Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Wb-A8fWPURiMXmiLe0SWo6Rd-Xw.roa
File: Wb-A8fWPURiMXmiLe0SWo6Rd-Xw.roa (raw, json)
Hash identifier: o2d9hwReu7qgJd33+A4/Py/rx5DAM5VLq6K2kkaTGn4=
Subject key identifier: 59:BF:80:F1:F5:8F:51:18:8C:5E:68:8B:7B:44:96:A3:A4:5D:F9:7C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187E5CA73F6D1A794C2470291EF31942045
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Wb-A8fWPURiMXmiLe0SWo6Rd-Xw.roa
Signing time: Thu 04 May 2023 08:04:23 +0000
ROA not before: Thu 04 May 2023 08:04:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:e5ca:41d6/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:e5:ca:73:f6:d1:a7:94:c2:47:02:91:ef:31:94:20:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 4 08:04:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=59bf80f1f58f51188c5e688b7b4496a3a45df97c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:05:20:0b:c4:2b:62:40:75:b1:a7:48:aa:fc:
2d:6b:e9:92:97:f5:1e:0d:ef:3e:5e:f2:7e:05:00:
93:3f:a9:16:b2:ce:b8:fa:1b:a9:0c:d7:dd:1f:1d:
b9:65:9c:20:76:13:13:7a:7e:4d:50:06:0a:f3:67:
22:96:4d:1e:36:91:5e:37:14:66:86:a7:fd:f1:23:
2d:06:56:4b:23:85:c6:54:f7:38:85:1c:84:91:6b:
ff:32:72:90:d1:99:ef:d2:80:1f:23:92:f3:af:b8:
c0:14:75:a7:83:d6:c4:68:6f:0e:38:41:b8:42:d8:
61:3d:c0:59:b1:38:40:b0:e9:5d:10:a4:5c:92:a5:
38:08:71:1a:ca:e4:d2:36:a4:c2:45:82:39:00:f1:
da:6a:10:cb:cd:04:8d:12:37:d6:71:c7:29:dc:ea:
ea:2f:c8:93:62:a8:17:32:c8:4f:68:c0:b5:e7:52:
8c:b7:6e:5c:80:2a:3b:2b:6c:39:d1:5d:6a:6f:d8:
b5:14:6d:ef:ab:d3:c0:b8:9b:85:dc:d9:14:ae:63:
2a:3b:7a:48:e2:5f:78:ea:fe:7f:52:b5:0b:c4:5e:
12:23:c3:9f:78:43:b9:14:70:23:7a:11:7f:d9:58:
b7:88:41:97:36:12:59:80:c4:86:3c:f9:3a:82:90:
f6:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:BF:80:F1:F5:8F:51:18:8C:5E:68:8B:7B:44:96:A3:A4:5D:F9:7C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Wb-A8fWPURiMXmiLe0SWo6Rd-Xw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
12:29:ab:b6:f1:65:b7:c4:c5:8f:d9:04:85:9a:34:6a:c6:9d:
5c:16:f1:4f:63:b6:98:bf:be:02:99:13:a9:e8:95:d5:e2:34:
b8:12:a3:80:37:b4:3e:c2:9b:7c:59:55:8d:04:79:0f:49:9b:
3e:74:b4:f3:d9:83:0b:81:09:d0:65:fe:b4:d9:dc:2f:72:2c:
df:fc:7c:c6:7e:cb:1d:57:a2:46:1f:95:39:b3:da:78:88:bf:
ec:01:a4:9a:a8:ba:7b:98:e6:36:9d:f7:14:06:95:75:79:4b:
db:1f:d9:67:73:a3:36:6c:8d:eb:14:be:e6:bf:eb:dd:32:6c:
3b:e5:0b:4d:8c:65:cd:12:d4:0f:4c:41:d6:08:b5:b5:66:2d:
e0:d2:90:f7:71:a7:1c:27:c7:d3:32:d6:95:ad:60:94:50:c0:
b5:b6:bf:1b:d2:ee:47:57:12:01:10:18:b1:e5:2f:a7:76:e4:
06:9e:64:e0:fa:ec:2b:d9:3b:56:e2:74:0d:4e:3c:8c:4a:bf:
10:62:b5:19:f0:8f:07:fc:e6:04:6f:48:24:91:a8:33:af:27:
74:33:20:60:0a:97:8d:bf:43:14:d9:8d:92:49:41:a8:4e:07:
46:e4:a3:93:b3:94:7e:46:b4:c6:de:f5:6d:be:dd:de:c8:81:
5d:72:7b:ed
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYflynP20aeUwkcCke8xlCBFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNTA0MDgwNDIzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1OWJmODBmMWY1OGY1MTE4OGM1ZTY4OGI3YjQ0OTZhM2E0NWRmOTdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzQUgC8QrYkB1sadIqvwta+mSl/Ue
De8+XvJ+BQCTP6kWss64+hupDNfdHx25ZZwgdhMTen5NUAYK82cilk0eNpFeNxRm
hqf98SMtBlZLI4XGVPc4hRyEkWv/MnKQ0Znv0oAfI5Lzr7jAFHWng9bEaG8OOEG4
QthhPcBZsThAsOldEKRckqU4CHEayuTSNqTCRYI5APHaahDLzQSNEjfWcccp3Orq
L8iTYqgXMshPaMC151KMt25cgCo7K2w50V1qb9i1FG3vq9PAuJuF3NkUrmMqO3pI
4l946v5/UrULxF4SI8OfeEO5FHAjehF/2Vi3iEGXNhJZgMSGPPk6gpD2IQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFFm/gPH1j1EYjF5oi3tElqOkXfl8MB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvV2ItQThmV1BVUmlNWG1pTGUwU1dvNlJkLVh3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBABIpq7bxZbfExY/ZBIWa
NGrGnVwW8U9jtpi/vgKZE6noldXiNLgSo4A3tD7Cm3xZVY0EeQ9Jmz50tPPZgwuB
CdBl/rTZ3C9yLN/8fMZ+yx1XokYflTmz2niIv+wBpJqounuY5jad9xQGlXV5S9sf
2WdzozZsjesUvua/690ybDvlC02MZc0S1A9MQdYItbVmLeDSkPdxpxwnx9My1pWt
YJRQwLW2vxvS7kdXEgEQGLHlL6d25AaeZOD67CvZO1bidA1OPIxKvxBitRnwjwf8
5gRvSCSRqDOvJ3QzIGAKl42/QxTZjZJJQahOB0bko5OzlH5GtMbe9W2+3d7IgV1y
e+0=
-----END CERTIFICATE-----
Generated at Wed Apr 30 17:35:01 2025 by rpki-client