Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/w-5YMO4IRC4xLItRe4CQ_Y8sTh0.roa
File: w-5YMO4IRC4xLItRe4CQ_Y8sTh0.roa (raw, json)
Hash identifier: 5YFrYTQTYzBvcPODbv3dGff2VRKdX1rCg2nOhnNW8rw=
Subject key identifier: C3:EE:58:30:EE:08:44:2E:31:2C:8B:51:7B:80:90:FD:8F:2C:4E:1D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 8C7D7813
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/w-5YMO4IRC4xLItRe4CQ_Y8sTh0.roa
Signing time: Mon 13 Jun 2022 22:09:44 +0000
ROA not before: Mon 13 Jun 2022 22:09:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:181:56ba:5b78/128 maxlen: 128
2001:67c:64:ffff:0:181:22f:7a99/128 maxlen: 128
2001:67c:64:ffff:0:181:477e:58d8/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2357032979 (0x8c7d7813)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 13 22:09:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c3ee5830ee08442e312c8b517b8090fd8f2c4e1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:cd:b5:81:be:54:65:0f:2d:68:f8:91:3d:37:
a1:f2:b5:ad:17:2f:da:4c:c9:51:6b:1c:f9:79:85:
19:cb:4a:57:9e:19:6e:5f:43:28:26:6a:cd:f1:04:
b7:69:c7:c8:69:9d:8a:e8:77:c0:a6:fd:41:5a:6c:
f8:e0:0e:cd:75:a4:ac:51:b2:fe:52:0b:6a:41:0a:
b6:64:04:86:a6:ee:e8:52:2c:1e:9e:aa:c4:01:70:
fa:ab:98:79:49:85:6b:95:8e:36:93:80:02:1c:ef:
dd:ec:d7:56:c1:b4:c1:3a:27:3d:4c:a5:3e:dd:34:
85:a9:d0:fa:da:b0:30:20:b4:bf:37:ed:41:28:64:
14:10:b0:60:cd:d4:e5:2c:d5:53:8d:ef:1c:76:3c:
5d:53:5c:38:88:0b:35:bb:76:2b:9c:0c:47:c8:d4:
85:e7:f7:e5:50:68:c9:aa:62:1c:ff:fb:b6:19:77:
b7:75:34:92:13:a9:7c:dd:41:c8:6b:6c:28:84:57:
dc:45:f9:9e:bb:1d:42:0a:54:c4:35:1d:de:43:83:
97:a1:a1:22:41:eb:02:9b:10:01:15:13:29:10:bb:
77:7a:85:87:9d:d5:4f:00:1c:cb:07:7d:c4:d1:08:
9b:f0:69:29:84:37:43:9a:8f:02:4b:55:46:a7:08:
bf:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:EE:58:30:EE:08:44:2E:31:2C:8B:51:7B:80:90:FD:8F:2C:4E:1D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/w-5YMO4IRC4xLItRe4CQ_Y8sTh0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9b:05:be:94:3a:20:2d:c4:64:4e:19:91:84:97:9b:72:45:18:
a9:3f:7e:71:ad:17:53:af:7f:05:d2:50:8f:9e:4d:49:32:eb:
25:17:99:59:74:bf:95:e1:80:97:31:fc:64:71:fe:94:04:58:
5d:5d:f0:0c:fe:f7:10:6b:42:5d:a9:f5:8f:25:7e:83:28:8d:
ae:25:1d:b8:9a:d1:05:fe:26:25:ac:6a:4a:c5:b2:18:1e:cb:
d8:f5:7b:05:4e:c7:38:32:5e:9c:b4:92:61:2a:ec:87:e9:0b:
6c:6a:5f:b4:ff:68:30:6d:da:a7:13:d5:93:fb:ce:9d:57:ca:
b9:ad:3e:2d:e6:3c:a7:f9:a8:25:d6:4e:32:72:a9:f4:45:c1:
f3:65:16:14:55:4c:1b:49:45:46:8c:7a:a8:a9:12:95:32:c3:
b2:da:48:42:75:b6:1a:5e:3c:4e:0d:39:53:2a:ef:62:9d:84:
6b:58:c4:7f:b1:23:5b:a3:cd:77:85:d6:5c:62:ee:97:cc:77:
ab:4c:4a:62:f9:44:f5:8e:8b:21:65:51:f8:93:13:db:de:6b:
5f:ae:43:79:1d:72:7f:37:70:01:cb:b2:d9:96:b3:04:4f:3b:
bf:86:ea:f2:90:80:8b:f4:5d:9d:6e:9a:7f:e3:54:2f:75:cd:
7e:4d:11:39
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgIFAIx9eBMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMo
NzIwNDdiZTE1YjI3NTkwMmRjZjYxN2RjM2QwZTE2ZGMxZjMwODAyMjAeFw0yMjA2
MTMyMjA5NDRaFw0yMzA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKGMzZWU1ODMwZWUw
ODQ0MmUzMTJjOGI1MTdiODA5MGZkOGYyYzRlMWQwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDEzbWBvlRlDy1o+JE9N6Hyta0XL9pMyVFrHPl5hRnLSlee
GW5fQygmas3xBLdpx8hpnYrod8Cm/UFabPjgDs11pKxRsv5SC2pBCrZkBIam7uhS
LB6eqsQBcPqrmHlJhWuVjjaTgAIc793s11bBtME6Jz1MpT7dNIWp0PrasDAgtL83
7UEoZBQQsGDN1OUs1VON7xx2PF1TXDiICzW7diucDEfI1IXn9+VQaMmqYhz/+7YZ
d7d1NJITqXzdQchrbCiEV9xF+Z67HUIKVMQ1Hd5Dg5ehoSJB6wKbEAEVEykQu3d6
hYed1U8AHMsHfcTRCJvwaSmEN0OajwJLVUanCL9DAgMBAAGjggIaMIICFjAdBgNV
HQ4EFgQUw+5YMO4IRC4xLItRe4CQ/Y8sTh0wHwYDVR0jBBgwFoAUcgR74VsnWQLc
9hfcPQ4W3B8wgCIwDgYDVR0PAQH/BAQDAgeAMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVM
VC9jZ1I3NFZzbldRTGM5aGZjUFE0VzNCOHdnQ0kuY2VyMIGNBggrBgEFBQcBCwSB
gDB+MHwGCCsGAQUFBzALhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9ERUZBVUxULzVlLzc5ODQ0Ny0yMWY0LTQ1YWItOTlkYy0xYWJlM2FjMTBhYTYv
MS93LTVZTU80SVJDNHhMSXRSZTRDUV9ZOHNUaDAucm9hMIGBBgNVHR8EejB4MHag
dKByhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVl
Lzc5ODQ0Ny0yMWY0LTQ1YWItOTlkYy0xYWJlM2FjMTBhYTYvMS9jZ1I3NFZzbldR
TGM5aGZjUFE0VzNCOHdnQ0kuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
MAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYDBAPBABgwDwQCAAIwCQMHACABBnwA
ZDANBgkqhkiG9w0BAQsFAAOCAQEAmwW+lDogLcRkThmRhJebckUYqT9+ca0XU69/
BdJQj55NSTLrJReZWXS/leGAlzH8ZHH+lARYXV3wDP73EGtCXan1jyV+gyiNriUd
uJrRBf4mJaxqSsWyGB7L2PV7BU7HODJenLSSYSrsh+kLbGpftP9oMG3apxPVk/vO
nVfKua0+LeY8p/moJdZOMnKp9EXB82UWFFVMG0lFRox6qKkSlTLDstpIQnW2Gl48
Tg05UyrvYp2Ea1jEf7EjW6PNd4XWXGLul8x3q0xKYvlE9Y6LIWVR+JMT295rX65D
eR1yfzdwAcuy2ZazBE87v4bq8pCAi/RdnW6af+NUL3XNfk0ROQ==
-----END CERTIFICATE-----
Generated at Wed Apr 30 19:57:30 2025 by rpki-client