Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Wae0OT6xvzeXIQHm5brr-9oEqEo.roa
File: Wae0OT6xvzeXIQHm5brr-9oEqEo.roa (raw, json)
Hash identifier: DGei4stYxySWjaejwg/hRL2iVkg2/rztZCURag5nT8k=
Subject key identifier: 59:A7:B4:39:3E:B1:BF:37:97:21:01:E6:E5:BA:EB:FB:DA:04:A8:4A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 68580FDC
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Wae0OT6xvzeXIQHm5brr-9oEqEo.roa
Signing time: Sun 06 Feb 2022 06:19:45 +0000
ROA not before: Sun 06 Feb 2022 06:19:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17e:a0dd:2f5b/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1750601692 (0x68580fdc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 6 06:19:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=59a7b4393eb1bf37972101e6e5baebfbda04a84a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:50:c6:f0:f5:8e:fd:30:71:09:93:5c:c9:c7:
24:e9:35:51:f9:60:1f:42:6d:47:66:8c:10:f0:68:
10:18:c3:3c:01:04:38:31:ab:bc:09:89:3b:2d:17:
ca:76:87:64:78:5a:d6:b0:f8:0a:24:3d:3f:12:c2:
00:9e:d0:21:16:70:26:b1:cf:e1:4f:d3:02:8f:fa:
2b:18:8b:14:83:cd:36:35:9b:52:2e:2b:02:1f:d6:
01:40:de:b1:3e:7d:67:29:75:06:14:f1:e7:6e:f6:
3e:64:06:50:48:b6:20:3f:e7:c2:05:12:8f:81:8b:
b8:58:a9:0c:57:e4:78:e7:10:92:ff:ab:7a:50:c7:
d7:de:0d:3e:78:2c:e8:82:3e:79:2e:65:76:89:47:
c8:0d:aa:4b:4a:2c:ca:39:cf:50:73:d0:08:b2:95:
9f:4e:50:14:f3:92:cf:1e:fe:8f:e7:f1:88:18:d1:
8d:4a:0c:05:9c:38:be:31:c7:fd:08:cc:03:8e:34:
c5:b3:fb:9d:70:72:12:68:e3:80:ad:e4:11:91:58:
88:bc:0f:97:03:31:61:f9:2f:c0:23:7e:ff:36:fd:
f1:b0:71:2c:3f:37:31:03:6a:9b:25:45:ef:f7:aa:
ef:6b:66:56:b9:33:74:b9:3e:7a:26:b8:05:df:0e:
a3:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:A7:B4:39:3E:B1:BF:37:97:21:01:E6:E5:BA:EB:FB:DA:04:A8:4A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Wae0OT6xvzeXIQHm5brr-9oEqEo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
26:b2:18:31:17:6c:88:9f:8c:83:5c:56:78:1d:79:06:49:fe:
53:1c:fc:4e:71:2e:8b:2c:d8:52:61:f4:29:e0:d8:14:32:8c:
49:2c:7b:75:15:da:2e:c4:dd:cb:67:c9:df:49:1b:0b:56:82:
7f:ff:7d:8b:60:26:da:73:ba:7b:ef:26:29:88:a5:16:f0:15:
fb:5e:3f:e1:ec:7d:9b:73:2f:44:da:07:36:9c:a3:6c:b1:e7:
92:e7:c9:08:d6:73:ad:64:e1:79:de:73:8e:07:d8:4b:bb:0c:
78:19:d8:9c:5f:95:69:0d:d0:d3:d5:5b:31:1d:fa:96:91:79:
02:24:26:86:69:ad:e4:a5:5d:95:fa:86:7f:01:f6:3f:4c:2e:
a8:ea:7c:ea:e3:6e:39:dd:27:03:50:77:33:ac:27:c4:bf:45:
9a:08:a4:ee:85:4f:63:5d:c3:71:cc:8a:35:aa:d2:33:61:01:
79:4e:fc:85:46:2c:76:d1:4e:17:89:59:b5:dc:21:d4:30:cb:
92:47:a7:88:c2:89:ba:0d:45:bc:dd:82:54:20:56:f5:32:3a:
a7:40:dc:b6:5b:d9:84:85:6e:58:bb:3b:f3:dd:49:35:9a:76:
7a:6a:13:67:a2:12:51:95:e8:f2:5b:1c:5b:06:de:ce:0f:42:
01:6c:40:49
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIEaFgP3DANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
MjA0N2JlMTViMjc1OTAyZGNmNjE3ZGMzZDBlMTZkYzFmMzA4MDIyMB4XDTIyMDIw
NjA2MTk0NVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNTlhN2I0MzkzZWIx
YmYzNzk3MjEwMWU2ZTViYWViZmJkYTA0YTg0YTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALpQxvD1jv0wcQmTXMnHJOk1UflgH0JtR2aMEPBoEBjDPAEE
ODGrvAmJOy0XynaHZHha1rD4CiQ9PxLCAJ7QIRZwJrHP4U/TAo/6KxiLFIPNNjWb
Ui4rAh/WAUDesT59Zyl1BhTx5272PmQGUEi2ID/nwgUSj4GLuFipDFfkeOcQkv+r
elDH194NPngs6II+eS5ldolHyA2qS0osyjnPUHPQCLKVn05QFPOSzx7+j+fxiBjR
jUoMBZw4vjHH/QjMA440xbP7nXByEmjjgK3kEZFYiLwPlwMxYfkvwCN+/zb98bBx
LD83MQNqmyVF7/eq72tmVrkzdLk+eia4Bd8Ooy8CAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBRZp7Q5PrG/N5chAebluuv72gSoSjAfBgNVHSMEGDAWgBRyBHvhWydZAtz2
F9w9DhbcHzCAIjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2NnUjc0VnNuV1FMYzloZmNQUTRXM0I4d2dDSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNWUvNzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8x
L1dhZTBPVDZ4dnplWElRSG01YnJyLTlvRXFFby5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWUv
Nzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8xL2NnUjc0VnNuV1FM
YzloZmNQUTRXM0I4d2dDSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEA8EAGDAPBAIAAjAJAwcAIAEGfABk
MA0GCSqGSIb3DQEBCwUAA4IBAQAmshgxF2yIn4yDXFZ4HXkGSf5THPxOcS6LLNhS
YfQp4NgUMoxJLHt1FdouxN3LZ8nfSRsLVoJ//32LYCbac7p77yYpiKUW8BX7Xj/h
7H2bcy9E2gc2nKNsseeS58kI1nOtZOF53nOOB9hLuwx4GdicX5VpDdDT1VsxHfqW
kXkCJCaGaa3kpV2V+oZ/AfY/TC6o6nzq42453ScDUHczrCfEv0WaCKTuhU9jXcNx
zIo1qtIzYQF5TvyFRix20U4XiVm13CHUMMuSR6eIwom6DUW83YJUIFb1MjqnQNy2
W9mEhW5Yuzvz3Uk1mnZ6ahNnohJRlejyWxxbBt7OD0IBbEBJ
-----END CERTIFICATE-----
Generated at Thu May 1 00:43:51 2025 by rpki-client