Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/WuaqaaLoUM-_DkyRYdu3rFavTjI.roa
File: WuaqaaLoUM-_DkyRYdu3rFavTjI.roa (raw, json)
Hash identifier: iHBEavlrZkBvetrYJ2VXGgKfgavTehX9hZs/szOjpsE=
Subject key identifier: 5A:E6:AA:69:A2:E8:50:CF:BF:0E:4C:91:61:DB:B7:AC:56:AF:4E:32
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 736C4FA2
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/WuaqaaLoUM-_DkyRYdu3rFavTjI.roa
Signing time: Fri 18 Mar 2022 04:07:32 +0000
ROA not before: Fri 18 Mar 2022 04:07:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:17f:87e3:2531/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1936478114 (0x736c4fa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 18 04:07:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5ae6aa69a2e850cfbf0e4c9161dbb7ac56af4e32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:99:1e:04:6c:e0:f9:f4:1d:1b:fa:5a:5f:74:
2b:c1:d5:66:85:1c:4b:af:a5:79:3f:f4:69:b9:07:
98:6d:17:0a:01:0d:cb:12:09:63:45:ba:2f:ef:af:
e5:82:c8:8b:50:49:1f:16:5b:e7:e2:f9:a3:78:29:
4d:14:b0:ea:62:f5:da:2e:dc:1f:ed:fb:88:e1:65:
cf:7a:9b:7a:16:bf:0e:a9:94:f6:13:f6:7c:76:e9:
f4:4e:b6:5d:11:5b:f9:d4:2d:f9:51:06:a1:95:aa:
3b:c3:f8:16:8a:95:47:00:95:33:1f:5c:e2:fe:68:
9b:20:64:8d:84:67:ea:71:28:96:01:b8:6e:c3:71:
5b:61:d6:78:d9:ff:eb:6e:b2:21:29:6a:21:21:66:
d0:5e:93:bf:13:d6:0d:0f:ed:ea:88:f8:08:c9:4f:
55:3e:aa:d0:af:0c:7f:99:24:e2:c8:47:7a:f5:7a:
3e:0c:d1:d7:34:b1:18:6e:a0:bc:08:09:29:e1:60:
af:12:72:6e:5f:20:8a:b5:62:5d:a0:37:e0:b9:f9:
e0:4d:87:b9:3b:7e:01:0e:80:28:c1:8c:f2:0f:84:
54:c2:90:ff:c3:21:bd:89:12:3d:e5:6a:46:0c:97:
02:44:3a:1f:75:b4:b1:d4:63:78:05:e2:ed:3a:30:
96:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:E6:AA:69:A2:E8:50:CF:BF:0E:4C:91:61:DB:B7:AC:56:AF:4E:32
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/WuaqaaLoUM-_DkyRYdu3rFavTjI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4d:d9:16:4b:75:0d:0c:07:a4:c9:eb:7e:da:2c:4a:eb:56:70:
08:95:9d:54:47:19:fc:47:4e:ed:4f:7d:02:36:81:56:03:3a:
1c:4d:66:90:76:58:5b:b9:77:01:37:e6:03:ff:db:8d:28:15:
59:1b:b8:f1:d2:5d:62:44:b8:53:42:7d:45:1d:18:80:35:ac:
db:86:27:b5:6b:28:fd:66:50:9e:63:93:29:61:e8:12:3f:8e:
0a:d8:f3:af:8c:23:bb:35:f6:3d:5a:2b:65:ab:1b:f2:ab:df:
3c:c9:e8:42:fd:ca:5b:5c:d8:e1:03:87:61:fa:ba:b6:c9:d9:
31:18:46:25:04:58:f2:e0:d8:88:3c:2e:44:6c:25:69:89:30:
cb:1f:cb:07:1b:c6:6b:e9:42:48:65:27:97:be:87:bd:9e:68:
a3:18:b5:a7:27:de:e7:fa:da:ff:32:40:57:94:49:b8:db:b8:
ad:36:88:f6:66:26:62:39:9e:23:59:8f:d6:b9:f0:0a:85:96:
91:a3:18:81:6d:4c:7c:9d:da:b0:d6:77:82:44:34:13:1a:ce:
64:bb:81:69:1f:f3:eb:2f:b6:9b:93:a9:46:d6:cf:bd:d2:eb:
0d:5b:d7:22:c0:7c:0f:a9:f7:33:6f:cd:8c:7e:b8:23:7c:d0:
e5:bc:b0:fc
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIEc2xPojANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
MjA0N2JlMTViMjc1OTAyZGNmNjE3ZGMzZDBlMTZkYzFmMzA4MDIyMB4XDTIyMDMx
ODA0MDczMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNWFlNmFhNjlhMmU4
NTBjZmJmMGU0YzkxNjFkYmI3YWM1NmFmNGUzMjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALuZHgRs4Pn0HRv6Wl90K8HVZoUcS6+leT/0abkHmG0XCgEN
yxIJY0W6L++v5YLIi1BJHxZb5+L5o3gpTRSw6mL12i7cH+37iOFlz3qbeha/DqmU
9hP2fHbp9E62XRFb+dQt+VEGoZWqO8P4FoqVRwCVMx9c4v5omyBkjYRn6nEolgG4
bsNxW2HWeNn/626yISlqISFm0F6TvxPWDQ/t6oj4CMlPVT6q0K8Mf5kk4shHevV6
PgzR1zSxGG6gvAgJKeFgrxJybl8girViXaA34Ln54E2HuTt+AQ6AKMGM8g+EVMKQ
/8MhvYkSPeVqRgyXAkQ6H3W0sdRjeAXi7TowlucCAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBRa5qppouhQz78OTJFh27esVq9OMjAfBgNVHSMEGDAWgBRyBHvhWydZAtz2
F9w9DhbcHzCAIjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2NnUjc0VnNuV1FMYzloZmNQUTRXM0I4d2dDSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNWUvNzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8x
L1d1YXFhYUxvVU0tX0RreVJZZHUzckZhdlRqSS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWUv
Nzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8xL2NnUjc0VnNuV1FM
YzloZmNQUTRXM0I4d2dDSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEA8EAGDAPBAIAAjAJAwcAIAEGfABk
MA0GCSqGSIb3DQEBCwUAA4IBAQBN2RZLdQ0MB6TJ637aLErrVnAIlZ1URxn8R07t
T30CNoFWAzocTWaQdlhbuXcBN+YD/9uNKBVZG7jx0l1iRLhTQn1FHRiANazbhie1
ayj9ZlCeY5MpYegSP44K2POvjCO7NfY9Witlqxvyq988yehC/cpbXNjhA4dh+rq2
ydkxGEYlBFjy4NiIPC5EbCVpiTDLH8sHG8Zr6UJIZSeXvoe9nmijGLWnJ97n+tr/
MkBXlEm427itNoj2ZiZiOZ4jWY/WufAKhZaRoxiBbUx8ndqw1neCRDQTGs5ku4Fp
H/PrL7abk6lG1s+90usNW9ciwHwPqfczb82MfrgjfNDlvLD8
-----END CERTIFICATE-----
Generated at Thu May 1 18:45:00 2025 by rpki-client