Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wiGmOtv854mMEQYvLgno7Jq7HqQ.roa
File: wiGmOtv854mMEQYvLgno7Jq7HqQ.roa (raw, json)
Hash identifier: +c+Fkij82k2Vxacaf0AxFFOCK5FXMLv5/s6i4NVouMU=
Subject key identifier: C2:21:A6:3A:DB:FC:E7:89:8C:11:06:2F:2E:09:E8:EC:9A:BB:1E:A4
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A153896AB535B24329072A60212C30100
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wiGmOtv854mMEQYvLgno7Jq7HqQ.roa
Signing time: Sun 20 Aug 2023 23:12:24 +0000
ROA not before: Sun 20 Aug 2023 23:12:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:15:38:96:ab:53:5b:24:32:90:72:a6:02:12:c3:01:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 20 23:12:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c221a63adbfce7898c11062f2e09e8ec9abb1ea4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d4:b0:1a:5f:a3:42:2c:50:60:b9:29:5d:13:
98:63:b6:77:b9:67:71:de:b4:92:4d:87:c7:76:d7:
9f:48:09:20:4e:01:f5:b0:6f:bb:82:ca:c3:91:93:
8a:b2:c0:ba:84:22:b8:3c:da:da:cf:2c:0e:8e:b6:
8d:ab:7b:f1:9d:79:9b:e9:63:65:93:22:54:69:88:
f2:cb:b5:e6:ef:3a:84:b0:71:c7:15:e6:37:13:d3:
8e:13:fd:9e:7f:23:b4:f8:1b:5b:a2:df:80:1d:8b:
2f:20:46:4e:95:74:7a:a1:a7:01:eb:3e:24:2e:25:
ee:96:e5:37:ee:95:4d:e7:23:be:fb:6c:25:e5:2a:
1d:e7:3a:62:b3:99:93:8c:83:ef:ae:cb:27:c1:16:
40:dd:86:b4:72:a5:f8:6d:1c:bf:53:cf:35:29:5c:
cf:94:58:01:14:ef:15:83:49:0e:6d:39:d1:5a:00:
7a:c7:e9:97:89:d7:8b:ff:50:79:d8:6b:7d:23:25:
4a:16:e3:e3:34:55:6c:e5:8b:02:84:1e:80:d7:f7:
c4:62:fa:6b:de:5b:1a:9b:38:64:83:0a:3c:75:45:
e8:23:79:e5:a5:51:98:91:8c:51:53:7b:c7:9d:b2:
fd:74:f4:91:04:29:25:b5:bd:7f:59:c1:52:9d:a0:
33:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:21:A6:3A:DB:FC:E7:89:8C:11:06:2F:2E:09:E8:EC:9A:BB:1E:A4
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wiGmOtv854mMEQYvLgno7Jq7HqQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5b:5b:68:67:ed:bf:34:9c:1e:f8:7b:13:56:c0:98:e1:6b:a1:
f4:0e:3b:31:0f:94:14:58:4e:2a:75:7c:da:f9:e3:60:99:52:
ab:8e:cb:55:f1:3b:15:c6:cf:52:1b:0e:b1:25:9f:e5:be:c7:
2b:29:f9:4b:37:04:d7:4e:28:de:0c:5b:31:88:a3:fd:c1:e4:
01:ab:72:ed:71:83:48:86:52:9b:09:85:75:bc:94:3b:29:c9:
48:e7:56:70:85:41:07:c3:08:74:e3:0b:24:30:43:c7:af:0b:
19:6d:b5:14:ae:42:14:7d:71:d2:60:62:76:b8:95:d6:cd:64:
6d:b1:19:66:d7:ea:73:4d:41:6c:64:2b:7c:fe:e3:ca:62:d9:
4c:a5:2d:8d:aa:0d:f1:be:47:53:3e:f1:04:33:00:a1:ad:d5:
26:da:99:82:e8:ce:3a:08:80:87:ed:c1:1f:df:5c:b5:79:6d:
49:87:dc:b8:62:a6:7d:ef:3f:c6:9c:93:d2:1d:eb:35:a0:8c:
13:98:02:cd:25:4d:80:75:23:08:b9:df:2c:3d:d7:e9:ce:a3:
67:3f:21:6d:8e:20:85:62:55:75:54:1c:70:15:8c:d3:86:08:
ee:38:d1:7a:95:9c:9b:68:79:3b:c4:72:7c:4d:37:93:b5:b4:
4f:f6:8f:2d
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYoVOJarU1skMpBypgISwwEAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwODIwMjMxMjI0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMjIxYTYzYWRiZmNlNzg5OGMxMTA2MmYyZTA5ZThlYzlhYmIxZWE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvdSwGl+jQixQYLkpXROYY7Z3uWdx
3rSSTYfHdtefSAkgTgH1sG+7gsrDkZOKssC6hCK4PNrazywOjraNq3vxnXmb6WNl
kyJUaYjyy7Xm7zqEsHHHFeY3E9OOE/2efyO0+Btbot+AHYsvIEZOlXR6oacB6z4k
LiXuluU37pVN5yO++2wl5Sod5zpis5mTjIPvrssnwRZA3Ya0cqX4bRy/U881KVzP
lFgBFO8Vg0kObTnRWgB6x+mXideL/1B52Gt9IyVKFuPjNFVs5YsChB6A1/fEYvpr
3lsamzhkgwo8dUXoI3nlpVGYkYxRU3vHnbL9dPSRBCkltb1/WcFSnaAzXwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFMIhpjrb/OeJjBEGLy4J6Oyaux6kMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvd2lHbU90djg1NG1NRVFZdkxnbm83SnE3SHFRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAFtbaGftvzScHvh7E1bA
mOFrofQOOzEPlBRYTip1fNr542CZUquOy1XxOxXGz1IbDrEln+W+xysp+Us3BNdO
KN4MWzGIo/3B5AGrcu1xg0iGUpsJhXW8lDspyUjnVnCFQQfDCHTjCyQwQ8evCxlt
tRSuQhR9cdJgYna4ldbNZG2xGWbX6nNNQWxkK3z+48pi2UylLY2qDfG+R1M+8QQz
AKGt1SbamYLozjoIgIftwR/fXLV5bUmH3Lhipn3vP8ack9Id6zWgjBOYAs0lTYB1
Iwi53yw91+nOo2c/IW2OIIViVXVUHHAVjNOGCO440XqVnJtoeTvEcnxNN5O1tE/2
jy0=
-----END CERTIFICATE-----
Generated at Sun May 4 11:57:39 2025 by rpki-client