Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/WmsZ802coS0r6vdzf6ifJ78wCPw.roa
File: WmsZ802coS0r6vdzf6ifJ78wCPw.roa (raw, json)
Hash identifier: PNSIOWhjxrFn20HOWv+iKAIZJDA+fPYA25NVetVVsVU=
Subject key identifier: 5A:6B:19:F3:4D:9C:A1:2D:2B:EA:F7:73:7F:A8:9F:27:BF:30:08:FC
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186FDDDA6DB7974A26559EF3D14602E9962
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/WmsZ802coS0r6vdzf6ifJ78wCPw.roa
Signing time: Mon 20 Mar 2023 07:13:27 +0000
ROA not before: Mon 20 Mar 2023 07:13:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:fd:dd:a6:db:79:74:a2:65:59:ef:3d:14:60:2e:99:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 20 07:13:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5a6b19f34d9ca12d2beaf7737fa89f27bf3008fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:9c:56:df:cb:9d:ce:00:86:2c:89:44:48:59:
69:19:b3:af:3d:96:0d:1e:bc:4e:f9:77:24:49:08:
b3:f2:8b:0d:6d:37:e2:39:83:4c:07:15:12:57:89:
6e:45:3f:d1:ec:b8:47:74:60:75:d2:6e:97:0d:7c:
c6:02:e9:ed:b4:c0:32:0c:7e:71:f6:a2:31:ed:96:
42:ca:0a:0f:f1:51:8b:43:f6:3e:ab:1c:06:93:ac:
68:77:10:45:24:f4:d0:63:e8:0f:11:54:8e:cb:22:
73:68:1e:95:cd:ef:6a:90:ad:35:22:f7:6f:ba:c4:
00:ca:7f:fa:74:91:21:17:c3:64:ad:39:a2:4d:be:
50:19:b0:3d:6d:41:59:2e:e4:1e:b8:4b:86:14:54:
78:28:ae:3e:84:d0:cf:cc:5a:8d:f8:07:d4:8f:0e:
51:42:fb:bf:3f:68:82:70:11:4f:8f:7d:13:9b:c7:
27:c8:ae:50:b0:9e:97:d7:5b:ee:95:1f:0c:f8:b7:
34:90:2f:b3:e0:30:44:fa:94:a0:40:13:99:8f:e7:
95:1a:99:ac:ad:d6:89:6e:1e:62:20:b5:58:32:07:
f8:00:4e:f1:00:01:78:d9:91:f6:03:73:8a:de:4e:
bd:ba:55:58:03:6b:a8:49:4a:5b:ac:7d:51:b5:2b:
07:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:6B:19:F3:4D:9C:A1:2D:2B:EA:F7:73:7F:A8:9F:27:BF:30:08:FC
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/WmsZ802coS0r6vdzf6ifJ78wCPw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a8:61:00:70:a4:c4:f8:38:54:ae:c4:fc:08:d8:e1:4e:e0:a2:
29:62:5e:80:7c:af:59:70:ef:82:2f:5c:33:9f:7f:22:77:ff:
6a:91:32:f9:c8:85:d8:d9:58:b9:a1:fb:0d:22:3c:0e:6c:b4:
67:d6:be:7d:92:ac:aa:98:84:36:ec:81:33:60:b8:9a:c4:40:
d1:15:81:72:3a:82:f8:7a:f5:6e:d0:b0:47:78:e3:7a:3f:70:
41:cd:90:39:41:a0:ae:0c:71:10:b1:27:b3:2d:42:56:41:fe:
f9:23:fe:56:f7:16:83:ea:99:e1:95:ae:cc:99:a3:69:7b:5a:
2b:bb:c9:50:4a:70:f0:68:4b:52:cd:5b:cf:89:48:b2:b8:68:
bf:4e:d0:da:3a:51:83:ce:8c:dc:c6:e3:74:bd:85:b0:fd:8f:
fc:b3:40:6c:6b:24:1f:c4:2f:1a:64:6e:23:d3:e8:08:08:7a:
0e:ec:3b:92:8c:5a:04:53:dc:48:7e:f1:3b:ba:13:44:47:16:
09:9d:0c:46:71:79:0f:3c:b1:31:99:dc:f4:5b:36:0f:a6:fb:
47:85:44:a2:36:e5:16:16:07:5a:e4:cd:38:d6:b1:e9:58:6d:
d0:e3:d6:39:5d:f7:4e:34:d8:f6:2d:bc:46:d3:58:a2:53:1b:
ef:9f:b7:19
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYb93abbeXSiZVnvPRRgLpliMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMzIwMDcxMzI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YTZiMTlmMzRkOWNhMTJkMmJlYWY3NzM3ZmE4OWYyN2JmMzAwOGZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgpxW38udzgCGLIlESFlpGbOvPZYN
HrxO+XckSQiz8osNbTfiOYNMBxUSV4luRT/R7LhHdGB10m6XDXzGAunttMAyDH5x
9qIx7ZZCygoP8VGLQ/Y+qxwGk6xodxBFJPTQY+gPEVSOyyJzaB6Vze9qkK01Ivdv
usQAyn/6dJEhF8NkrTmiTb5QGbA9bUFZLuQeuEuGFFR4KK4+hNDPzFqN+AfUjw5R
Qvu/P2iCcBFPj30Tm8cnyK5QsJ6X11vulR8M+Lc0kC+z4DBE+pSgQBOZj+eVGpms
rdaJbh5iILVYMgf4AE7xAAF42ZH2A3OK3k69ulVYA2uoSUpbrH1RtSsHlwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFFprGfNNnKEtK+r3c3+onye/MAj8MB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvV21zWjgwMmNvUzByNnZkemY2aWZKNzh3Q1B3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAKhhAHCkxPg4VK7E/AjY
4U7goiliXoB8r1lw74IvXDOffyJ3/2qRMvnIhdjZWLmh+w0iPA5stGfWvn2SrKqY
hDbsgTNguJrEQNEVgXI6gvh69W7QsEd443o/cEHNkDlBoK4McRCxJ7MtQlZB/vkj
/lb3FoPqmeGVrsyZo2l7Wiu7yVBKcPBoS1LNW8+JSLK4aL9O0No6UYPOjNzG43S9
hbD9j/yzQGxrJB/ELxpkbiPT6AgIeg7sO5KMWgRT3Eh+8Tu6E0RHFgmdDEZxeQ88
sTGZ3PRbNg+m+0eFRKI25RYWB1rkzTjWselYbdDj1jld90402PYtvEbTWKJTG++f
txk=
-----END CERTIFICATE-----
Generated at Wed Apr 30 17:37:31 2025 by rpki-client