Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wdS9W7vl4PCBfsoTNygn1GOUaSw.roa
File: wdS9W7vl4PCBfsoTNygn1GOUaSw.roa (raw, json)
Hash identifier: CGDuRDsZG/D9S0V2hesZt5UJYRFEyE2R6Z+0VHLKdhU=
Subject key identifier: C1:D4:BD:5B:BB:E5:E0:F0:81:7E:CA:13:37:28:27:D4:63:94:69:2C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018653E440C049F5A4D2D0A964536CE5F985
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wdS9W7vl4PCBfsoTNygn1GOUaSw.roa
Signing time: Wed 15 Feb 2023 07:05:13 +0000
ROA not before: Wed 15 Feb 2023 07:05:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:53e3:a75f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:53:e4:40:c0:49:f5:a4:d2:d0:a9:64:53:6c:e5:f9:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 15 07:05:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c1d4bd5bbbe5e0f0817eca13372827d46394692c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:95:43:64:c4:ce:e1:4b:7e:42:db:92:85:cb:
e7:7d:c6:9a:41:e5:77:78:43:0a:f9:06:06:34:92:
be:cf:50:96:97:a1:7a:19:5e:14:f5:e1:82:e7:e8:
97:5d:43:06:93:35:bc:f0:a5:64:ab:eb:fc:51:5a:
b9:8d:bc:09:ff:91:14:1c:82:20:f3:cc:98:3f:1e:
ab:70:b2:2a:74:b1:35:fa:bd:9b:0e:86:2c:e4:a9:
b1:29:e8:70:af:b8:63:b9:e9:af:a7:45:8b:1f:d5:
4c:77:d1:0c:3f:4a:69:e9:37:fc:bc:97:f8:0c:5b:
bd:b9:c6:1e:ec:75:a1:b9:49:ae:e9:94:2a:15:30:
f8:77:2f:5c:64:a5:10:fb:35:54:3c:89:d7:23:c9:
db:92:ff:df:b9:3c:fe:f2:30:41:f6:df:c6:b9:e0:
b5:c3:09:f9:8e:8a:02:e3:56:88:ce:18:ab:2a:2d:
07:66:f8:d0:5d:d2:bd:ba:c2:55:08:85:48:bf:7e:
32:47:46:5c:cd:d4:c3:ec:94:79:cb:3f:a6:c8:f0:
48:de:ae:4f:2b:5e:54:d0:34:cc:e0:ca:b4:7a:45:
6e:b1:e0:a0:b9:63:2b:97:7c:1c:92:9b:7a:04:9c:
ac:1e:22:f8:63:f6:ee:89:c7:22:25:6e:7c:89:a8:
97:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:D4:BD:5B:BB:E5:E0:F0:81:7E:CA:13:37:28:27:D4:63:94:69:2C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wdS9W7vl4PCBfsoTNygn1GOUaSw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6c:68:de:8c:08:5e:77:45:b6:a9:1e:af:b6:d4:a2:42:d6:88:
a8:be:e1:2f:17:b5:74:9a:8a:95:74:19:bc:88:a1:d6:38:70:
8d:74:b8:fd:2f:7d:8d:0f:cf:45:75:81:e3:a3:f2:9b:28:9f:
28:f7:39:fd:f3:22:c2:05:9a:5f:7b:87:96:62:73:d7:bc:f1:
8d:34:8f:51:cd:08:b3:0d:86:ad:50:d2:f8:1d:b4:a4:69:72:
26:80:cc:2f:ca:e4:6e:26:df:8b:91:ea:98:4e:74:7c:77:ad:
5c:cc:d7:58:67:32:db:94:cb:88:f4:6b:3a:16:e3:1d:cb:57:
cb:47:2b:f3:fa:17:7e:63:6f:8f:c4:82:48:bd:9b:0c:da:8e:
91:b7:05:9f:23:0a:91:db:2e:ad:04:53:56:83:69:5f:ed:be:
31:21:25:18:18:6b:de:27:1f:30:18:62:db:6c:7f:36:1e:a7:
4e:27:55:d1:a6:ef:b5:36:6e:6d:6b:9e:7b:e0:45:0d:b3:2e:
5b:98:66:41:fc:56:4c:6c:b3:8d:46:90:32:9e:5e:d8:99:85:
cb:c0:8d:8c:a3:4d:28:0a:a4:a4:59:63:93:ac:a5:14:25:ad:
a0:5b:0f:27:79:a7:b0:e6:ce:78:10:3e:60:17:8a:31:fb:5d:
e5:95:01:8f
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYZT5EDASfWk0tCpZFNs5fmFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMjE1MDcwNTEzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMWQ0YmQ1YmJiZTVlMGYwODE3ZWNhMTMzNzI4MjdkNDYzOTQ2OTJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAopVDZMTO4Ut+QtuShcvnfcaaQeV3
eEMK+QYGNJK+z1CWl6F6GV4U9eGC5+iXXUMGkzW88KVkq+v8UVq5jbwJ/5EUHIIg
88yYPx6rcLIqdLE1+r2bDoYs5KmxKehwr7hjuemvp0WLH9VMd9EMP0pp6Tf8vJf4
DFu9ucYe7HWhuUmu6ZQqFTD4dy9cZKUQ+zVUPInXI8nbkv/fuTz+8jBB9t/GueC1
wwn5jooC41aIzhirKi0HZvjQXdK9usJVCIVIv34yR0ZczdTD7JR5yz+myPBI3q5P
K15U0DTM4Mq0ekVuseCguWMrl3wckpt6BJysHiL4Y/buicciJW58iaiXTQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFMHUvVu75eDwgX7KEzcoJ9RjlGksMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvd2RTOVc3dmw0UENCZnNvVE55Z24xR09VYVN3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAGxo3owIXndFtqker7bU
okLWiKi+4S8XtXSaipV0GbyIodY4cI10uP0vfY0Pz0V1geOj8psonyj3Of3zIsIF
ml97h5Zic9e88Y00j1HNCLMNhq1Q0vgdtKRpciaAzC/K5G4m34uR6phOdHx3rVzM
11hnMtuUy4j0azoW4x3LV8tHK/P6F35jb4/Egki9mwzajpG3BZ8jCpHbLq0EU1aD
aV/tvjEhJRgYa94nHzAYYttsfzYep04nVdGm77U2bm1rnnvgRQ2zLluYZkH8Vkxs
s41GkDKeXtiZhcvAjYyjTSgKpKRZY5OspRQlraBbDyd5p7DmzngQPmAXijH7XeWV
AY8=
-----END CERTIFICATE-----
Generated at Wed Apr 30 22:11:09 2025 by rpki-client