24:ee:ad:3c:f6:cc:51:aa:e1:af:f1:
f4:a0:e9:bb:2f:57:87:91:52:fe:d3:85:d3:1d:76:
5e:03:da:6a:10:00:fb:47:59:90:15:0f:35:ec:2b:
51:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:EA:D3:E5:CC:AA:02:6B:C5:B2:09:AB:C2:9D:98:A8:51:07:0A:64
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/WOrT5cyqAmvFsgmrwp2YqFEHCmQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4b:de:6b:5d:48:00:0b:3a:77:c9:3e:23:62:91:cc:7c:e0:1b:
d0:f9:65:e1:13:f5:ce:50:8a:f4:ce:ed:45:c3:67:fb:87:f1:
48:e6:9a:1b:e4:58:e7:c5:4b:b2:be:77:0d:ba:3b:88:bb:7a:
05:69:75:28:77:2e:41:d4:bf:a6:52:d8:f1:32:47:07:f9:dc:
ff:35:8d:4a:bc:4e:01:20:f1:b9:16:fa:83:6d:90:91:1f:76:
56:78:52:fe:93:ca:64:18:a6:3f:37:ef:07:12:6c:eb:f8:28:
d7:c9:9d:65:7f:af:a8:b6:60:ba:35:8e:8d:b3:63:5d:5e:a4:
a2:67:df:3f:3b:8b:8d:56:02:85:1f:7e:58:ea:fa:94:cd:a9:
fa:fd:0c:57:63:e2:87:49:fd:89:28:46:7a:9a:72:a6:b5:b4:
3c:6a:00:7f:22:a8:ba:9f:90:03:c3:69:75:70:58:bd:15:4b:
f2:6f:78:b8:2d:83:0e:0f:bc:c9:ad:d2:1d:c3:70:ee:05:a3:
dd:c6:8f:9d:56:a4:f4:93:f9:33:a0:65:39:7a:18:59:75:4c:
9f:51:b6:61:a0:a6:49:db:5e:8a:1a:5a:0f:6d:05:35:be:26:
6a:7c:2f:0a:d8:1b:78:99:0c:be:59:a6:aa:57:52:19:96:86:
e4:61:17:9d
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYimf5MbE/NAUdH4gnlxW/RTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNjEwMTgwOTE4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1OGVhZDNlNWNjYWEwMjZiYzViMjA5YWJjMjlkOThhODUxMDcwYTY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA70eOeM8BlNI8tL7PI8cSTXcj387j
7cHT/SrHvHlVeJMEfzsLSc6ctHZyEIQABqhl3MOrMRaPcrXd8Vg1YMqJRrjGWqCJ
7vlsu0cgJJswmt9vPYS04IVzKwxMsi2E657Li1AE00Zo9zsVPyi9NeDtUOpxflOu
b5wPhBLW99o52ewmDMLWffGzkiW2TIzjtpbRkabXRG+9itZPfzBdp/KRurzUJgaN
zSXLKt0UH/cnIvPODp3FNQhPs2UQY8YX66RZXpUb/72OqNfqAZ/11G27b6cXCgra
JO6tPPbMUarhr/H0oOm7L1eHkVL+04XTHXZeA9pqEAD7R1mQFQ817CtRlwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFFjq0+XMqgJrxbIJq8KdmKhRBwpkMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvV09yVDVjeXFBbXZGc2dtcndwMllxRkVIQ21RLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAEvea11IAAs6d8k+I2KR
zHzgG9D5ZeET9c5QivTO7UXDZ/uH8UjmmhvkWOfFS7K+dw26O4i7egVpdSh3LkHU
v6ZS2PEyRwf53P81jUq8TgEg8bkW+oNtkJEfdlZ4Uv6TymQYpj837wcSbOv4KNfJ
nWV/r6i2YLo1jo2zY11epKJn3z87i41WAoUffljq+pTNqfr9DFdj4odJ/YkoRnqa
cqa1tDxqAH8iqLqfkAPDaXVwWL0VS/JveLgtgw4PvMmt0h3DcO4Fo93Gj51WpPST
+TOgZTl6GFl1TJ9RtmGgpknbXooaWg9tBTW+Jmp8LwrYG3iZDL5ZpqpXUhmWhuRh
F50=
-----END CERTIFICATE-----
Generated at Thu May 1 10:04:57 2025 by rpki-client