Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wE_Z2q2x1evwIIRB2wCw1FyK2uk.roa
File: wE_Z2q2x1evwIIRB2wCw1FyK2uk.roa (raw, json)
Hash identifier: gLRgFE2fUIzsyOUKPCKVpZYX370MRIAiiVS8KxVMjyA=
Subject key identifier: C0:4F:D9:DA:AD:B1:D5:EB:F0:20:84:41:DB:00:B0:D4:5C:8A:DA:E9
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184EAFF737F534284E162A23D22DD570C12
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wE_Z2q2x1evwIIRB2wCw1FyK2uk.roa
Signing time: Wed 07 Dec 2022 05:12:00 +0000
ROA not before: Wed 07 Dec 2022 05:12:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:ea:ff:73:7f:53:42:84:e1:62:a2:3d:22:dd:57:0c:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 7 05:12:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c04fd9daadb1d5ebf0208441db00b0d45c8adae9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:97:a5:ef:63:42:29:f7:50:51:c9:13:ee:bc:
3a:af:3e:f5:6d:cc:ba:62:bf:c2:a9:c9:ea:d0:ab:
42:82:ca:70:e6:d7:63:70:b0:3c:d1:01:d3:81:68:
e0:30:16:60:01:c8:f0:64:bc:6f:ae:5c:5f:dd:5d:
31:1a:42:da:82:c4:6f:65:20:a6:12:9d:24:18:6c:
52:36:b9:90:92:53:ee:89:4f:99:06:61:8d:f7:75:
d4:e3:eb:d1:4d:7d:5a:0b:e7:49:d7:3f:9f:dd:d5:
f9:cc:f3:43:a5:7e:3e:55:a5:84:10:c2:fc:3b:c1:
95:64:d7:fe:0d:9f:da:6d:48:66:df:0b:f6:93:09:
b2:1c:22:de:06:e4:75:8e:b7:de:9e:e9:06:ed:1d:
1b:89:39:50:dd:94:eb:b3:05:09:82:fb:26:b0:83:
24:f0:5a:4d:db:46:5e:2c:49:a6:f3:d5:12:97:47:
1e:6e:7e:94:28:4f:5c:6f:f0:dc:9f:ac:52:80:c3:
5b:76:de:92:69:e0:57:5a:2c:c3:0a:d4:38:10:f2:
5e:d0:c6:ae:5f:5e:71:2d:3b:62:36:64:80:db:6a:
96:9a:ae:14:37:72:93:1a:cd:ff:e3:8b:6d:95:ae:
6c:f4:79:d5:30:80:b7:ca:87:1a:14:dd:ab:91:30:
2c:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:4F:D9:DA:AD:B1:D5:EB:F0:20:84:41:DB:00:B0:D4:5C:8A:DA:E9
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wE_Z2q2x1evwIIRB2wCw1FyK2uk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a2:36:f2:fd:d9:09:ba:9c:50:17:ba:0e:b1:d0:da:b1:80:7f:
ec:fc:1e:66:ab:30:30:ec:ac:12:7f:07:fc:8d:4a:31:3c:91:
ad:c5:30:78:1d:41:a1:2f:74:2e:3b:60:dd:de:17:f8:51:28:
54:2f:d1:50:fb:d5:14:4a:bb:7a:46:3c:61:63:71:6a:5f:74:
b2:3f:6a:c5:a9:e3:a3:99:d1:17:9c:41:4e:4b:cd:7a:29:3e:
a2:a5:c0:a3:7d:78:46:c9:14:9d:94:17:a4:a4:ec:84:b6:fd:
ca:eb:df:69:e5:cc:78:c9:c7:84:c6:ee:47:26:c1:8e:d8:e9:
0d:a8:42:73:28:9a:e6:bf:a9:ea:9d:f6:32:57:58:dc:1f:56:
1e:c9:6c:56:88:93:38:99:96:e3:9e:b6:71:ff:a8:76:ba:26:
3b:f6:38:d6:b3:45:6a:d2:cc:96:d9:7a:eb:ce:a1:0c:82:21:
9e:c7:23:ed:ad:7c:51:4d:af:fc:fb:e4:96:30:e2:de:93:b5:
df:b0:27:8d:14:c5:dc:31:1e:9b:02:62:f5:90:ab:78:52:5a:
81:56:8d:99:b3:24:7c:34:44:77:77:47:37:4c:99:1b:66:32:
9f:c6:ca:25:74:b7:98:a4:08:85:e3:55:a5:b7:48:d8:4b:6b:
57:04:79:03
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYTq/3N/U0KE4WKiPSLdVwwSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIxMjA3MDUxMjAwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMDRmZDlkYWFkYjFkNWViZjAyMDg0NDFkYjAwYjBkNDVjOGFkYWU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy5el72NCKfdQUckT7rw6rz71bcy6
Yr/Cqcnq0KtCgspw5tdjcLA80QHTgWjgMBZgAcjwZLxvrlxf3V0xGkLagsRvZSCm
Ep0kGGxSNrmQklPuiU+ZBmGN93XU4+vRTX1aC+dJ1z+f3dX5zPNDpX4+VaWEEML8
O8GVZNf+DZ/abUhm3wv2kwmyHCLeBuR1jrfenukG7R0biTlQ3ZTrswUJgvsmsIMk
8FpN20ZeLEmm89USl0cebn6UKE9cb/Dcn6xSgMNbdt6SaeBXWizDCtQ4EPJe0Mau
X15xLTtiNmSA22qWmq4UN3KTGs3/44ttla5s9HnVMIC3yocaFN2rkTAsPQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFMBP2dqtsdXr8CCEQdsAsNRcitrpMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvd0VfWjJxMngxZXZ3SUlSQjJ3Q3cxRnlLMnVrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAKI28v3ZCbqcUBe6DrHQ
2rGAf+z8HmarMDDsrBJ/B/yNSjE8ka3FMHgdQaEvdC47YN3eF/hRKFQv0VD71RRK
u3pGPGFjcWpfdLI/asWp46OZ0RecQU5LzXopPqKlwKN9eEbJFJ2UF6Sk7IS2/crr
32nlzHjJx4TG7kcmwY7Y6Q2oQnMomua/qeqd9jJXWNwfVh7JbFaIkziZluOetnH/
qHa6Jjv2ONazRWrSzJbZeuvOoQyCIZ7HI+2tfFFNr/z75JYw4t6Ttd+wJ40Uxdwx
HpsCYvWQq3hSWoFWjZmzJHw0RHd3RzdMmRtmMp/GyiV0t5ikCIXjVaW3SNhLa1cE
eQM=
-----END CERTIFICATE-----
Generated at Wed Apr 30 17:38:04 2025 by rpki-client