Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/WZkZd8V4TLMwW_oAn1IB7-tKLYc.roa
File: WZkZd8V4TLMwW_oAn1IB7-tKLYc.roa (raw, json)
Hash identifier: 3t1bczvORpt+fYo3zAjEoHPi7Qetg9c/0rydNTubEjU=
Subject key identifier: 59:99:19:77:C5:78:4C:B3:30:5B:FA:00:9F:52:01:EF:EB:4A:2D:87
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 6E14CDA0
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/WZkZd8V4TLMwW_oAn1IB7-tKLYc.roa
Signing time: Sun 27 Feb 2022 06:08:18 +0000
ROA not before: Sun 27 Feb 2022 06:08:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1846857120 (0x6e14cda0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 27 06:08:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=59991977c5784cb3305bfa009f5201efeb4a2d87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:c3:e9:23:2e:25:2b:be:9a:d6:4c:68:d5:8e:
5e:7c:12:d3:68:2f:17:52:22:44:ce:b1:bd:eb:4e:
c3:7d:46:0f:ae:37:5c:84:88:d1:45:7d:73:73:ad:
43:14:f2:e3:43:c7:65:33:fe:ab:8f:c5:ad:3c:c6:
ca:5b:7a:36:ce:b2:9d:d6:7e:4a:36:bd:9c:f1:47:
13:df:1c:b6:e3:62:4e:e9:52:2b:0c:e7:a3:7d:fb:
fc:e7:ca:a3:1b:14:7a:1d:b6:3a:3d:cc:27:97:c0:
50:8a:43:13:b6:50:34:56:da:60:7b:f3:50:9f:fb:
99:f9:9c:fc:67:16:17:f8:78:6d:74:a7:6c:f6:72:
d6:30:a6:a2:4c:b6:e2:b9:35:19:ce:46:8d:97:ac:
f8:7a:98:22:f1:e5:18:52:51:4d:b0:05:ab:e6:34:
be:e5:de:a1:13:b1:d1:23:41:00:d3:b0:57:ea:4f:
43:53:67:da:b5:73:7a:59:25:e2:58:d0:cc:a1:bb:
93:30:a7:a3:08:68:3f:21:87:99:67:80:73:21:8b:
15:36:9a:03:f3:3c:19:40:38:c2:9e:c4:c5:90:16:
ec:e7:cc:29:2c:95:85:4c:04:c3:55:4d:8b:f0:4c:
1d:23:f9:d5:2d:7a:bc:a0:9b:2d:ec:c0:00:ed:88:
08:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:99:19:77:C5:78:4C:B3:30:5B:FA:00:9F:52:01:EF:EB:4A:2D:87
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/WZkZd8V4TLMwW_oAn1IB7-tKLYc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
45:83:b1:6b:17:70:82:3e:29:fe:ce:25:20:08:55:28:2b:ef:
18:89:fb:b4:bf:5c:f3:1a:c4:29:aa:04:3d:45:ad:ab:ad:19:
d6:9a:57:c5:6f:5c:0b:7c:26:15:a6:2c:7a:35:98:64:24:e8:
d4:6f:59:b9:28:8e:c3:f4:87:b8:45:d2:bd:83:6f:31:8d:34:
20:b8:b9:2a:ec:0c:56:41:e7:a8:8f:41:b8:a4:6f:fb:c2:11:
da:1a:2e:52:3a:72:17:ce:05:34:6c:be:3a:fa:8f:78:d7:5e:
2c:a4:23:b7:d0:cb:2f:d8:50:f6:60:df:41:02:6b:e3:3f:b4:
cb:bf:da:e7:5f:be:da:2e:ce:45:6f:0d:91:67:c2:96:50:33:
c1:cf:0d:eb:fd:17:18:bc:4f:92:fb:64:7e:13:e7:cf:7f:b2:
ab:1c:0d:70:7b:f7:51:7e:cc:87:6b:a6:7e:28:b2:a5:d8:44:
0c:dd:fd:2d:ba:7a:83:00:6b:44:7c:5b:ab:d3:21:d4:c6:87:
97:38:00:b0:b4:83:d3:bd:64:ca:a1:a8:f9:2b:b6:e3:ec:a6:
a3:d1:60:b8:c9:4f:5d:73:2c:fe:1d:c1:1a:d3:da:29:01:b3:
b2:98:66:be:c8:73:5a:58:e3:cc:1a:d6:18:8d:e7:d1:42:96:
98:69:f6:8f
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIEbhTNoDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
MjA0N2JlMTViMjc1OTAyZGNmNjE3ZGMzZDBlMTZkYzFmMzA4MDIyMB4XDTIyMDIy
NzA2MDgxOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNTk5OTE5NzdjNTc4
NGNiMzMwNWJmYTAwOWY1MjAxZWZlYjRhMmQ4NzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANXD6SMuJSu+mtZMaNWOXnwS02gvF1IiRM6xvetOw31GD643
XISI0UV9c3OtQxTy40PHZTP+q4/FrTzGylt6Ns6yndZ+Sja9nPFHE98ctuNiTulS
Kwzno337/OfKoxsUeh22Oj3MJ5fAUIpDE7ZQNFbaYHvzUJ/7mfmc/GcWF/h4bXSn
bPZy1jCmoky24rk1Gc5GjZes+HqYIvHlGFJRTbAFq+Y0vuXeoROx0SNBANOwV+pP
Q1Nn2rVzelkl4ljQzKG7kzCnowhoPyGHmWeAcyGLFTaaA/M8GUA4wp7ExZAW7OfM
KSyVhUwEw1VNi/BMHSP51S16vKCbLezAAO2ICJsCAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBRZmRl3xXhMszBb+gCfUgHv60othzAfBgNVHSMEGDAWgBRyBHvhWydZAtz2
F9w9DhbcHzCAIjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2NnUjc0VnNuV1FMYzloZmNQUTRXM0I4d2dDSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNWUvNzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8x
L1daa1pkOFY0VExNd1dfb0FuMUlCNy10S0xZYy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWUv
Nzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8xL2NnUjc0VnNuV1FM
YzloZmNQUTRXM0I4d2dDSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEA8EAGDAPBAIAAjAJAwcAIAEGfABk
MA0GCSqGSIb3DQEBCwUAA4IBAQBFg7FrF3CCPin+ziUgCFUoK+8Yifu0v1zzGsQp
qgQ9Ra2rrRnWmlfFb1wLfCYVpix6NZhkJOjUb1m5KI7D9Ie4RdK9g28xjTQguLkq
7AxWQeeoj0G4pG/7whHaGi5SOnIXzgU0bL46+o94114spCO30Msv2FD2YN9BAmvj
P7TLv9rnX77aLs5Fbw2RZ8KWUDPBzw3r/RcYvE+S+2R+E+fPf7KrHA1we/dRfsyH
a6Z+KLKl2EQM3f0tunqDAGtEfFur0yHUxoeXOACwtIPTvWTKoaj5K7bj7Kaj0WC4
yU9dcyz+HcEa09opAbOymGa+yHNaWOPMGtYYjefRQpaYafaP
-----END CERTIFICATE-----
Generated at Wed Apr 30 17:35:42 2025 by rpki-client