Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wUwLL7BRgw4eyaJ93JR-bOCrvow.roa
File: wUwLL7BRgw4eyaJ93JR-bOCrvow.roa (raw, json)
Hash identifier: GkcOFiDFpP7tralKmwY1jHZK9M6mC2mZZZaRpMYXDJo=
Subject key identifier: C1:4C:0B:2F:B0:51:83:0E:1E:C9:A2:7D:DC:94:7E:6C:E0:AB:BE:8C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186F7A4A3EA4300D04D2E77CDC22E63B2B2
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wUwLL7BRgw4eyaJ93JR-bOCrvow.roa
Signing time: Sun 19 Mar 2023 02:13:27 +0000
ROA not before: Sun 19 Mar 2023 02:13:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:f7:a4:a3:ea:43:00:d0:4d:2e:77:cd:c2:2e:63:b2:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 19 02:13:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c14c0b2fb051830e1ec9a27ddc947e6ce0abbe8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:0a:a6:79:33:d3:7e:b1:89:ee:30:88:4e:54:
07:e2:98:87:ad:9f:dc:66:86:06:86:66:38:94:d2:
8f:ad:92:0f:ff:e7:1c:5f:64:aa:b9:fb:7b:a9:03:
d1:f0:7a:32:da:4f:ff:2b:6c:d3:bb:88:5c:d4:46:
ed:2b:33:9c:e2:65:0e:ea:43:5e:9d:3f:af:9c:20:
53:e2:48:c7:13:7a:1f:1b:c7:bf:92:4b:ac:1f:00:
e4:76:54:05:30:02:34:8d:76:68:39:c1:01:b5:83:
c7:c4:e0:59:05:fd:76:9f:11:a8:9e:18:c8:e5:f8:
09:ee:23:38:6a:f8:28:ca:a0:e4:0e:12:c7:2c:e4:
33:a7:3b:65:c4:9c:b1:df:b2:06:dc:d0:da:e0:eb:
05:1b:c5:c9:95:00:5e:9a:33:aa:20:91:50:47:eb:
8c:42:0e:04:b9:35:f8:d9:62:eb:c4:8b:b8:c0:2f:
80:d5:ef:d2:b8:06:8b:7e:72:41:76:41:f9:50:78:
26:48:e8:e4:51:af:df:7a:cf:64:66:81:39:bc:38:
89:af:e6:8d:2a:fc:ca:47:0a:0e:2f:7b:1b:bb:37:
d7:7e:00:ac:0f:40:92:73:1b:f5:5e:9b:32:20:83:
91:88:b6:a2:d4:c1:d1:27:b1:07:3c:7b:5c:46:e3:
03:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:4C:0B:2F:B0:51:83:0E:1E:C9:A2:7D:DC:94:7E:6C:E0:AB:BE:8C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wUwLL7BRgw4eyaJ93JR-bOCrvow.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
83:2b:49:a4:2b:72:99:45:32:ed:17:7a:c2:91:63:28:bc:3d:
c8:a6:f5:b1:4d:62:b6:ce:37:93:ca:9b:07:e9:1a:f7:3a:7a:
a4:98:27:c7:e1:17:4d:f0:69:7e:b9:6d:c3:e8:7d:d2:b1:3e:
00:5d:5f:fa:7e:d3:a6:37:d9:dd:11:c2:c6:0b:81:a3:d9:c7:
ef:d8:62:14:32:bd:fe:f6:7d:c2:c3:28:86:82:76:46:bb:d7:
02:ff:c1:cc:0b:e7:72:27:e1:1a:59:b2:6e:1e:ff:ec:e0:2c:
9a:0c:8f:9a:d4:15:fc:5a:96:02:73:6c:e2:6c:9b:9f:05:f7:
32:74:6a:9b:7d:c7:a9:40:09:af:58:14:b3:9a:eb:26:9f:ce:
82:09:38:d9:86:27:31:ed:04:47:ca:3b:26:76:7a:8a:98:39:
45:32:0d:91:c7:99:dd:44:4f:c0:8e:69:ad:b8:b7:9c:a3:78:
3a:bf:3b:17:b0:a0:c7:a3:9f:7c:e3:24:05:1a:69:da:4e:e8:
d1:04:66:41:4d:45:d9:83:5e:ef:4b:fe:01:7b:53:79:e0:30:
99:64:29:3a:be:0b:eb:54:e1:87:82:2d:e8:76:19:32:46:99:
57:79:74:81:df:bc:1f:5b:64:98:81:ab:2b:23:80:53:4b:33:
be:86:f4:fd
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYb3pKPqQwDQTS53zcIuY7KyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMzE5MDIxMzI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMTRjMGIyZmIwNTE4MzBlMWVjOWEyN2RkYzk0N2U2Y2UwYWJiZThjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoAqmeTPTfrGJ7jCITlQH4piHrZ/c
ZoYGhmY4lNKPrZIP/+ccX2Squft7qQPR8Hoy2k//K2zTu4hc1EbtKzOc4mUO6kNe
nT+vnCBT4kjHE3ofG8e/kkusHwDkdlQFMAI0jXZoOcEBtYPHxOBZBf12nxGonhjI
5fgJ7iM4avgoyqDkDhLHLOQzpztlxJyx37IG3NDa4OsFG8XJlQBemjOqIJFQR+uM
Qg4EuTX42WLrxIu4wC+A1e/SuAaLfnJBdkH5UHgmSOjkUa/fes9kZoE5vDiJr+aN
KvzKRwoOL3sbuzfXfgCsD0CScxv1XpsyIIORiLai1MHRJ7EHPHtcRuMDrwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFMFMCy+wUYMOHsmifdyUfmzgq76MMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvd1V3TEw3QlJndzRleWFKOTNKUi1iT0Nydm93LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAIMrSaQrcplFMu0XesKR
Yyi8Pcim9bFNYrbON5PKmwfpGvc6eqSYJ8fhF03waX65bcPofdKxPgBdX/p+06Y3
2d0RwsYLgaPZx+/YYhQyvf72fcLDKIaCdka71wL/wcwL53In4RpZsm4e/+zgLJoM
j5rUFfxalgJzbOJsm58F9zJ0apt9x6lACa9YFLOa6yafzoIJONmGJzHtBEfKOyZ2
eoqYOUUyDZHHmd1ET8COaa24t5yjeDq/OxewoMejn3zjJAUaadpO6NEEZkFNRdmD
Xu9L/gF7U3ngMJlkKTq+C+tU4YeCLeh2GTJGmVd5dIHfvB9bZJiBqysjgFNLM76G
9P0=
-----END CERTIFICATE-----
Generated at Thu May 1 01:15:06 2025 by rpki-client