Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/WwFvPKwBCSscLhjsePJ6_I_syIU.roa
File: WwFvPKwBCSscLhjsePJ6_I_syIU.roa (raw, json)
Hash identifier: FbqBHD3wnf3Ggsi8KpHdHuKS9FohmFozpMDXEAOF+MY=
Subject key identifier: 5B:01:6F:3C:AC:01:09:2B:1C:2E:18:EC:78:F2:7A:FC:8F:EC:C8:85
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018667E0498D51FB2E4DEA234B20AEAEE86B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/WwFvPKwBCSscLhjsePJ6_I_syIU.roa
Signing time: Sun 19 Feb 2023 04:13:17 +0000
ROA not before: Sun 19 Feb 2023 04:13:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:67:e0:49:8d:51:fb:2e:4d:ea:23:4b:20:ae:ae:e8:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 19 04:13:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5b016f3cac01092b1c2e18ec78f27afc8fecc885
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:5a:a9:49:64:b0:7d:fc:36:c1:43:eb:c1:b5:
82:c3:c4:e0:5f:04:f9:fb:14:f3:be:09:10:a7:d5:
49:19:c4:ae:0f:19:bc:1d:31:32:65:1d:ae:86:2f:
55:ce:ec:8d:4b:16:48:a2:bd:8e:e6:91:8d:a3:7c:
0f:8f:9b:0f:14:27:ab:38:06:e8:93:7b:1c:21:cc:
ae:05:e5:4d:c4:56:5f:c3:44:e0:1e:dd:4c:09:82:
20:37:88:da:d9:2b:64:ce:d3:62:2b:72:98:1b:18:
e9:db:62:b3:f9:7a:eb:84:47:7c:38:c3:9b:15:1d:
b5:09:8e:ed:be:9f:6e:c2:5f:79:ad:e0:66:e9:9d:
33:74:bd:cd:ea:1b:43:32:d0:40:02:d6:5f:37:f4:
f8:b6:90:2b:9c:95:da:62:2d:39:29:5b:fd:d1:d3:
24:4d:99:88:62:e8:d0:77:83:f1:1f:b4:41:e5:b5:
1e:33:1c:6a:0b:5d:f2:c9:d8:8c:d7:bd:b4:05:5a:
3c:1d:a3:e2:ff:ea:2b:a7:67:b3:9c:42:a7:b9:80:
34:65:76:df:e6:69:de:0e:f7:2d:df:00:21:89:cb:
f7:d0:a4:8b:52:e3:f0:17:33:ed:04:a5:2f:d3:c2:
8c:20:04:ce:b3:45:72:26:7e:b0:2e:52:d6:21:ed:
11:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:01:6F:3C:AC:01:09:2B:1C:2E:18:EC:78:F2:7A:FC:8F:EC:C8:85
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/WwFvPKwBCSscLhjsePJ6_I_syIU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7e:cb:41:1f:e7:f1:5f:a2:3d:59:56:8b:c3:6d:c9:9a:2f:6b:
1d:88:44:34:f5:a5:ac:d1:8d:c6:97:1e:8c:35:34:31:cf:33:
37:77:62:59:b1:62:dd:5a:58:00:11:b9:5b:73:a1:e3:0d:3d:
a2:5b:bb:6b:79:d2:05:16:9b:d8:b1:06:85:b9:8e:b6:19:2e:
a2:b4:ea:d8:b0:52:5f:64:0a:13:6c:17:2a:90:ea:36:4c:46:
f1:18:30:83:cd:7e:a1:a6:eb:d8:a0:6e:a3:e1:76:ea:ce:39:
d7:ab:79:91:31:a0:90:a4:a7:2e:38:c7:23:41:47:9f:41:d1:
be:22:92:b6:cb:52:27:df:16:7c:f8:b7:21:b4:03:51:b3:ae:
17:54:c1:98:a8:a3:7c:d4:d4:c0:e5:d3:ca:ec:0c:c9:14:f7:
c2:7c:d1:bd:e2:89:cc:83:d1:1e:7b:f7:bc:06:f0:70:21:e4:
d8:de:85:29:96:91:85:24:21:ce:98:43:cb:e4:4b:8f:e9:cd:
2b:69:f7:14:c6:b0:f7:a4:26:95:c4:4e:92:c8:3d:0c:95:bc:
a5:60:ac:3a:8a:56:ce:e2:41:76:c3:04:e2:8d:e4:74:22:7e:
a9:33:0a:c1:6c:0e:67:65:a8:0e:d4:be:c7:31:b6:5d:aa:cf:
27:44:d5:98
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYZn4EmNUfsuTeojSyCuruhrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMjE5MDQxMzE3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YjAxNmYzY2FjMDEwOTJiMWMyZTE4ZWM3OGYyN2FmYzhmZWNjODg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlVqpSWSwffw2wUPrwbWCw8TgXwT5
+xTzvgkQp9VJGcSuDxm8HTEyZR2uhi9VzuyNSxZIor2O5pGNo3wPj5sPFCerOAbo
k3scIcyuBeVNxFZfw0TgHt1MCYIgN4ja2StkztNiK3KYGxjp22Kz+XrrhEd8OMOb
FR21CY7tvp9uwl95reBm6Z0zdL3N6htDMtBAAtZfN/T4tpArnJXaYi05KVv90dMk
TZmIYujQd4PxH7RB5bUeMxxqC13yydiM1720BVo8HaPi/+orp2eznEKnuYA0ZXbf
5mneDvct3wAhicv30KSLUuPwFzPtBKUv08KMIATOs0VyJn6wLlLWIe0RtQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFFsBbzysAQkrHC4Y7HjyevyP7MiFMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvV3dGdlBLd0JDU3NjTGhqc2VQSjZfSV9zeUlVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAH7LQR/n8V+iPVlWi8Nt
yZovax2IRDT1pazRjcaXHow1NDHPMzd3YlmxYt1aWAARuVtzoeMNPaJbu2t50gUW
m9ixBoW5jrYZLqK06tiwUl9kChNsFyqQ6jZMRvEYMIPNfqGm69igbqPhdurOOder
eZExoJCkpy44xyNBR59B0b4ikrbLUiffFnz4tyG0A1GzrhdUwZioo3zU1MDl08rs
DMkU98J80b3iicyD0R5797wG8HAh5NjehSmWkYUkIc6YQ8vkS4/pzStp9xTGsPek
JpXETpLIPQyVvKVgrDqKVs7iQXbDBOKN5HQifqkzCsFsDmdlqA7Uvscxtl2qzydE
1Zg=
-----END CERTIFICATE-----
Generated at Thu May 1 18:49:15 2025 by rpki-client