Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wOyzJwF5oFMmFpd_qHXW_wi4U2k.roa
File: wOyzJwF5oFMmFpd_qHXW_wi4U2k.roa (raw, json)
Hash identifier: zOSk3TrS/VcmBidGcScAJkrcbxh6BZgqmLADjBEGzCM=
Subject key identifier: C0:EC:B3:27:01:79:A0:53:26:16:97:7F:A8:75:D6:FF:08:B8:53:69
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188C4F7EDBA31565B2322B01F39450A740A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wOyzJwF5oFMmFpd_qHXW_wi4U2k.roa
Signing time: Fri 16 Jun 2023 16:09:22 +0000
ROA not before: Fri 16 Jun 2023 16:09:22 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:c4:f7:ed:ba:31:56:5b:23:22:b0:1f:39:45:0a:74:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 16 16:09:22 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c0ecb3270179a0532616977fa875d6ff08b85369
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:9e:19:f5:eb:10:92:2c:1e:80:e8:9c:9a:97:
a1:71:7e:d4:d2:52:dd:4d:56:bf:f1:55:9d:75:61:
99:46:1f:5e:8c:26:94:6a:01:a9:3b:c8:67:ca:f6:
93:00:45:46:c6:db:85:d9:51:ef:5d:e5:33:a1:e8:
54:78:7f:3f:ce:93:1c:36:8c:26:87:ed:ea:e3:ff:
50:8b:ce:1e:ee:47:eb:2c:96:21:2f:df:35:2d:d9:
12:5a:d8:28:a2:da:45:52:e4:ac:d0:a7:31:2d:34:
fe:c9:a2:e0:40:3f:0a:bd:49:63:ff:43:70:46:61:
cd:05:6a:5f:df:f3:85:eb:60:26:eb:bb:ac:da:a5:
1d:ad:3b:3a:6e:8a:99:00:c5:b6:22:00:9e:d8:58:
dd:dd:28:3e:09:5d:3b:c3:93:04:39:97:50:ec:d3:
69:cc:ed:db:b4:44:97:df:65:a0:f4:a3:f7:f2:44:
96:e3:8c:a4:0a:ad:fb:ae:6d:ae:d7:aa:e9:f7:bf:
c4:87:39:cd:5f:f2:5b:1a:57:d9:23:15:53:fb:c6:
8d:3f:76:a5:1e:46:4a:90:09:df:48:49:87:3d:80:
86:72:94:e4:b2:a5:fe:8d:43:35:db:01:c2:0b:21:
dc:25:ca:48:21:70:a3:a8:67:aa:c2:27:33:0d:e1:
a9:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:EC:B3:27:01:79:A0:53:26:16:97:7F:A8:75:D6:FF:08:B8:53:69
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wOyzJwF5oFMmFpd_qHXW_wi4U2k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
92:94:3b:bf:24:2f:cd:fd:21:06:d7:b1:ab:98:11:d8:37:de:
c1:30:53:44:a7:90:f7:74:f6:f1:55:d0:3a:63:d4:a2:b1:c3:
31:39:db:88:af:ff:03:cf:40:c8:ca:b9:4b:a8:da:ae:de:28:
5c:4f:fb:11:eb:2b:14:03:09:0e:11:cf:8d:02:77:4a:f0:9a:
ef:31:ea:70:4f:74:17:14:02:f3:5c:5d:19:fe:89:64:52:f7:
a5:ca:5a:00:2e:65:5c:df:f1:9b:e3:38:e9:90:8b:01:8b:82:
41:a2:b2:93:f8:35:70:8d:a6:9d:20:a3:a9:9d:87:a6:4f:04:
0c:76:df:c8:b8:b3:d1:fa:2e:6f:62:0d:bc:1e:e0:98:96:ca:
c8:2b:1a:e3:d0:82:75:8a:76:26:a1:cf:5b:22:b5:e0:3c:b3:
c6:48:9e:cf:e8:9c:c9:b6:85:75:a5:f9:eb:c4:6b:f7:57:50:
92:28:bc:0e:4a:9f:1e:c1:35:14:ec:9c:14:7b:a9:cc:27:f8:
07:b1:bd:8c:75:83:dc:dc:c6:bd:14:f3:5a:e3:70:91:0f:97:
61:a4:21:15:74:51:b6:0b:01:5c:88:5b:24:34:d8:38:68:f1:
80:92:39:43:1d:c2:5a:3c:d6:e9:7f:3e:4a:cd:a5:83:bd:7c:
c7:3d:f4:99
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYjE9+26MVZbIyKwHzlFCnQKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNjE2MTYwOTIyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMGVjYjMyNzAxNzlhMDUzMjYxNjk3N2ZhODc1ZDZmZjA4Yjg1MzY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiZ4Z9esQkiwegOicmpehcX7U0lLd
TVa/8VWddWGZRh9ejCaUagGpO8hnyvaTAEVGxtuF2VHvXeUzoehUeH8/zpMcNowm
h+3q4/9Qi84e7kfrLJYhL981LdkSWtgootpFUuSs0KcxLTT+yaLgQD8KvUlj/0Nw
RmHNBWpf3/OF62Am67us2qUdrTs6boqZAMW2IgCe2Fjd3Sg+CV07w5MEOZdQ7NNp
zO3btESX32Wg9KP38kSW44ykCq37rm2u16rp97/EhznNX/JbGlfZIxVT+8aNP3al
HkZKkAnfSEmHPYCGcpTksqX+jUM12wHCCyHcJcpIIXCjqGeqwiczDeGpmwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFMDssycBeaBTJhaXf6h11v8IuFNpMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvd095ekp3RjVvRk1tRnBkX3FIWFdfd2k0VTJrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAJKUO78kL839IQbXsauY
Edg33sEwU0SnkPd09vFV0Dpj1KKxwzE524iv/wPPQMjKuUuo2q7eKFxP+xHrKxQD
CQ4Rz40Cd0rwmu8x6nBPdBcUAvNcXRn+iWRS96XKWgAuZVzf8ZvjOOmQiwGLgkGi
spP4NXCNpp0go6mdh6ZPBAx238i4s9H6Lm9iDbwe4JiWysgrGuPQgnWKdiahz1si
teA8s8ZIns/onMm2hXWl+evEa/dXUJIovA5Knx7BNRTsnBR7qcwn+AexvYx1g9zc
xr0U81rjcJEPl2GkIRV0UbYLAVyIWyQ02Dho8YCSOUMdwlo81ul/PkrNpYO9fMc9
9Jk=
-----END CERTIFICATE-----
Generated at Wed Apr 30 20:13:43 2025 by rpki-client