Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/WXGngFjbckDv0Xc837yTxtME9vQ.roa
File: WXGngFjbckDv0Xc837yTxtME9vQ.roa (raw, json)
Hash identifier: RXA1QtACZ4b2gcUhsdHyWh+zA8+RJP33ySQZ8kguK6g=
Subject key identifier: 59:71:A7:80:58:DB:72:40:EF:D1:77:3C:DF:BC:93:C6:D3:04:F6:F4
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184BD7BB2415B4CF89472B7F6D00EA49C49
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/WXGngFjbckDv0Xc837yTxtME9vQ.roa
Signing time: Mon 28 Nov 2022 09:05:11 +0000
ROA not before: Mon 28 Nov 2022 09:05:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:184:ae77:4719/128 maxlen: 128
2001:67c:64:ffff:0:184:bd7b:6625/128 maxlen: 128
2001:67c:64:ffff:0:184:9f03:9814/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:bd:7b:b2:41:5b:4c:f8:94:72:b7:f6:d0:0e:a4:9c:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Nov 28 09:05:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5971a78058db7240efd1773cdfbc93c6d304f6f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:ee:51:47:96:67:f1:7f:57:ca:5b:e9:46:72:
2e:6f:a4:80:b3:f7:9c:d8:aa:0c:83:14:57:ba:8c:
f7:84:5f:e6:b6:4e:11:bc:fa:70:0f:10:cc:0c:ed:
b5:68:88:fb:6c:ea:39:d2:fb:df:a2:ff:ac:cd:6c:
a9:c1:dc:3d:d2:a0:71:b7:51:a5:1c:dc:4c:c7:a6:
b8:59:4e:7a:4d:58:f3:48:3d:76:29:27:6f:2f:a8:
84:a4:6e:85:fa:6c:97:88:09:72:cb:f9:c6:d8:5d:
f4:44:10:9a:05:bf:ec:ed:be:cb:82:5b:65:df:6f:
c5:c0:ff:b0:c3:a5:a2:40:6d:e5:22:94:7c:ee:ae:
e3:9f:d1:6c:65:10:e1:9b:a5:84:6a:9d:ee:85:5d:
2a:bd:a4:2d:a1:33:ab:c2:39:dd:dd:49:a6:f0:d9:
bc:29:4a:1f:6d:36:10:30:b7:67:7e:e9:7e:24:d3:
20:ef:5e:d7:19:a8:ed:a5:ba:25:2a:84:79:bd:59:
b6:5c:ac:37:a5:d4:e5:b6:cf:4b:38:8f:92:0c:58:
48:4b:bd:12:48:21:11:27:35:b5:cc:48:56:24:93:
6f:84:8e:e3:3a:e2:ca:4d:f3:50:4f:11:a5:01:fe:
1f:ce:4d:0b:49:f0:18:12:8f:5b:b0:99:dc:19:64:
68:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:71:A7:80:58:DB:72:40:EF:D1:77:3C:DF:BC:93:C6:D3:04:F6:F4
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/WXGngFjbckDv0Xc837yTxtME9vQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
67:72:54:5f:f3:05:ea:eb:c2:ec:7c:b2:29:2c:11:ef:fb:67:
95:61:6c:ea:13:03:e3:9a:e4:be:49:6b:44:96:d5:ad:af:94:
d9:84:f0:e9:89:54:42:28:14:1e:0f:36:1f:1f:07:45:0e:11:
6d:24:e6:4a:0e:71:d0:02:2a:f2:ae:22:a7:90:93:ba:e1:36:
f3:6d:b2:95:d7:11:0c:af:9f:b0:b8:52:64:3f:6b:d3:6f:8f:
10:eb:be:5a:03:d8:3b:07:4a:2d:d1:85:ee:f7:b0:71:26:49:
e7:56:55:4d:d2:9a:82:1f:a8:ff:64:99:63:c3:23:71:cc:f2:
4e:e6:e1:9e:0d:56:a2:8d:e8:5b:d9:4a:95:15:4e:76:b9:68:
84:e8:b8:a2:fb:63:fc:fd:a4:3f:be:1d:8d:bf:93:37:e4:49:
4f:40:aa:3c:0d:fc:1c:b1:8f:aa:67:4b:3d:0e:77:e3:f2:8d:
2d:10:9e:ff:41:a1:99:c1:6d:60:0f:82:ae:af:30:90:70:cd:
59:08:49:bf:89:fc:5b:6e:c1:b7:ff:88:fe:09:50:4d:0e:a2:
cb:54:cf:ee:e3:74:8e:0b:4e:d6:53:9e:dc:f0:e6:11:98:12:
b8:09:65:d8:59:cb:11:ed:61:a0:83:ad:02:00:38:d2:86:9f:
ed:9d:87:65
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYS9e7JBW0z4lHK39tAOpJxJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIxMTI4MDkwNTExWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1OTcxYTc4MDU4ZGI3MjQwZWZkMTc3M2NkZmJjOTNjNmQzMDRmNmY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4+5RR5Zn8X9XylvpRnIub6SAs/ec
2KoMgxRXuoz3hF/mtk4RvPpwDxDMDO21aIj7bOo50vvfov+szWypwdw90qBxt1Gl
HNxMx6a4WU56TVjzSD12KSdvL6iEpG6F+myXiAlyy/nG2F30RBCaBb/s7b7Lgltl
32/FwP+ww6WiQG3lIpR87q7jn9FsZRDhm6WEap3uhV0qvaQtoTOrwjnd3Umm8Nm8
KUofbTYQMLdnful+JNMg717XGajtpbolKoR5vVm2XKw3pdTlts9LOI+SDFhIS70S
SCERJzW1zEhWJJNvhI7jOuLKTfNQTxGlAf4fzk0LSfAYEo9bsJncGWRoRQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFFlxp4BY23JA79F3PN+8k8bTBPb0MB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvV1hHbmdGamJja0R2MFhjODM3eVR4dE1FOXZRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAGdyVF/zBerrwux8siks
Ee/7Z5VhbOoTA+Oa5L5Ja0SW1a2vlNmE8OmJVEIoFB4PNh8fB0UOEW0k5koOcdAC
KvKuIqeQk7rhNvNtspXXEQyvn7C4UmQ/a9NvjxDrvloD2DsHSi3Rhe73sHEmSedW
VU3SmoIfqP9kmWPDI3HM8k7m4Z4NVqKN6FvZSpUVTna5aITouKL7Y/z9pD++HY2/
kzfkSU9AqjwN/Byxj6pnSz0Od+PyjS0Qnv9BoZnBbWAPgq6vMJBwzVkISb+J/Ftu
wbf/iP4JUE0OostUz+7jdI4LTtZTntzw5hGYErgJZdhZyxHtYaCDrQIAONKGn+2d
h2U=
-----END CERTIFICATE-----
Generated at Wed Apr 30 18:45:30 2025 by rpki-client