Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wWBXivPYSGoSiEkARGq4GLcILBo.roa
File: wWBXivPYSGoSiEkARGq4GLcILBo.roa (raw, json)
Hash identifier: A9wutWcekNq4OVgXW83eii6v/8H55+oV8k2YIITn02Y=
Subject key identifier: C1:60:57:8A:F3:D8:48:6A:12:88:49:00:44:6A:B8:18:B7:08:2C:1A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187EBD2AE0E8CC5CBD3F2267A754A9C0B5F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wWBXivPYSGoSiEkARGq4GLcILBo.roa
Signing time: Fri 05 May 2023 12:11:05 +0000
ROA not before: Fri 05 May 2023 12:11:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:eb:d2:ae:0e:8c:c5:cb:d3:f2:26:7a:75:4a:9c:0b:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 5 12:11:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c160578af3d8486a12884900446ab818b7082c1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:86:98:36:f3:af:f1:1d:94:a5:d9:14:7b:5b:
eb:1d:19:39:88:e3:ee:2b:2f:7f:b5:3a:91:47:cf:
51:4e:e6:9e:f5:d1:05:8f:a2:82:8d:0c:bf:f5:d7:
4e:a8:e2:61:a2:6a:66:9c:4d:c4:d0:4f:0d:73:7c:
41:75:96:2f:70:48:53:26:16:d3:c2:e4:70:dc:37:
2b:13:2a:b2:1f:3a:b6:a7:b4:b5:c9:a0:e6:13:3a:
c7:d1:db:17:76:ac:80:f7:40:93:dd:44:98:fc:02:
e8:ca:5a:dc:9d:88:35:84:3b:e1:fe:3e:59:1a:50:
fc:bf:03:f8:78:f0:43:ff:bb:6f:a9:19:86:e5:8b:
96:e2:2f:6b:1e:0d:0f:4f:4c:64:56:5e:c5:4a:6e:
ca:2d:14:5f:12:e5:3c:f9:25:19:f7:29:9f:5d:88:
ed:ad:71:c2:7e:8d:0a:dc:0f:e6:21:8f:9a:b5:54:
09:25:d7:21:ad:1b:18:47:ef:98:25:1b:e7:7a:b6:
ad:c9:df:40:90:d3:0a:2c:43:29:4e:4d:73:d8:87:
d1:1d:4d:7b:4a:a2:ac:63:25:87:3d:04:9a:18:3b:
a8:54:e7:49:cc:06:b3:54:09:7c:f9:1e:3b:cf:7a:
9a:42:cc:68:b9:51:ce:66:13:76:22:e2:37:c6:f2:
48:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:60:57:8A:F3:D8:48:6A:12:88:49:00:44:6A:B8:18:B7:08:2C:1A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wWBXivPYSGoSiEkARGq4GLcILBo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
57:29:c7:e5:7d:64:c9:a9:c2:19:b3:c3:29:d1:8e:f8:4c:48:
49:aa:cb:c4:24:9e:d3:a4:51:84:3d:98:03:64:a2:e2:91:e6:
ed:c4:e1:a5:f0:60:fe:06:6d:c1:4e:fd:ac:e0:96:00:9e:43:
f0:38:29:3d:62:96:c2:99:fd:05:cc:1e:6f:00:72:d5:f7:a0:
db:8c:76:91:93:93:e6:4e:b4:51:04:b1:d2:cf:6a:a0:97:4e:
12:47:b2:96:78:4e:af:bf:fc:5e:7f:ff:0a:54:55:3a:bc:49:
81:ff:33:a3:c0:6e:f0:23:e6:92:07:1b:b0:eb:f0:41:9d:a6:
ef:18:79:82:c7:fc:33:68:91:9a:97:c6:26:d1:e4:b5:b5:84:
dc:f2:7c:b9:b5:10:c1:de:bc:cb:06:f0:e6:51:c7:49:c1:e1:
57:8b:51:28:fb:cd:b6:0b:fc:be:0e:04:ff:af:d3:27:63:61:
c2:ad:61:86:51:68:39:75:61:55:73:57:ca:bf:b0:16:44:c7:
a2:e6:72:ab:f3:a7:74:15:42:ea:a1:eb:e1:f1:da:7e:35:af:
48:b0:7c:22:14:65:4a:71:8a:b7:81:c5:f6:ae:a2:36:c7:1a:
8e:2a:8b:de:c9:f5:90:b6:f6:cc:a1:47:a0:34:fb:4d:a1:0e:
d8:16:db:13
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYfr0q4OjMXL0/ImenVKnAtfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNTA1MTIxMTA1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMTYwNTc4YWYzZDg0ODZhMTI4ODQ5MDA0NDZhYjgxOGI3MDgyYzFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA34aYNvOv8R2UpdkUe1vrHRk5iOPu
Ky9/tTqRR89RTuae9dEFj6KCjQy/9ddOqOJhompmnE3E0E8Nc3xBdZYvcEhTJhbT
wuRw3DcrEyqyHzq2p7S1yaDmEzrH0dsXdqyA90CT3USY/ALoylrcnYg1hDvh/j5Z
GlD8vwP4ePBD/7tvqRmG5YuW4i9rHg0PT0xkVl7FSm7KLRRfEuU8+SUZ9ymfXYjt
rXHCfo0K3A/mIY+atVQJJdchrRsYR++YJRvneratyd9AkNMKLEMpTk1z2IfRHU17
SqKsYyWHPQSaGDuoVOdJzAazVAl8+R47z3qaQsxouVHOZhN2IuI3xvJIkwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFMFgV4rz2EhqEohJAERquBi3CCwaMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvd1dCWGl2UFlTR29TaUVrQVJHcTRHTGNJTEJvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAFcpx+V9ZMmpwhmzwynR
jvhMSEmqy8QkntOkUYQ9mANkouKR5u3E4aXwYP4GbcFO/azglgCeQ/A4KT1ilsKZ
/QXMHm8ActX3oNuMdpGTk+ZOtFEEsdLPaqCXThJHspZ4Tq+//F5//wpUVTq8SYH/
M6PAbvAj5pIHG7Dr8EGdpu8YeYLH/DNokZqXxibR5LW1hNzyfLm1EMHevMsG8OZR
x0nB4VeLUSj7zbYL/L4OBP+v0ydjYcKtYYZRaDl1YVVzV8q/sBZEx6Lmcqvzp3QV
Quqh6+Hx2n41r0iwfCIUZUpxireBxfauojbHGo4qi97J9ZC29syhR6A0+02hDtgW
2xM=
-----END CERTIFICATE-----
Generated at Thu May 1 02:51:55 2025 by rpki-client