Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Wrbe3q8MQxSTMVwQajulvx9Dzn8.roa
File: Wrbe3q8MQxSTMVwQajulvx9Dzn8.roa (raw, json)
Hash identifier: IFM4RNqU3HB8pVxVS6TtnpaeyHO8GLvXQYyW6PLVhnE=
Subject key identifier: 5A:B6:DE:DE:AF:0C:43:14:93:31:5C:10:6A:3B:A5:BF:1F:43:CE:7F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186D8B74297E4B636EF332FFF93257EB5CB
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Wrbe3q8MQxSTMVwQajulvx9Dzn8.roa
Signing time: Mon 13 Mar 2023 02:05:34 +0000
ROA not before: Mon 13 Mar 2023 02:05:34 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:d8b6:827d/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:d8:b7:42:97:e4:b6:36:ef:33:2f:ff:93:25:7e:b5:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 13 02:05:34 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5ab6dedeaf0c431493315c106a3ba5bf1f43ce7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:72:95:cc:6d:a6:d8:9e:b2:86:67:f4:d7:5f:
b2:82:39:30:77:14:47:ff:dc:e2:47:e0:ff:51:90:
68:50:ed:4c:e3:10:ca:c2:f1:31:fc:f4:d8:0a:f8:
de:6d:a0:42:e7:bf:ee:02:5d:d5:bc:76:5e:c2:92:
f2:f9:69:65:14:38:61:cc:d2:8b:78:77:5d:3a:7d:
aa:10:43:31:26:e0:92:a9:2c:3b:c1:45:16:dc:f5:
d7:bf:7b:f3:e7:72:8e:4a:ff:04:d4:ad:fe:95:74:
ec:78:48:00:5c:33:d1:30:c9:68:93:70:35:a1:90:
e3:87:56:53:fd:7c:f1:a7:c1:28:10:2e:d0:6a:b1:
35:a4:43:b6:a4:f0:7b:9d:2a:96:b0:56:23:ee:2e:
ec:aa:29:35:f3:5c:72:35:22:bc:19:31:47:16:8f:
21:b5:7f:08:8d:8d:bd:1d:13:25:6e:75:b4:ac:ee:
57:c0:ea:88:40:6b:82:29:20:ad:59:41:84:3a:1f:
e0:c5:d3:81:37:d5:b7:5f:14:0f:ad:23:6f:da:87:
fb:b5:65:59:9a:2e:4e:26:37:6d:dc:23:55:7c:19:
f9:7d:0d:56:b9:c4:b0:92:30:3f:2f:2b:e7:21:ea:
78:70:54:ca:d4:59:01:f8:56:f0:bf:60:4a:17:fd:
aa:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:B6:DE:DE:AF:0C:43:14:93:31:5C:10:6A:3B:A5:BF:1F:43:CE:7F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Wrbe3q8MQxSTMVwQajulvx9Dzn8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
75:78:29:13:86:bc:5e:49:7a:e3:66:8c:f6:af:99:30:08:59:
d7:f1:4a:41:5f:1e:a1:b5:d5:00:3e:88:0d:0e:34:7c:db:63:
8e:87:3f:87:e4:5c:b7:a2:02:a9:d7:56:15:72:e4:bb:9a:b1:
56:71:14:af:bb:dd:91:e4:f7:86:57:f5:7c:f2:4f:32:02:8c:
90:84:b0:b9:45:7b:62:18:36:2f:bc:b8:bc:5f:59:eb:76:a0:
67:22:0e:a8:6d:f0:c1:99:5b:e9:93:d7:21:fb:7f:d4:fb:92:
23:26:ef:26:34:8b:97:9c:bc:b7:fb:c6:e2:68:69:3d:3e:1b:
b9:22:bc:b3:4f:6b:d8:e8:ea:28:95:4b:3c:52:ca:3d:35:13:
4b:2e:83:e2:fb:41:fe:fd:0b:d2:7b:ec:7a:85:9d:88:f2:d2:
cc:7c:ef:32:8c:f8:01:7b:ed:dd:1b:b1:3e:8f:ea:1d:82:b4:
1c:b5:1a:1d:61:22:00:16:f9:c0:a0:aa:63:5a:67:51:3d:ae:
a4:cd:06:0b:e3:ba:92:e3:bc:e8:06:25:ea:cb:38:86:7a:81:
0f:67:9e:aa:be:8b:35:3e:80:d2:eb:70:a3:2a:52:f3:44:36:
c8:80:d6:9f:57:5e:97:45:65:78:b2:50:a4:64:0d:76:12:e3:
4c:7e:d5:8d
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYbYt0KX5LY27zMv/5MlfrXLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMzEzMDIwNTM0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YWI2ZGVkZWFmMGM0MzE0OTMzMTVjMTA2YTNiYTViZjFmNDNjZTdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0XKVzG2m2J6yhmf011+ygjkwdxRH
/9ziR+D/UZBoUO1M4xDKwvEx/PTYCvjebaBC57/uAl3VvHZewpLy+WllFDhhzNKL
eHddOn2qEEMxJuCSqSw7wUUW3PXXv3vz53KOSv8E1K3+lXTseEgAXDPRMMlok3A1
oZDjh1ZT/Xzxp8EoEC7QarE1pEO2pPB7nSqWsFYj7i7sqik181xyNSK8GTFHFo8h
tX8IjY29HRMlbnW0rO5XwOqIQGuCKSCtWUGEOh/gxdOBN9W3XxQPrSNv2of7tWVZ
mi5OJjdt3CNVfBn5fQ1WucSwkjA/LyvnIep4cFTK1FkB+Fbwv2BKF/2qxwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFFq23t6vDEMUkzFcEGo7pb8fQ85/MB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvV3JiZTNxOE1ReFNUTVZ3UWFqdWx2eDlEem44LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAHV4KROGvF5JeuNmjPav
mTAIWdfxSkFfHqG11QA+iA0ONHzbY46HP4fkXLeiAqnXVhVy5LuasVZxFK+73ZHk
94ZX9XzyTzICjJCEsLlFe2IYNi+8uLxfWet2oGciDqht8MGZW+mT1yH7f9T7kiMm
7yY0i5ecvLf7xuJoaT0+G7kivLNPa9jo6iiVSzxSyj01E0sug+L7Qf79C9J77HqF
nYjy0sx87zKM+AF77d0bsT6P6h2CtBy1Gh1hIgAW+cCgqmNaZ1E9rqTNBgvjupLj
vOgGJerLOIZ6gQ9nnqq+izU+gNLrcKMqUvNENsiA1p9XXpdFZXiyUKRkDXYS40x+
1Y0=
-----END CERTIFICATE-----
Generated at Wed Apr 30 17:38:06 2025 by rpki-client