Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wH028zBbKVZF5LbbGtApcCiRhbA.roa
File: wH028zBbKVZF5LbbGtApcCiRhbA.roa (raw, json)
Hash identifier: n/P8BmKfPHkhYTr3Dwu7Vygl50+uRu+xkhVbmTRj4Y8=
Subject key identifier: C0:7D:36:F3:30:5B:29:56:45:E4:B6:DB:1A:D0:29:70:28:91:85:B0
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186082D009CABACEF0205430AC79B8277D3
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wH028zBbKVZF5LbbGtApcCiRhbA.roa
Signing time: Tue 31 Jan 2023 14:13:32 +0000
ROA not before: Tue 31 Jan 2023 14:13:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:08:2d:00:9c:ab:ac:ef:02:05:43:0a:c7:9b:82:77:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 31 14:13:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c07d36f3305b295645e4b6db1ad02970289185b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:dc:4f:ec:bd:52:75:7e:78:d7:70:d0:4c:64:
54:f6:f8:07:de:0b:4f:d6:53:37:0b:e5:8b:6a:d9:
09:4f:0a:1b:cd:9d:c0:dc:42:ae:92:8e:bc:5f:8f:
34:b4:8f:66:47:9b:7a:18:f0:6a:ed:71:ea:b1:6e:
e8:9b:8b:68:ec:d7:5c:68:db:84:6c:47:68:fd:ec:
22:c9:02:72:fc:33:17:4c:24:77:bb:9b:82:79:e2:
2c:20:9b:8a:cb:cf:f2:58:f3:bc:a4:b2:81:0f:35:
93:26:d5:c2:db:37:a1:28:51:37:8b:5f:c0:9f:d8:
f5:9e:fc:55:61:01:5c:52:d2:15:20:9e:51:25:69:
7e:e9:84:f6:e0:52:8a:69:7f:92:51:7c:06:5c:a8:
45:75:be:65:75:c0:2b:5b:4d:59:24:a2:c6:c2:d7:
27:eb:b3:14:5c:79:5d:e4:ae:f9:96:42:81:c6:03:
09:5b:4d:d3:8d:b9:59:8f:cc:94:9a:58:1a:22:fe:
2e:17:84:ff:54:2a:27:52:34:7c:69:a5:30:89:a5:
b2:2f:87:dc:c0:eb:08:07:8c:e1:12:40:9f:13:36:
e9:83:8b:3e:31:1f:79:a6:7b:f7:ba:b9:4c:9f:30:
88:d2:b3:61:35:1d:42:d6:d1:bf:89:0d:53:b2:ef:
28:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:7D:36:F3:30:5B:29:56:45:E4:B6:DB:1A:D0:29:70:28:91:85:B0
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wH028zBbKVZF5LbbGtApcCiRhbA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a0:bc:15:8c:cf:62:38:22:2d:d5:7c:e9:fb:5f:2d:6e:f5:4c:
3b:94:58:da:d5:98:b5:a9:3b:70:1c:13:87:34:8a:df:9e:3d:
87:9c:f0:c3:b2:4b:e9:ee:16:28:a7:cb:04:87:7d:18:0a:8b:
57:a7:2f:68:1c:40:ab:8d:de:77:64:3c:98:4c:06:7b:c4:b0:
6b:b9:88:2d:4b:4b:90:df:82:15:d3:fb:da:01:c0:64:52:7a:
dc:6c:22:ef:ae:86:33:80:b3:b6:7c:7d:ff:9c:1c:28:e6:de:
f0:83:f9:b0:b4:b4:4e:b4:36:1d:75:48:84:a8:d8:b9:e7:d6:
e8:10:65:76:dc:2b:c6:1d:ea:4f:a2:22:ab:69:d4:ee:f2:96:
aa:28:b5:f1:79:14:12:87:f1:c8:fc:b3:aa:cf:e6:54:f8:a7:
60:49:32:23:99:7d:f8:21:ff:ec:b7:9d:dd:ee:b8:97:b3:c7:
88:ce:1a:1f:56:e5:43:2c:1e:3c:d6:ca:8a:ed:a1:4d:c4:fe:
07:ef:77:5c:ad:e8:7b:ec:35:b1:c9:03:8d:0e:36:2e:39:62:
98:68:75:88:be:87:5d:50:b3:5c:16:87:4f:d6:15:db:ad:37:
ee:40:da:2f:cc:f5:39:ea:b4:ff:8f:08:28:e7:9d:85:91:b5:
7a:21:ad:ed
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYYILQCcq6zvAgVDCsebgnfTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMTMxMTQxMzMyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMDdkMzZmMzMwNWIyOTU2NDVlNGI2ZGIxYWQwMjk3MDI4OTE4NWIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkdxP7L1SdX5413DQTGRU9vgH3gtP
1lM3C+WLatkJTwobzZ3A3EKuko68X480tI9mR5t6GPBq7XHqsW7om4to7NdcaNuE
bEdo/ewiyQJy/DMXTCR3u5uCeeIsIJuKy8/yWPO8pLKBDzWTJtXC2zehKFE3i1/A
n9j1nvxVYQFcUtIVIJ5RJWl+6YT24FKKaX+SUXwGXKhFdb5ldcArW01ZJKLGwtcn
67MUXHld5K75lkKBxgMJW03TjblZj8yUmlgaIv4uF4T/VConUjR8aaUwiaWyL4fc
wOsIB4zhEkCfEzbpg4s+MR95pnv3urlMnzCI0rNhNR1C1tG/iQ1Tsu8oQwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFMB9NvMwWylWReS22xrQKXAokYWwMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvd0gwMjh6QmJLVlpGNUxiYkd0QXBjQ2lSaGJBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAKC8FYzPYjgiLdV86ftf
LW71TDuUWNrVmLWpO3AcE4c0it+ePYec8MOyS+nuFiinywSHfRgKi1enL2gcQKuN
3ndkPJhMBnvEsGu5iC1LS5DfghXT+9oBwGRSetxsIu+uhjOAs7Z8ff+cHCjm3vCD
+bC0tE60Nh11SISo2Lnn1ugQZXbcK8Yd6k+iIqtp1O7ylqootfF5FBKH8cj8s6rP
5lT4p2BJMiOZffgh/+y3nd3uuJezx4jOGh9W5UMsHjzWyortoU3E/gfvd1yt6Hvs
NbHJA40ONi45YphodYi+h11Qs1wWh0/WFdutN+5A2i/M9TnqtP+PCCjnnYWRtXoh
re0=
-----END CERTIFICATE-----
Generated at Wed Apr 30 23:09:40 2025 by rpki-client