Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wDaDl_UQA2TI51R9qFkvNmLHoJY.roa
File: wDaDl_UQA2TI51R9qFkvNmLHoJY.roa (raw, json)
Hash identifier: TXcUa6dQISXHsrBYHMuIlEwoz/PjWhtDJ6JN+1hiM38=
Subject key identifier: C0:36:83:97:F5:10:03:64:C8:E7:54:7D:A8:59:2F:36:62:C7:A0:96
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A0A48E998968669B1683D4A0F02FF177B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wDaDl_UQA2TI51R9qFkvNmLHoJY.roa
Signing time: Fri 18 Aug 2023 20:14:25 +0000
ROA not before: Fri 18 Aug 2023 20:14:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:0a:48:e9:98:96:86:69:b1:68:3d:4a:0f:02:ff:17:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 18 20:14:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c0368397f5100364c8e7547da8592f3662c7a096
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:b2:f6:35:b2:8b:61:a4:69:13:ed:58:a1:0c:
9a:c0:2a:6b:16:de:b8:2d:c5:89:8c:d0:c9:40:a0:
02:44:d2:ad:1e:2b:70:4f:2f:97:5e:32:aa:2c:d4:
af:46:a7:4d:3e:d7:2e:33:ba:35:cb:33:3d:f6:a8:
51:de:7c:11:be:af:d3:e0:06:c2:d6:04:01:81:c8:
b0:5c:c6:39:48:e9:d4:b7:23:45:f9:b2:6b:1b:45:
ef:5d:d2:e1:04:ab:f9:44:a6:61:fb:7a:aa:83:e3:
d5:4a:be:1e:5d:72:8d:2f:9a:6d:3e:0a:ba:ee:46:
2d:11:1d:1f:e4:2b:82:7a:b6:fd:b3:3a:b5:7e:3f:
70:a7:98:e7:57:fd:c7:7e:a2:68:76:0b:1f:ac:19:
0b:c4:49:4d:5c:c1:0d:db:97:04:07:32:88:6e:92:
2d:f1:a5:06:89:2b:95:d6:f6:5f:96:63:9c:2a:cd:
c5:a2:7f:19:63:87:12:37:80:7d:8b:32:9c:69:2b:
2f:b1:7e:6d:c4:bc:d6:56:b8:56:a6:3f:f1:d4:94:
a3:f6:e3:39:96:4d:6c:41:54:7d:ca:67:e4:d8:95:
b6:2c:59:15:33:8f:7d:02:22:a1:d5:8d:1a:63:b3:
01:5c:20:63:4b:f8:8c:3e:d4:6b:d3:64:ef:b2:bc:
ab:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:36:83:97:F5:10:03:64:C8:E7:54:7D:A8:59:2F:36:62:C7:A0:96
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wDaDl_UQA2TI51R9qFkvNmLHoJY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
34:3e:be:e8:e8:c0:2f:92:1e:3a:28:b4:04:85:34:67:2d:38:
dc:d3:bf:26:3e:91:8e:02:47:38:73:5d:8b:b1:2f:8f:2d:ca:
e9:fc:c1:8b:e6:68:1d:12:06:af:da:b0:cd:c3:ca:5f:17:86:
9a:59:9f:a1:8b:9f:c5:71:fd:bc:e5:6c:ae:ce:cf:c2:e5:3b:
37:34:9c:ef:20:dd:9f:2c:f5:c7:aa:c8:49:19:d2:64:8c:44:
c5:71:4d:9c:03:4e:9f:5f:5a:a4:8c:c3:6a:39:20:64:64:03:
4b:c7:ad:4b:49:a6:47:45:00:8b:3d:23:4f:0f:70:a8:5d:28:
7f:2b:69:e6:44:5c:50:32:26:16:57:3f:97:b7:ac:ec:32:e9:
b1:f5:4b:92:16:a3:3f:81:aa:2d:4a:60:ef:bd:b4:81:79:0e:
a7:2c:a2:a3:81:a6:5e:51:ec:07:95:87:ca:ed:20:b1:84:6a:
fc:dc:f1:51:80:09:83:36:bc:c4:b6:a1:55:66:f3:5d:4f:01:
1f:50:07:6a:2a:a2:d6:e4:fc:cd:a9:e6:3e:4c:8c:25:d2:19:
10:bb:a2:e7:76:d2:ad:0a:0a:2a:8f:d9:1a:94:fe:a3:cb:db:
da:eb:eb:79:d8:5b:fb:1b:68:c6:53:ee:70:44:90:59:a1:c4:
3c:fb:be:fe
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYoKSOmYloZpsWg9Sg8C/xd7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwODE4MjAxNDI1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMDM2ODM5N2Y1MTAwMzY0YzhlNzU0N2RhODU5MmYzNjYyYzdhMDk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo7L2NbKLYaRpE+1YoQyawCprFt64
LcWJjNDJQKACRNKtHitwTy+XXjKqLNSvRqdNPtcuM7o1yzM99qhR3nwRvq/T4AbC
1gQBgciwXMY5SOnUtyNF+bJrG0XvXdLhBKv5RKZh+3qqg+PVSr4eXXKNL5ptPgq6
7kYtER0f5CuCerb9szq1fj9wp5jnV/3HfqJodgsfrBkLxElNXMEN25cEBzKIbpIt
8aUGiSuV1vZflmOcKs3Fon8ZY4cSN4B9izKcaSsvsX5txLzWVrhWpj/x1JSj9uM5
lk1sQVR9ymfk2JW2LFkVM499AiKh1Y0aY7MBXCBjS/iMPtRr02Tvsryr8wIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFMA2g5f1EANkyOdUfahZLzZix6CWMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvd0RhRGxfVVFBMlRJNTFSOXFGa3ZObUxIb0pZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBADQ+vujowC+SHjootASF
NGctONzTvyY+kY4CRzhzXYuxL48tyun8wYvmaB0SBq/asM3Dyl8XhppZn6GLn8Vx
/bzlbK7Oz8LlOzc0nO8g3Z8s9ceqyEkZ0mSMRMVxTZwDTp9fWqSMw2o5IGRkA0vH
rUtJpkdFAIs9I08PcKhdKH8raeZEXFAyJhZXP5e3rOwy6bH1S5IWoz+Bqi1KYO+9
tIF5DqcsoqOBpl5R7AeVh8rtILGEavzc8VGACYM2vMS2oVVm811PAR9QB2oqotbk
/M2p5j5MjCXSGRC7oud20q0KCiqP2RqU/qPL29rr63nYW/sbaMZT7nBEkFmhxDz7
vv4=
-----END CERTIFICATE-----
Generated at Wed Apr 30 21:24:51 2025 by rpki-client