Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wNP7lFG-6-DCKwOWrMt7IscBPEs.roa
File: wNP7lFG-6-DCKwOWrMt7IscBPEs.roa (raw, json)
Hash identifier: l9aEEV3TGx8UTs1gY1+4ywjtb9R1/RkOzTukBdSssro=
Subject key identifier: C0:D3:FB:94:51:BE:EB:E0:C2:2B:03:96:AC:CB:7B:22:C7:01:3C:4B
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A1C8A4B7420BFBDFD92E7C520EBF45DB0
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wNP7lFG-6-DCKwOWrMt7IscBPEs.roa
Signing time: Tue 22 Aug 2023 09:18:59 +0000
ROA not before: Tue 22 Aug 2023 09:18:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18a:178d:7ed9/128 maxlen: 128
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:1c:8a:4b:74:20:bf:bd:fd:92:e7:c5:20:eb:f4:5d:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 22 09:18:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c0d3fb9451beebe0c22b0396accb7b22c7013c4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:49:50:f8:e7:b1:de:bc:99:42:7f:9e:10:58:
1d:17:d9:3d:80:65:9c:0e:c6:d9:43:37:8b:45:21:
ab:44:9d:5b:48:fe:8d:95:ee:e9:d3:79:c6:a3:bb:
b5:d8:35:2b:5c:21:81:db:eb:9f:7b:b3:76:55:d5:
70:14:18:e2:19:dc:dd:d2:0e:c0:71:4d:cd:35:d7:
bf:12:17:ed:9a:92:34:1f:0e:cf:c9:00:fa:e7:06:
4e:a2:12:a6:23:d3:28:ce:0c:d9:c1:70:da:92:85:
85:58:0d:71:54:d1:f7:cb:a9:59:38:3d:41:48:ed:
5f:17:83:25:a1:e2:ff:97:1c:67:69:8a:8a:fa:88:
ff:64:9c:11:4c:91:55:93:43:49:6e:52:86:c7:f7:
3e:cf:8b:0e:09:cc:d3:23:bc:1d:78:95:00:b3:af:
80:9f:9a:be:3d:77:0a:58:55:2c:59:3a:87:bd:66:
9c:12:e9:b3:0c:0d:5a:e0:8c:4e:6c:16:4e:ea:60:
7c:47:e3:31:f3:a5:29:3c:3c:a7:99:78:40:86:81:
a7:1a:80:06:8d:40:d3:4f:ec:62:3b:1d:9e:2c:da:
a2:f5:02:25:47:a8:9c:ab:dc:2c:a0:7c:7a:56:e3:
fa:d4:30:67:42:9d:bb:55:d2:1f:12:23:96:c3:33:
75:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:D3:FB:94:51:BE:EB:E0:C2:2B:03:96:AC:CB:7B:22:C7:01:3C:4B
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wNP7lFG-6-DCKwOWrMt7IscBPEs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
49:12:d0:de:24:ae:b2:73:06:a7:6c:90:d8:a4:96:19:c4:2a:
3f:dd:72:47:6f:5f:45:be:10:35:16:01:ae:9e:12:d6:5b:66:
2d:90:a3:d6:99:d6:a0:a8:f0:22:38:4e:84:05:de:a7:68:95:
d8:6e:49:04:fa:4d:ca:3a:c3:1c:e6:bf:0f:0c:ea:4a:81:99:
0c:2e:63:8a:f2:cf:49:07:95:81:bb:02:9e:90:62:33:51:2c:
79:ec:f6:98:79:86:c4:83:22:7a:44:e3:6e:07:d8:72:1f:e3:
5d:7f:da:ee:45:5e:a1:13:ab:94:44:9a:d9:ba:66:68:f3:5a:
09:88:93:bd:63:a0:a3:a6:f6:9a:a8:48:da:dc:d7:e2:bb:53:
5f:9c:fe:81:b6:49:90:c0:2f:f8:4f:3c:12:d9:f1:c4:d5:f0:
cc:2a:5e:a4:54:1d:c4:83:fe:2e:d3:86:79:24:ce:76:d4:b0:
4e:9a:cf:aa:ef:8b:14:04:c0:3c:8b:58:ec:5d:0d:a9:9e:89:
54:d8:6e:84:94:9b:85:46:52:b1:e9:05:93:e9:e1:0f:e5:d7:
36:db:ee:e1:68:e6:e7:a4:23:23:88:87:57:ba:cb:8c:f0:c0:
28:af:ad:1f:5f:33:11:52:a0:94:87:c5:90:a6:85:30:83:73:
58:e7:b8:8e
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYocikt0IL+9/ZLnxSDr9F2wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwODIyMDkxODU5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMGQzZmI5NDUxYmVlYmUwYzIyYjAzOTZhY2NiN2IyMmM3MDEzYzRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq0lQ+Oex3ryZQn+eEFgdF9k9gGWc
DsbZQzeLRSGrRJ1bSP6Nle7p03nGo7u12DUrXCGB2+ufe7N2VdVwFBjiGdzd0g7A
cU3NNde/EhftmpI0Hw7PyQD65wZOohKmI9MozgzZwXDakoWFWA1xVNH3y6lZOD1B
SO1fF4MloeL/lxxnaYqK+oj/ZJwRTJFVk0NJblKGx/c+z4sOCczTI7wdeJUAs6+A
n5q+PXcKWFUsWTqHvWacEumzDA1a4IxObBZO6mB8R+Mx86UpPDynmXhAhoGnGoAG
jUDTT+xiOx2eLNqi9QIlR6icq9wsoHx6VuP61DBnQp27VdIfEiOWwzN1yQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFMDT+5RRvuvgwisDlqzLeyLHATxLMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvd05QN2xGRy02LURDS3dPV3JNdDdJc2NCUEVzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAEkS0N4krrJzBqdskNik
lhnEKj/dckdvX0W+EDUWAa6eEtZbZi2Qo9aZ1qCo8CI4ToQF3qdoldhuSQT6Tco6
wxzmvw8M6kqBmQwuY4ryz0kHlYG7Ap6QYjNRLHns9ph5hsSDInpE424H2HIf411/
2u5FXqETq5REmtm6ZmjzWgmIk71joKOm9pqoSNrc1+K7U1+c/oG2SZDAL/hPPBLZ
8cTV8MwqXqRUHcSD/i7ThnkkznbUsE6az6rvixQEwDyLWOxdDameiVTYboSUm4VG
UrHpBZPp4Q/l1zbb7uFo5uekIyOIh1e6y4zwwCivrR9fMxFSoJSHxZCmhTCDc1jn
uI4=
-----END CERTIFICATE-----
Generated at Thu May 1 07:44:01 2025 by rpki-client