Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wJdQz7764WKu05RJnF1FavkiilU.roa
File: wJdQz7764WKu05RJnF1FavkiilU.roa (raw, json)
Hash identifier: 9PrO6mi3u+5uF3WkpyL+0LiNIxNMCQJ+bGcCtHshaJQ=
Subject key identifier: C0:97:50:CF:BE:FA:E1:62:AE:D3:94:49:9C:5D:45:6A:F9:22:8A:55
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187387354E5D80B6465C3845ACFC97CF4B7
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wJdQz7764WKu05RJnF1FavkiilU.roa
Signing time: Fri 31 Mar 2023 16:14:54 +0000
ROA not before: Fri 31 Mar 2023 16:14:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:38:73:54:e5:d8:0b:64:65:c3:84:5a:cf:c9:7c:f4:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 31 16:14:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c09750cfbefae162aed394499c5d456af9228a55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:5f:cd:53:e9:f2:00:06:ea:66:5c:49:86:f2:
a5:bf:1d:a7:cb:94:8a:c4:8a:de:36:c6:47:a6:0a:
6c:e2:8b:73:e2:8a:05:f3:df:62:22:40:44:62:70:
4a:84:4a:1f:24:19:b2:45:d3:83:f1:3b:3a:64:12:
2d:d0:39:3a:5f:85:73:8d:ea:ee:d0:d3:2b:dc:79:
89:9d:b6:8c:41:d5:05:bb:48:be:3b:fe:14:81:af:
cb:16:2d:6d:9b:cb:51:75:62:1c:98:c0:9d:19:2e:
00:25:96:2e:1c:2e:a8:6c:4b:80:a2:a5:e3:6b:94:
46:7d:91:0f:b9:a1:fd:c0:b0:86:8b:f7:ee:66:96:
ed:15:5e:98:dd:19:0b:da:34:1a:8d:c6:7f:a8:83:
bb:c1:29:91:cd:88:a2:cc:78:22:75:34:1b:bb:d7:
62:8f:01:75:1e:cd:7f:da:a6:21:c4:72:a3:1d:cc:
da:c7:f3:e0:4a:d8:66:12:8c:ec:68:a9:a2:51:fb:
85:d2:c4:62:f4:fb:9a:2d:d8:5e:ad:84:97:08:55:
d6:05:df:d1:ac:a9:81:f4:fe:11:47:66:02:0c:db:
53:03:c5:04:21:18:08:9c:6a:1d:56:02:0f:cd:ee:
ab:ba:f8:16:d8:1e:e3:89:09:c1:b0:ee:d8:89:95:
ec:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:97:50:CF:BE:FA:E1:62:AE:D3:94:49:9C:5D:45:6A:F9:22:8A:55
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wJdQz7764WKu05RJnF1FavkiilU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
13:b8:38:c4:5e:23:c6:64:cf:3a:45:f3:25:7f:26:af:7c:c2:
9f:92:82:c6:f2:fe:27:40:38:d5:3e:a7:70:56:a5:20:0a:de:
4a:68:47:a5:0a:7f:3a:87:0e:f5:78:cc:5a:89:02:a0:62:09:
55:f9:0b:17:7e:7f:75:c3:85:0c:17:a6:96:b3:6d:3f:b7:1b:
f0:40:36:13:6d:46:60:8c:20:67:49:69:5b:20:e8:5f:89:04:
28:43:78:93:82:e8:0b:9b:c7:06:3b:9d:9f:4b:2d:5a:ac:57:
bb:29:96:9b:69:02:6e:f8:c1:46:b6:d3:8d:b3:60:bf:02:33:
b3:e3:3c:7e:38:e0:56:b9:8a:8c:a0:7a:a8:f2:4a:1d:2b:ac:
c9:96:20:75:39:04:99:43:3a:f8:f4:9c:61:f7:16:1f:4c:99:
01:5d:18:5f:da:0a:cc:2a:f4:6f:41:c5:c5:d4:51:24:bf:00:
31:e3:0a:5e:2a:f0:7d:62:92:46:82:8a:f4:d7:44:42:f8:83:
60:92:0c:e1:e8:44:e6:cd:ed:7e:87:7b:c4:02:b9:49:ac:9a:
d9:d4:63:5e:b5:b9:d0:95:8d:2d:2a:50:2c:a4:b1:8a:5d:07:
5b:71:c7:1d:dd:a4:dd:17:f6:7b:3b:df:48:78:77:f6:c4:49:
e8:a3:a9:d9
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYc4c1Tl2AtkZcOEWs/JfPS3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMzMxMTYxNDU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMDk3NTBjZmJlZmFlMTYyYWVkMzk0NDk5YzVkNDU2YWY5MjI4YTU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwl/NU+nyAAbqZlxJhvKlvx2ny5SK
xIreNsZHpgps4otz4ooF899iIkBEYnBKhEofJBmyRdOD8Ts6ZBIt0Dk6X4Vzjeru
0NMr3HmJnbaMQdUFu0i+O/4Uga/LFi1tm8tRdWIcmMCdGS4AJZYuHC6obEuAoqXj
a5RGfZEPuaH9wLCGi/fuZpbtFV6Y3RkL2jQajcZ/qIO7wSmRzYiizHgidTQbu9di
jwF1Hs1/2qYhxHKjHczax/PgSthmEozsaKmiUfuF0sRi9PuaLdherYSXCFXWBd/R
rKmB9P4RR2YCDNtTA8UEIRgInGodVgIPze6ruvgW2B7jiQnBsO7YiZXsuQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFMCXUM+++uFirtOUSZxdRWr5IopVMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvd0pkUXo3NzY0V0t1MDVSSm5GMUZhdmtpaWxVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBABO4OMReI8ZkzzpF8yV/
Jq98wp+Sgsby/idAONU+p3BWpSAK3kpoR6UKfzqHDvV4zFqJAqBiCVX5Cxd+f3XD
hQwXppazbT+3G/BANhNtRmCMIGdJaVsg6F+JBChDeJOC6AubxwY7nZ9LLVqsV7sp
lptpAm74wUa2042zYL8CM7PjPH444Fa5ioygeqjySh0rrMmWIHU5BJlDOvj0nGH3
Fh9MmQFdGF/aCswq9G9BxcXUUSS/ADHjCl4q8H1ikkaCivTXREL4g2CSDOHoRObN
7X6He8QCuUmsmtnUY161udCVjS0qUCyksYpdB1txxx3dpN0X9ns730h4d/bESeij
qdk=
-----END CERTIFICATE-----
Generated at Fri May 2 07:05:52 2025 by rpki-client