Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/WhG67y7sIRGhO1H4nL_-DpmNMIA.roa
File: WhG67y7sIRGhO1H4nL_-DpmNMIA.roa (raw, json)
Hash identifier: IX9WIaXLn5xVSRD+a2/vrmq2S1qqkFoUJpdSlH6+dF0=
Subject key identifier: 5A:11:BA:EF:2E:EC:21:11:A1:3B:51:F8:9C:BF:FE:0E:99:8D:30:80
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 8D8E602E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/WhG67y7sIRGhO1H4nL_-DpmNMIA.roa
Signing time: Fri 17 Jun 2022 15:17:51 +0000
ROA not before: Fri 17 Jun 2022 15:17:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:181:56ba:5b78/128 maxlen: 128
2001:67c:64:ffff:0:181:22f:7a99/128 maxlen: 128
2001:67c:64:ffff:0:181:477e:58d8/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2374918190 (0x8d8e602e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 17 15:17:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5a11baef2eec2111a13b51f89cbffe0e998d3080
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:2a:5e:69:8e:31:0d:1b:71:3e:a0:fe:14:fe:
f8:15:fb:a2:47:53:44:70:ee:97:04:2e:d1:d4:e2:
42:ec:ae:c2:4c:36:26:b7:dc:b9:01:8b:40:cd:5f:
23:83:0a:c7:4e:a2:a5:75:f6:f9:f0:2d:9b:aa:59:
83:fe:98:9f:af:63:ff:86:b5:07:fd:7f:33:e9:5b:
3e:ab:d3:b4:cc:e4:22:8d:8a:cc:aa:c4:59:81:7b:
5c:d6:50:1b:c2:52:61:26:a2:98:94:92:cb:3e:5e:
db:63:98:21:4e:c7:e8:68:73:4a:1e:ed:59:89:26:
92:57:b4:fa:0e:26:5b:ac:bf:dc:de:32:80:fe:66:
ad:5a:a1:24:77:dd:43:99:e0:9f:39:d2:b0:34:43:
25:1e:81:7e:38:bd:ff:58:82:fd:0f:bb:ae:c8:c4:
90:6c:6f:63:d9:7b:68:cd:75:75:c0:d2:a3:43:59:
48:a7:d5:b9:81:0e:b1:cb:11:09:c5:13:f9:51:d1:
29:96:3f:fd:a9:e2:09:76:8f:ab:95:4f:b0:e1:7b:
12:ba:6d:99:f2:fe:11:ce:18:6b:4f:fa:e7:a0:de:
20:a2:fa:92:f9:20:2d:53:9d:d6:0e:e8:41:67:9e:
68:75:7d:73:d1:00:bc:74:41:5f:28:2a:0a:32:87:
32:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:11:BA:EF:2E:EC:21:11:A1:3B:51:F8:9C:BF:FE:0E:99:8D:30:80
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/WhG67y7sIRGhO1H4nL_-DpmNMIA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
20:cb:3e:e5:be:73:1c:9f:47:7e:fd:65:f8:52:41:11:6a:9c:
62:11:7c:6f:1f:d0:d0:a9:f1:60:3e:da:16:25:72:a2:da:a6:
5f:b4:22:87:b7:5f:46:0a:52:4e:ff:70:f7:2b:8f:fe:ae:a4:
92:0c:fa:b9:5a:64:c3:f4:6e:f6:ec:e4:24:3c:a3:8d:5f:ff:
90:e6:ef:e0:54:95:e8:fd:46:37:c8:d8:d5:38:39:b3:e0:13:
52:cb:1b:c5:c8:b1:00:84:e1:85:6f:bf:fb:58:26:77:bd:67:
7a:0e:e4:58:7f:c3:b6:6f:5b:f8:42:4a:66:f7:5f:43:f7:54:
bb:2f:c3:6c:69:ae:63:ab:4b:bd:d6:2e:e9:8f:dd:f5:01:51:
f0:91:7f:c3:9b:ae:72:d2:56:6f:93:49:dd:a1:b2:8b:1f:a1:
ea:31:fd:6a:0d:7f:af:da:0e:4f:08:9d:c8:d3:18:96:4d:7e:
93:bd:af:f4:ed:a9:2e:e6:c2:e4:4f:b3:39:fa:61:34:11:61:
e6:aa:37:cb:2e:7e:fb:3d:9d:24:46:ef:f3:45:af:a0:3c:30:
07:19:99:1f:f1:7a:b4:92:dc:58:15:e6:1f:89:f2:de:43:b0:
3b:88:6f:0b:97:3c:ae:bf:ed:4d:e3:2a:fe:16:35:a5:07:10:
0f:0a:30:cb
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgIFAI2OYC4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMo
NzIwNDdiZTE1YjI3NTkwMmRjZjYxN2RjM2QwZTE2ZGMxZjMwODAyMjAeFw0yMjA2
MTcxNTE3NTFaFw0yMzA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKDVhMTFiYWVmMmVl
YzIxMTFhMTNiNTFmODljYmZmZTBlOTk4ZDMwODAwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCRKl5pjjENG3E+oP4U/vgV+6JHU0Rw7pcELtHU4kLsrsJM
Nia33LkBi0DNXyODCsdOoqV19vnwLZuqWYP+mJ+vY/+GtQf9fzPpWz6r07TM5CKN
isyqxFmBe1zWUBvCUmEmopiUkss+XttjmCFOx+hoc0oe7VmJJpJXtPoOJlusv9ze
MoD+Zq1aoSR33UOZ4J850rA0QyUegX44vf9Ygv0Pu67IxJBsb2PZe2jNdXXA0qND
WUin1bmBDrHLEQnFE/lR0SmWP/2p4gl2j6uVT7DhexK6bZny/hHOGGtP+ueg3iCi
+pL5IC1TndYO6EFnnmh1fXPRALx0QV8oKgoyhzJxAgMBAAGjggIaMIICFjAdBgNV
HQ4EFgQUWhG67y7sIRGhO1H4nL/+DpmNMIAwHwYDVR0jBBgwFoAUcgR74VsnWQLc
9hfcPQ4W3B8wgCIwDgYDVR0PAQH/BAQDAgeAMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVM
VC9jZ1I3NFZzbldRTGM5aGZjUFE0VzNCOHdnQ0kuY2VyMIGNBggrBgEFBQcBCwSB
gDB+MHwGCCsGAQUFBzALhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9ERUZBVUxULzVlLzc5ODQ0Ny0yMWY0LTQ1YWItOTlkYy0xYWJlM2FjMTBhYTYv
MS9XaEc2N3k3c0lSR2hPMUg0bkxfLURwbU5NSUEucm9hMIGBBgNVHR8EejB4MHag
dKByhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVl
Lzc5ODQ0Ny0yMWY0LTQ1YWItOTlkYy0xYWJlM2FjMTBhYTYvMS9jZ1I3NFZzbldR
TGM5aGZjUFE0VzNCOHdnQ0kuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
MAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYDBAPBABgwDwQCAAIwCQMHACABBnwA
ZDANBgkqhkiG9w0BAQsFAAOCAQEAIMs+5b5zHJ9Hfv1l+FJBEWqcYhF8bx/Q0Knx
YD7aFiVyotqmX7Qih7dfRgpSTv9w9yuP/q6kkgz6uVpkw/Ru9uzkJDyjjV//kObv
4FSV6P1GN8jY1Tg5s+ATUssbxcixAIThhW+/+1gmd71neg7kWH/Dtm9b+EJKZvdf
Q/dUuy/DbGmuY6tLvdYu6Y/d9QFR8JF/w5uuctJWb5NJ3aGyix+h6jH9ag1/r9oO
TwidyNMYlk1+k72v9O2pLubC5E+zOfphNBFh5qo3yy5++z2dJEbv80WvoDwwBxmZ
H/F6tJLcWBXmH4ny3kOwO4hvC5c8rr/tTeMq/hY1pQcQDwowyw==
-----END CERTIFICATE-----
Generated at Sat May 3 02:38:57 2025 by rpki-client