Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wpZrzodiJ9BC2DklCeKSb8_z-KQ.roa
File: wpZrzodiJ9BC2DklCeKSb8_z-KQ.roa (raw, json)
Hash identifier: D/Zdw/bTG8EVmvAl991et0wT2QyCmAZc6SKOM8Wq6UA=
Subject key identifier: C2:96:6B:CE:87:62:27:D0:42:D8:39:25:09:E2:92:6F:CF:F3:F8:A4
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01861019CF9A69B6F86596FEE85090B8F2E5
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wpZrzodiJ9BC2DklCeKSb8_z-KQ.roa
Signing time: Thu 02 Feb 2023 03:09:32 +0000
ROA not before: Thu 02 Feb 2023 03:09:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:10:19:cf:9a:69:b6:f8:65:96:fe:e8:50:90:b8:f2:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 2 03:09:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c2966bce876227d042d8392509e2926fcff3f8a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a2:75:5d:2d:a1:eb:c3:75:c0:16:38:14:db:
41:ff:1e:b3:2a:ce:5d:b2:bf:d9:e2:e4:27:7c:d8:
4a:f3:de:9e:57:b8:93:34:b9:02:df:f2:91:41:20:
d1:80:9a:25:3d:91:4a:85:3e:f0:8f:3a:a7:af:d1:
2d:36:42:86:d6:fb:82:1b:46:36:b2:ce:86:79:65:
cd:cd:b0:29:a6:6e:1d:4a:b7:1a:7e:2a:74:f1:ab:
5f:66:79:3c:85:89:90:d3:69:38:5c:e5:01:93:37:
4c:96:72:18:9d:e9:38:30:f4:4b:05:74:19:01:44:
14:83:fb:93:ad:82:46:d5:5d:8d:3d:53:eb:c3:a9:
ac:3c:cf:54:4e:a5:28:c2:c7:20:30:6e:d5:fa:36:
37:a1:fc:16:65:a0:d0:75:66:14:40:45:7f:aa:a9:
b1:85:43:e9:9c:04:28:b1:d2:5d:87:a4:24:61:9d:
62:17:d7:2c:94:5e:3b:45:d7:a0:1b:74:91:c0:c1:
a4:91:b9:ec:c4:b2:21:61:6e:d5:8c:02:01:ff:87:
a6:35:27:aa:ea:c6:59:b5:42:a0:e8:66:e2:f1:0d:
a7:a6:62:f4:78:04:f5:22:c5:90:1a:fc:a8:aa:a9:
53:18:da:0f:0f:95:c6:19:dd:9d:9e:51:ac:9c:a8:
9a:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:96:6B:CE:87:62:27:D0:42:D8:39:25:09:E2:92:6F:CF:F3:F8:A4
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wpZrzodiJ9BC2DklCeKSb8_z-KQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
07:bd:7a:13:75:d0:fd:7f:44:b8:54:40:25:f3:a0:e4:93:0e:
c8:e6:0a:64:1a:e5:85:8a:66:df:51:c2:35:8f:0f:36:9d:8d:
e5:50:35:60:28:79:76:58:40:dc:99:83:70:28:d3:34:36:ef:
68:e9:98:ca:c4:8c:13:20:a3:a1:ad:2f:34:9b:ef:91:ee:62:
c3:5a:e5:2c:c8:60:0f:63:43:36:ec:1f:77:13:ba:c7:cf:bb:
e0:64:a9:bf:8d:34:f1:b0:81:da:53:55:83:12:27:78:c9:e9:
c6:2d:7c:90:bb:6d:4c:14:02:da:53:20:04:22:df:2b:51:7f:
9a:e4:11:f9:d5:3c:20:ec:58:f4:db:8d:61:a8:4c:57:ef:0f:
8f:76:f2:dc:ec:c3:96:75:f7:7b:d5:c5:85:e9:cb:d9:15:c4:
4d:2c:dc:1f:0c:f1:15:6a:4e:d5:bd:14:6f:cf:2b:b2:60:b8:
45:7a:c1:81:45:51:a1:8b:d7:aa:47:6a:69:5d:5f:a0:7e:ef:
ec:ce:87:5c:7f:02:17:93:f8:ba:88:83:7f:e3:ba:66:42:34:
25:64:3b:95:1a:be:d3:d4:bb:98:23:b1:24:d2:88:a1:43:59:
51:64:7b:59:37:40:a5:6d:7b:54:d6:81:ed:c9:2d:be:8c:8f:
ab:3b:57:8d
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYYQGc+aabb4ZZb+6FCQuPLlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMjAyMDMwOTMyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMjk2NmJjZTg3NjIyN2QwNDJkODM5MjUwOWUyOTI2ZmNmZjNmOGE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtqJ1XS2h68N1wBY4FNtB/x6zKs5d
sr/Z4uQnfNhK896eV7iTNLkC3/KRQSDRgJolPZFKhT7wjzqnr9EtNkKG1vuCG0Y2
ss6GeWXNzbAppm4dSrcafip08atfZnk8hYmQ02k4XOUBkzdMlnIYnek4MPRLBXQZ
AUQUg/uTrYJG1V2NPVPrw6msPM9UTqUowscgMG7V+jY3ofwWZaDQdWYUQEV/qqmx
hUPpnAQosdJdh6QkYZ1iF9cslF47RdegG3SRwMGkkbnsxLIhYW7VjAIB/4emNSeq
6sZZtUKg6Gbi8Q2npmL0eAT1IsWQGvyoqqlTGNoPD5XGGd2dnlGsnKiaCQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFMKWa86HYifQQtg5JQnikm/P8/ikMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvd3BacnpvZGlKOUJDMkRrbENlS1NiOF96LUtRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAAe9ehN10P1/RLhUQCXz
oOSTDsjmCmQa5YWKZt9RwjWPDzadjeVQNWAoeXZYQNyZg3Ao0zQ272jpmMrEjBMg
o6GtLzSb75HuYsNa5SzIYA9jQzbsH3cTusfPu+Bkqb+NNPGwgdpTVYMSJ3jJ6cYt
fJC7bUwUAtpTIAQi3ytRf5rkEfnVPCDsWPTbjWGoTFfvD4928tzsw5Z193vVxYXp
y9kVxE0s3B8M8RVqTtW9FG/PK7JguEV6wYFFUaGL16pHamldX6B+7+zOh1x/AheT
+LqIg3/jumZCNCVkO5UavtPUu5gjsSTSiKFDWVFke1k3QKVte1TWge3JLb6Mj6s7
V40=
-----END CERTIFICATE-----
Generated at Wed Apr 30 22:09:38 2025 by rpki-client