Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/w3wdJXPYNHwBMyszSAZRGhklbBM.roa
File: w3wdJXPYNHwBMyszSAZRGhklbBM.roa (raw, json)
Hash identifier: m4q27efZENnZP8M3g+SSpr3obTqyN9n3YdptoPH36Lo=
Subject key identifier: C3:7C:1D:25:73:D8:34:7C:01:33:2B:33:48:06:51:1A:19:25:6C:13
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A1726F8BE1CFF317F741F5938B03453C1
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/w3wdJXPYNHwBMyszSAZRGhklbBM.roa
Signing time: Mon 21 Aug 2023 08:12:24 +0000
ROA not before: Mon 21 Aug 2023 08:12:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:17:26:f8:be:1c:ff:31:7f:74:1f:59:38:b0:34:53:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 21 08:12:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c37c1d2573d8347c01332b334806511a19256c13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f9:32:f1:93:c8:05:c8:80:df:04:90:55:4c:
c2:04:81:10:3f:08:ee:4f:c5:93:f3:e0:1e:5d:fa:
6e:24:8d:8b:15:ac:f2:8c:50:bc:d3:0c:35:7f:a7:
5a:a1:ed:67:dd:f2:f1:7a:2d:6e:e5:1f:03:87:2c:
44:97:af:ca:ec:b1:5c:de:73:71:78:76:f6:4f:3c:
5b:f4:86:ab:56:c2:c9:93:b2:25:ea:d7:c6:c2:e1:
ff:69:84:cc:a4:75:c8:91:76:c4:78:56:07:cd:4b:
37:b5:f8:ed:90:f5:f8:ed:e3:45:cb:e8:a0:29:8b:
3a:85:52:69:be:a7:c1:6d:e2:ed:3d:7e:f3:fa:ce:
d8:5c:75:ec:2c:b5:c0:66:d0:7d:98:a7:8c:81:6a:
c7:7a:65:eb:3b:a4:b6:aa:26:51:76:b8:4d:74:1b:
ce:f4:8a:63:81:43:8e:d9:53:ec:52:ef:35:e3:02:
56:7a:b7:09:e2:88:6f:32:c0:58:4f:b0:c9:57:55:
22:17:86:a9:c5:4d:c5:c2:34:3f:f2:aa:b7:73:a6:
b6:fe:8a:b0:26:26:a4:c3:a1:68:05:94:b1:a5:d3:
8f:78:f7:e2:fe:09:86:59:67:29:58:08:91:00:b0:
8c:37:f2:a9:ac:41:da:a5:ad:6d:44:ff:e5:11:5a:
43:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:7C:1D:25:73:D8:34:7C:01:33:2B:33:48:06:51:1A:19:25:6C:13
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/w3wdJXPYNHwBMyszSAZRGhklbBM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
aa:27:e0:c7:bd:32:2a:5a:23:ed:9f:f3:c7:82:2f:8c:e7:cb:
89:f9:70:f2:59:08:42:8d:43:35:9b:8d:ef:1f:12:b4:2c:89:
37:45:7f:fd:3e:f7:4d:2b:8c:77:0d:58:fc:68:21:27:d7:11:
e8:e3:43:e7:7c:55:b4:c0:3b:a0:9d:33:e1:1c:97:80:b6:41:
2b:ce:92:bc:56:63:bc:ba:a4:64:49:61:63:99:03:88:af:42:
98:7b:62:be:2c:70:2d:1c:a5:c6:80:64:78:df:b0:a1:37:3c:
8e:d2:f8:7e:c3:e5:7e:6f:20:e5:f8:b3:ac:33:5c:ec:8f:d6:
aa:56:f3:af:eb:31:03:cc:a6:80:22:03:67:8a:68:b4:60:ed:
9e:97:42:00:6c:f4:39:a7:36:79:da:85:ca:6c:ce:5d:85:d9:
c7:67:d1:b2:d0:7e:7d:df:03:5d:ed:6f:ad:42:b0:84:0f:c6:
70:18:60:53:d1:92:04:40:b3:8b:d4:c8:25:2b:2a:78:cb:43:
c4:64:b9:41:f1:4b:cc:5e:37:11:c8:d4:d0:35:7e:af:2d:39:
79:e8:ae:cf:fc:0b:af:67:ab:35:08:de:c0:fe:7e:69:02:a8:
21:2c:19:79:18:a4:d7:db:82:01:3b:64:a0:08:71:6c:6e:f6:
ca:ba:00:36
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYoXJvi+HP8xf3QfWTiwNFPBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwODIxMDgxMjI0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMzdjMWQyNTczZDgzNDdjMDEzMzJiMzM0ODA2NTExYTE5MjU2YzEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArfky8ZPIBciA3wSQVUzCBIEQPwju
T8WT8+AeXfpuJI2LFazyjFC80ww1f6daoe1n3fLxei1u5R8DhyxEl6/K7LFc3nNx
eHb2Tzxb9IarVsLJk7Il6tfGwuH/aYTMpHXIkXbEeFYHzUs3tfjtkPX47eNFy+ig
KYs6hVJpvqfBbeLtPX7z+s7YXHXsLLXAZtB9mKeMgWrHemXrO6S2qiZRdrhNdBvO
9IpjgUOO2VPsUu814wJWercJ4ohvMsBYT7DJV1UiF4apxU3FwjQ/8qq3c6a2/oqw
Jiakw6FoBZSxpdOPePfi/gmGWWcpWAiRALCMN/KprEHapa1tRP/lEVpDsQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFMN8HSVz2DR8ATMrM0gGURoZJWwTMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvdzN3ZEpYUFlOSHdCTXlzelNBWlJHaGtsYkJNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAKon4Me9MipaI+2f88eC
L4zny4n5cPJZCEKNQzWbje8fErQsiTdFf/0+900rjHcNWPxoISfXEejjQ+d8VbTA
O6CdM+Ecl4C2QSvOkrxWY7y6pGRJYWOZA4ivQph7Yr4scC0cpcaAZHjfsKE3PI7S
+H7D5X5vIOX4s6wzXOyP1qpW86/rMQPMpoAiA2eKaLRg7Z6XQgBs9DmnNnnahcps
zl2F2cdn0bLQfn3fA13tb61CsIQPxnAYYFPRkgRAs4vUyCUrKnjLQ8RkuUHxS8xe
NxHI1NA1fq8tOXnors/8C69nqzUI3sD+fmkCqCEsGXkYpNfbggE7ZKAIcWxu9sq6
ADY=
-----END CERTIFICATE-----
Generated at Wed Apr 30 17:40:57 2025 by rpki-client