Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/W_A0-nVTyBWgeRjyYLGT92RIwSg.roa
File: W_A0-nVTyBWgeRjyYLGT92RIwSg.roa (raw, json)
Hash identifier: UGgV70cVIT4kAjd0YQkbnc8nWWyjkL5IAg3hzWPzHz0=
Subject key identifier: 5B:F0:34:FA:75:53:C8:15:A0:79:18:F2:60:B1:93:F7:64:48:C1:28
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0183C3839714498006FAD0353220E71B7852
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/W_A0-nVTyBWgeRjyYLGT92RIwSg.roa
Signing time: Mon 10 Oct 2022 20:08:44 +0000
ROA not before: Mon 10 Oct 2022 20:08:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:183:c380:5ec3/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:c3:83:97:14:49:80:06:fa:d0:35:32:20:e7:1b:78:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Oct 10 20:08:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5bf034fa7553c815a07918f260b193f76448c128
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:56:03:cc:d7:80:5e:d9:e0:2f:03:eb:c3:0c:
fe:3c:21:96:bf:78:93:d5:6a:08:58:bd:c8:7a:5d:
c5:36:d1:4c:1f:f6:4c:ad:bb:87:8c:42:3e:58:48:
28:42:73:5a:4c:82:4f:12:68:4e:62:ad:55:c1:f2:
18:49:71:9e:5c:b0:5d:9a:62:12:91:b7:7d:6e:36:
5c:a8:24:c0:9e:76:a1:ae:d5:51:64:6d:32:a5:7c:
3b:10:a5:d4:74:a7:41:38:d8:88:99:c6:18:44:34:
72:3b:e6:82:82:93:f9:72:86:37:d1:01:a6:5f:08:
9b:1f:27:cd:ab:f5:e7:90:7e:4e:b3:3d:0f:dd:bd:
6a:8c:4d:b8:3b:91:2d:35:f9:4f:77:cd:b8:8e:7c:
62:e7:22:73:d0:9d:fb:7a:b1:4b:65:c5:8e:35:ba:
33:72:1c:70:f8:9f:28:3b:cd:78:7e:07:78:be:59:
d7:b8:fe:28:36:17:9b:4a:cb:79:74:1e:64:e5:e8:
a1:35:b0:97:c3:fd:c6:86:5a:52:a4:41:68:6b:80:
84:fb:e0:3c:ff:af:22:e8:28:26:7e:97:e9:10:06:
7e:e7:79:63:56:0d:fb:a5:a9:bf:be:d0:17:73:3e:
13:14:b3:76:47:de:69:1f:94:44:6b:fb:b3:bc:a1:
8b:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:F0:34:FA:75:53:C8:15:A0:79:18:F2:60:B1:93:F7:64:48:C1:28
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/W_A0-nVTyBWgeRjyYLGT92RIwSg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
73:2b:2e:1d:f9:f3:e8:91:a8:21:c2:a0:fc:b2:17:99:86:69:
ae:2a:94:bc:13:b9:7d:79:e7:b5:09:78:aa:76:f2:45:22:9d:
5e:71:a1:8f:07:7f:a4:19:ea:57:02:e8:1c:c5:95:f9:51:b7:
63:b9:ea:1c:28:96:34:79:c4:74:4b:02:f2:dd:46:77:b5:fa:
4b:3a:c5:ac:7a:0c:d2:32:08:5a:61:da:f3:f0:99:3f:7b:bb:
93:6b:fa:9e:d6:fd:04:3c:d2:4e:d4:20:72:bd:67:7e:f0:c2:
d4:ba:8d:13:b5:11:69:e8:79:37:c4:df:ce:21:5e:67:a8:5e:
02:f4:85:5f:ee:9c:6a:68:25:c7:20:fd:c8:be:7e:a0:4a:5b:
93:3d:96:36:90:f0:90:b3:23:74:70:3a:8c:4c:5e:30:d2:31:
ca:80:29:7e:3c:c7:05:39:d4:b7:ca:49:84:08:81:25:48:ec:
c1:90:97:b1:92:0b:0b:5c:79:42:e3:72:95:44:db:75:9b:ac:
9c:8a:da:95:e2:e8:4a:5b:bb:ed:9e:5a:91:28:65:01:5e:ad:
85:47:4c:c4:89:63:4d:87:8a:a9:6f:b2:31:2f:64:e7:4f:01:
65:19:6d:56:26:4b:fd:00:dc:f7:58:48:cc:72:f5:1d:b3:46:
ae:f6:ff:d7
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYPDg5cUSYAG+tA1MiDnG3hSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIxMDEwMjAwODQ0WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YmYwMzRmYTc1NTNjODE1YTA3OTE4ZjI2MGIxOTNmNzY0NDhjMTI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApFYDzNeAXtngLwPrwwz+PCGWv3iT
1WoIWL3Iel3FNtFMH/ZMrbuHjEI+WEgoQnNaTIJPEmhOYq1VwfIYSXGeXLBdmmIS
kbd9bjZcqCTAnnahrtVRZG0ypXw7EKXUdKdBONiImcYYRDRyO+aCgpP5coY30QGm
XwibHyfNq/XnkH5Osz0P3b1qjE24O5EtNflPd824jnxi5yJz0J37erFLZcWONboz
chxw+J8oO814fgd4vlnXuP4oNhebSst5dB5k5eihNbCXw/3GhlpSpEFoa4CE++A8
/68i6CgmfpfpEAZ+53ljVg37pam/vtAXcz4TFLN2R95pH5REa/uzvKGLdwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFFvwNPp1U8gVoHkY8mCxk/dkSMEoMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvV19BMC1uVlR5QldnZVJqeVlMR1Q5MlJJd1NnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAHMrLh358+iRqCHCoPyy
F5mGaa4qlLwTuX1557UJeKp28kUinV5xoY8Hf6QZ6lcC6BzFlflRt2O56hwoljR5
xHRLAvLdRne1+ks6xax6DNIyCFph2vPwmT97u5Nr+p7W/QQ80k7UIHK9Z37wwtS6
jRO1EWnoeTfE384hXmeoXgL0hV/unGpoJccg/ci+fqBKW5M9ljaQ8JCzI3RwOoxM
XjDSMcqAKX48xwU51LfKSYQIgSVI7MGQl7GSCwtceULjcpVE23WbrJyK2pXi6Epb
u+2eWpEoZQFerYVHTMSJY02HiqlvsjEvZOdPAWUZbVYmS/0A3PdYSMxy9R2zRq72
/9c=
-----END CERTIFICATE-----
Generated at Thu May 1 12:52:29 2025 by rpki-client