Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/WuySdvub7zAAUFCUSmTb-6L5a_Y.roa
File: WuySdvub7zAAUFCUSmTb-6L5a_Y.roa (raw, json)
Hash identifier: TF5uj30Qng3vTK5W3tMwtMXTzDy0MqHftq5ffysNJjM=
Subject key identifier: 5A:EC:92:76:FB:9B:EF:30:00:50:50:94:4A:64:DB:FB:A2:F9:6B:F6
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185D58677E3F5E212F21274F944BE8F4AA8
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/WuySdvub7zAAUFCUSmTb-6L5a_Y.roa
Signing time: Sat 21 Jan 2023 18:10:37 +0000
ROA not before: Sat 21 Jan 2023 18:10:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:d5:86:77:e3:f5:e2:12:f2:12:74:f9:44:be:8f:4a:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 21 18:10:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5aec9276fb9bef30005050944a64dbfba2f96bf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:4e:4c:1a:d4:83:bb:6b:99:4a:c6:bd:5d:b7:
c8:6f:b4:d8:89:2d:e2:59:31:2c:b1:10:6d:b2:15:
d7:6d:4c:93:75:7b:ea:f2:c1:9f:17:1b:bb:46:96:
ad:69:0b:57:4b:14:0d:09:49:0e:a0:8a:9f:cf:a8:
58:bf:18:42:f7:b5:3b:4e:26:ed:6b:b1:67:5f:1b:
af:f1:91:d2:7a:7a:f7:85:e8:19:97:9e:e7:1c:59:
e6:44:fd:e1:e3:e5:f2:cb:10:90:ae:78:89:03:70:
7c:3b:c6:a8:de:40:22:76:79:3c:3b:81:56:9a:c9:
82:a9:10:2b:30:bf:e7:28:a6:34:05:4c:89:4b:12:
c3:1f:83:c4:ce:c2:d8:3e:2c:e1:cf:54:0a:56:e8:
f3:06:cd:84:64:58:8c:9b:6c:f9:0f:96:12:1c:9f:
7a:7a:f6:0f:44:2e:f6:8e:9b:85:9e:58:91:af:ce:
84:77:9c:ef:0b:19:de:b5:f2:37:da:02:93:49:ae:
d9:54:de:bc:75:55:2d:53:8a:9f:6f:35:fa:10:64:
d3:d7:ea:f6:7d:3d:93:c4:6e:76:3f:69:99:ee:11:
85:b9:c5:4f:45:1d:38:e9:fc:ba:cc:c0:be:d0:fa:
66:2e:e7:d5:85:d7:c0:d5:c0:27:e2:c6:24:7f:26:
f9:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:EC:92:76:FB:9B:EF:30:00:50:50:94:4A:64:DB:FB:A2:F9:6B:F6
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/WuySdvub7zAAUFCUSmTb-6L5a_Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1e:07:d5:83:81:f9:4e:f8:a5:c5:f1:e8:60:40:ee:42:53:ea:
cd:06:22:c5:9a:d2:33:bb:9b:9e:7a:14:bf:d5:aa:89:39:15:
14:e6:51:fd:0d:64:17:d1:70:4f:86:7f:8f:9e:d4:a3:d9:9f:
31:1b:d9:c5:a5:d4:1e:af:6c:62:5c:10:25:1c:1a:24:01:da:
b0:92:32:e9:45:19:65:34:9e:a7:a4:09:a2:fb:9e:e1:d7:a5:
c4:09:5b:54:50:14:5a:af:e9:f3:7a:78:e0:53:ee:b3:7c:83:
1e:20:3a:f9:c5:b1:3b:f2:93:b5:4c:86:89:d6:73:7f:fb:77:
5f:83:99:16:4f:19:a4:bb:2a:c2:32:39:a4:7b:42:21:6c:1d:
a6:db:c8:d3:e1:c6:45:f2:1c:6a:d3:46:e2:a2:71:c2:f1:aa:
2a:24:6e:4b:95:06:06:86:4e:7e:98:2e:84:ee:2d:6f:09:73:
18:1d:0e:e7:c3:7c:7a:1d:fa:f3:f2:9d:03:37:13:24:4d:81:
9f:ca:e9:2b:e8:bd:bd:99:8a:5e:96:26:21:2d:23:ee:ad:de:
c0:c4:52:6d:68:66:35:54:29:5d:d8:61:0a:1c:0a:29:cf:69:
40:b2:0c:9f:93:b3:f1:c3:5e:3c:05:b7:25:68:7b:34:9c:e2:
32:a4:37:a9
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYXVhnfj9eIS8hJ0+US+j0qoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMTIxMTgxMDM3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YWVjOTI3NmZiOWJlZjMwMDA1MDUwOTQ0YTY0ZGJmYmEyZjk2YmY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjE5MGtSDu2uZSsa9XbfIb7TYiS3i
WTEssRBtshXXbUyTdXvq8sGfFxu7RpataQtXSxQNCUkOoIqfz6hYvxhC97U7Tibt
a7FnXxuv8ZHSenr3hegZl57nHFnmRP3h4+XyyxCQrniJA3B8O8ao3kAidnk8O4FW
msmCqRArML/nKKY0BUyJSxLDH4PEzsLYPizhz1QKVujzBs2EZFiMm2z5D5YSHJ96
evYPRC72jpuFnliRr86Ed5zvCxnetfI32gKTSa7ZVN68dVUtU4qfbzX6EGTT1+r2
fT2TxG52P2mZ7hGFucVPRR046fy6zMC+0PpmLufVhdfA1cAn4sYkfyb5BQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFFrsknb7m+8wAFBQlEpk2/ui+Wv2MB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvV3V5U2R2dWI3ekFBVUZDVVNtVGItNkw1YV9ZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAB4H1YOB+U74pcXx6GBA
7kJT6s0GIsWa0jO7m556FL/Vqok5FRTmUf0NZBfRcE+Gf4+e1KPZnzEb2cWl1B6v
bGJcECUcGiQB2rCSMulFGWU0nqekCaL7nuHXpcQJW1RQFFqv6fN6eOBT7rN8gx4g
OvnFsTvyk7VMhonWc3/7d1+DmRZPGaS7KsIyOaR7QiFsHabbyNPhxkXyHGrTRuKi
ccLxqiokbkuVBgaGTn6YLoTuLW8JcxgdDufDfHod+vPynQM3EyRNgZ/K6Svovb2Z
il6WJiEtI+6t3sDEUm1oZjVUKV3YYQocCinPaUCyDJ+Ts/HDXjwFtyVoezSc4jKk
N6k=
-----END CERTIFICATE-----
Generated at Thu May 1 07:12:11 2025 by rpki-client