Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/pWV4-2Qr9-GUtk-kcLglQUWQkWs.roa
File: pWV4-2Qr9-GUtk-kcLglQUWQkWs.roa (raw, json)
Hash identifier: 3ChFG0cKkQKRNMGgKGK0upBEimXIkza6nEga2d84sHw=
Subject key identifier: A5:65:78:FB:64:2B:F7:E1:94:B6:4F:A4:70:B8:25:41:45:90:91:6B
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01867978AE45D9677614C3BB17EE39E18AFA
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/pWV4-2Qr9-GUtk-kcLglQUWQkWs.roa
Signing time: Wed 22 Feb 2023 14:13:17 +0000
ROA not before: Wed 22 Feb 2023 14:13:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:79:78:ae:45:d9:67:76:14:c3:bb:17:ee:39:e1:8a:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 22 14:13:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a56578fb642bf7e194b64fa470b825414590916b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:42:02:08:22:d7:db:1b:ff:da:91:0a:0c:bf:
2a:c1:46:13:f0:d4:d4:bb:db:1d:ce:05:49:8f:18:
00:0a:c8:fd:80:a3:4f:1b:05:2c:f1:17:e0:64:46:
e6:d4:c5:78:69:f4:f3:4b:62:47:03:b9:61:2b:06:
49:29:ac:54:43:5b:27:50:7b:98:30:3e:3b:49:60:
77:d9:af:d4:22:b5:4b:16:98:ec:0d:23:50:4d:59:
1f:2e:50:83:d8:d8:42:7d:0b:e0:69:bb:57:87:74:
17:6f:21:67:a4:21:b9:09:39:e0:f1:3c:64:6e:87:
09:da:a9:13:3e:df:fa:d2:ef:44:44:80:df:98:9d:
09:0c:52:bb:53:3a:67:59:02:5c:1e:bb:56:e1:c7:
fd:c5:45:ce:c1:43:5c:39:48:4c:cf:0a:4c:1d:3b:
04:7e:3d:c0:cb:8a:02:21:f6:df:a7:fa:ce:a2:62:
90:a1:9f:41:ec:49:0e:fe:2a:ee:af:f6:60:84:81:
1e:54:4e:56:6b:9b:ef:a7:18:44:f1:60:f4:79:56:
e3:19:e6:f1:f8:28:52:2f:6b:85:9d:a7:8e:1e:f7:
5e:c2:d3:11:4d:5e:f6:ae:98:2f:36:8c:e3:a2:77:
ef:d7:c6:a0:9b:2f:29:9b:89:10:e8:1b:5f:54:49:
88:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:65:78:FB:64:2B:F7:E1:94:B6:4F:A4:70:B8:25:41:45:90:91:6B
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/pWV4-2Qr9-GUtk-kcLglQUWQkWs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
55:1e:ae:43:a3:8f:71:48:25:59:08:08:12:70:02:d4:9d:da:
9d:3f:78:15:92:b7:eb:00:51:dc:a9:f3:c6:79:61:92:73:bf:
69:f1:5e:67:75:18:6f:15:29:b0:11:6e:0b:61:30:81:ec:f6:
88:5e:e3:f2:82:c7:b7:2a:68:c2:5e:b8:15:9a:38:14:54:27:
84:a3:db:e4:95:6e:fb:08:e1:21:55:39:5e:9c:5f:49:fe:d4:
b4:ba:32:33:99:b0:82:77:78:79:87:2c:62:b0:38:bc:f7:50:
28:94:09:98:29:02:39:5c:eb:7c:b3:14:01:57:ba:ce:5e:40:
43:10:c1:bb:83:ae:45:f4:6f:cb:a9:22:ed:6d:0d:c8:3e:36:
60:03:34:2c:55:03:9c:00:79:59:39:7d:b2:9c:ee:08:b6:02:
0c:fd:28:93:9b:61:70:56:52:a3:a7:49:c8:f9:8c:a2:78:5c:
c6:65:08:a0:84:e8:84:e8:43:99:18:44:c4:69:4d:af:eb:7d:
d7:37:57:67:d1:5a:63:69:61:8d:85:13:3a:6a:1a:c6:f7:11:
22:0f:9a:40:0e:8e:40:50:2e:7b:cc:49:19:a6:63:4f:44:d1:
0c:3c:d9:99:ea:b8:91:b9:ee:a5:1a:81:24:bd:2c:ba:ae:9f:
cd:d4:94:b4
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYZ5eK5F2Wd2FMO7F+454Yr6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMjIyMTQxMzE3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNTY1NzhmYjY0MmJmN2UxOTRiNjRmYTQ3MGI4MjU0MTQ1OTA5MTZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqEICCCLX2xv/2pEKDL8qwUYT8NTU
u9sdzgVJjxgACsj9gKNPGwUs8RfgZEbm1MV4afTzS2JHA7lhKwZJKaxUQ1snUHuY
MD47SWB32a/UIrVLFpjsDSNQTVkfLlCD2NhCfQvgabtXh3QXbyFnpCG5CTng8Txk
bocJ2qkTPt/60u9ERIDfmJ0JDFK7UzpnWQJcHrtW4cf9xUXOwUNcOUhMzwpMHTsE
fj3Ay4oCIfbfp/rOomKQoZ9B7EkO/irur/ZghIEeVE5Wa5vvpxhE8WD0eVbjGebx
+ChSL2uFnaeOHvdewtMRTV72rpgvNozjonfv18agmy8pm4kQ6BtfVEmIMQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFKVlePtkK/fhlLZPpHC4JUFFkJFrMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvcFdWNC0yUXI5LUdVdGsta2NMZ2xRVVdRa1dzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAFUerkOjj3FIJVkICBJw
AtSd2p0/eBWSt+sAUdyp88Z5YZJzv2nxXmd1GG8VKbARbgthMIHs9ohe4/KCx7cq
aMJeuBWaOBRUJ4Sj2+SVbvsI4SFVOV6cX0n+1LS6MjOZsIJ3eHmHLGKwOLz3UCiU
CZgpAjlc63yzFAFXus5eQEMQwbuDrkX0b8upIu1tDcg+NmADNCxVA5wAeVk5fbKc
7gi2Agz9KJObYXBWUqOnScj5jKJ4XMZlCKCE6IToQ5kYRMRpTa/rfdc3V2fRWmNp
YY2FEzpqGsb3ESIPmkAOjkBQLnvMSRmmY09E0Qw82ZnquJG57qUagSS9LLqun83U
lLQ=
-----END CERTIFICATE-----
Generated at Wed Apr 30 22:00:14 2025 by rpki-client