Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wSGy1Eq7AEywSo6ZNTjudm2le8w.roa
File: wSGy1Eq7AEywSo6ZNTjudm2le8w.roa (raw, json)
Hash identifier: xvvf6kIIswTX5kP0hImrguyAmP13bEXkCRZeHLE1S68=
Subject key identifier: C1:21:B2:D4:4A:BB:00:4C:B0:4A:8E:99:35:38:EE:76:6D:A5:7B:CC
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01847E00FA0CE4DB521CCE2AB1E6390C583C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wSGy1Eq7AEywSo6ZNTjudm2le8w.roa
Signing time: Wed 16 Nov 2022 01:15:04 +0000
ROA not before: Wed 16 Nov 2022 01:15:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:184:51c3:ad7c/128 maxlen: 128
2001:67c:64:ffff:0:184:3fbd:71f7/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:184:4250:a4df/128 maxlen: 128
2001:67c:64:ffff:0:184:75cf:c8d9/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:7e:00:fa:0c:e4:db:52:1c:ce:2a:b1:e6:39:0c:58:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Nov 16 01:15:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c121b2d44abb004cb04a8e993538ee766da57bcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b8:ca:8e:24:05:25:df:3d:7e:91:fe:fd:1b:
df:e3:22:d0:f7:04:5c:5f:8f:43:91:d9:8b:6c:2b:
3c:8b:3d:b5:86:6b:b7:18:0a:b7:be:31:be:2d:fc:
f9:7e:c6:0c:1b:cd:5a:7e:aa:25:41:a1:29:b7:86:
ca:09:e2:6d:fa:46:ca:9e:99:87:34:f2:e8:fe:d7:
e3:3d:da:a1:9b:6f:94:37:f3:eb:c5:5f:6a:f0:43:
65:04:f0:0a:b7:9e:be:4f:cd:f6:37:19:ce:93:7f:
81:c0:29:5f:9b:15:3f:94:cb:82:64:28:a5:21:17:
2a:65:53:aa:6a:d7:87:b9:d1:2e:9a:70:79:16:27:
08:63:e8:f1:9a:a0:e0:b4:8f:20:03:58:6e:e4:d7:
25:7b:28:0e:8a:98:57:5c:bf:0d:47:e6:10:6c:cd:
f8:5d:83:24:f0:2b:a3:98:d9:7f:d5:ba:e3:ba:bc:
f7:be:38:6b:5e:b3:46:33:0e:d6:7a:cc:3f:6a:da:
72:eb:21:79:41:ec:db:86:fe:da:e7:65:5f:1e:a1:
c4:1f:6f:36:98:9f:d5:5a:e1:56:bb:aa:90:aa:a2:
a5:5a:da:b7:35:eb:75:33:95:f6:7e:ac:64:12:43:
51:7b:05:67:16:c3:47:9b:e1:27:c3:35:23:2c:c2:
24:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:21:B2:D4:4A:BB:00:4C:B0:4A:8E:99:35:38:EE:76:6D:A5:7B:CC
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wSGy1Eq7AEywSo6ZNTjudm2le8w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
19:1d:01:4d:4a:7f:f0:bd:cb:0f:ba:a3:af:d0:27:77:8c:0f:
64:fb:fc:81:f7:3d:a6:ee:32:d8:80:7d:01:c9:74:e0:0f:0a:
5e:ec:ca:fd:9c:c8:ad:2d:3f:74:97:4c:6c:f1:ec:db:7e:6c:
20:ab:db:ed:42:39:79:52:ab:5f:c1:28:26:1e:04:48:1a:7f:
ba:1d:1e:1f:f5:69:b9:9f:14:31:2a:fa:3b:96:1b:2e:16:cf:
b6:19:cb:4a:10:0a:2a:d6:5e:0e:4a:93:c3:c3:81:7e:36:a4:
55:d4:b3:52:87:f8:43:f2:eb:70:d8:2f:70:07:12:a1:c5:24:
e5:db:61:7a:a8:ed:b5:12:b3:46:f3:08:d1:76:51:36:d7:d1:
56:cd:dd:be:27:17:05:18:8a:bb:45:c7:75:05:b6:f5:4f:62:
ef:8d:17:e9:85:5b:25:ea:9e:a8:f9:46:8a:3f:eb:79:4d:80:
25:54:13:de:c4:3e:1b:3e:b8:05:8f:47:bd:69:b6:10:90:41:
df:1b:02:86:1b:5f:ce:c9:1f:11:b4:31:ec:71:cb:63:9b:d3:
76:b8:b8:84:ce:88:08:c9:5f:40:81:5e:dd:11:16:ca:f9:04:
79:d9:80:b3:2e:05:71:6e:19:fc:1e:aa:31:f1:5d:7a:80:24:
0e:84:69:95
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYR+APoM5NtSHM4qseY5DFg8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIxMTE2MDExNTA0WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMTIxYjJkNDRhYmIwMDRjYjA0YThlOTkzNTM4ZWU3NjZkYTU3YmNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxLjKjiQFJd89fpH+/Rvf4yLQ9wRc
X49DkdmLbCs8iz21hmu3GAq3vjG+Lfz5fsYMG81afqolQaEpt4bKCeJt+kbKnpmH
NPLo/tfjPdqhm2+UN/PrxV9q8ENlBPAKt56+T832NxnOk3+BwClfmxU/lMuCZCil
IRcqZVOqateHudEumnB5FicIY+jxmqDgtI8gA1hu5NcleygOiphXXL8NR+YQbM34
XYMk8CujmNl/1brjurz3vjhrXrNGMw7Wesw/atpy6yF5Qezbhv7a52VfHqHEH282
mJ/VWuFWu6qQqqKlWtq3Net1M5X2fqxkEkNRewVnFsNHm+EnwzUjLMIkXwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFMEhstRKuwBMsEqOmTU47nZtpXvMMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvd1NHeTFFcTdBRXl3U282Wk5UanVkbTJsZTh3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBABkdAU1Kf/C9yw+6o6/Q
J3eMD2T7/IH3PabuMtiAfQHJdOAPCl7syv2cyK0tP3SXTGzx7Nt+bCCr2+1COXlS
q1/BKCYeBEgaf7odHh/1abmfFDEq+juWGy4Wz7YZy0oQCirWXg5Kk8PDgX42pFXU
s1KH+EPy63DYL3AHEqHFJOXbYXqo7bUSs0bzCNF2UTbX0VbN3b4nFwUYirtFx3UF
tvVPYu+NF+mFWyXqnqj5Roo/63lNgCVUE97EPhs+uAWPR71pthCQQd8bAoYbX87J
HxG0Mexxy2Ob03a4uITOiAjJX0CBXt0RFsr5BHnZgLMuBXFuGfweqjHxXXqAJA6E
aZU=
-----END CERTIFICATE-----
Generated at Fri May 2 22:15:13 2025 by rpki-client