Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wy8VpzqYbGe_bvch0SuqbsJo4Zg.roa
File: wy8VpzqYbGe_bvch0SuqbsJo4Zg.roa (raw, json)
Hash identifier: 7sEn5AWUtQ0KjNavIMVwlA6+dbims97gtwBu/yNQekI=
Subject key identifier: C3:2F:15:A7:3A:98:6C:67:BF:6E:F7:21:D1:2B:AA:6E:C2:68:E1:98
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01878CFA86AA69B58568F2CB10CC9A0C545E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wy8VpzqYbGe_bvch0SuqbsJo4Zg.roa
Signing time: Mon 17 Apr 2023 02:10:41 +0000
ROA not before: Mon 17 Apr 2023 02:10:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:8c:fa:86:aa:69:b5:85:68:f2:cb:10:cc:9a:0c:54:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 17 02:10:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c32f15a73a986c67bf6ef721d12baa6ec268e198
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:a0:19:02:3f:f0:23:25:fd:f7:d3:d1:0e:f5:
0a:bf:e3:19:d1:09:f3:89:e5:35:5c:e8:a8:88:24:
96:cf:60:9f:c5:f5:19:ff:e6:3d:a6:86:1f:76:9e:
40:c4:d3:a4:e3:d0:af:05:ae:40:be:db:9b:bd:42:
e9:02:71:0a:7b:a1:09:fd:69:8e:2a:30:f5:e7:c7:
fb:cb:9e:f3:94:32:be:e6:16:a1:6e:6a:58:af:b7:
fc:02:ea:f7:b7:11:d8:3f:ec:6d:85:d3:fe:60:6d:
c6:03:67:9f:4c:19:a1:49:0d:e6:13:36:fd:0b:b1:
ec:2b:a2:64:17:11:53:4e:8c:f9:d5:f6:96:b2:65:
a1:6e:87:d2:71:8b:76:79:63:e3:2f:34:47:56:11:
8e:7f:73:73:97:6d:be:74:c0:ad:b0:43:f9:40:52:
9d:f2:2e:f3:d1:26:2f:ee:a7:b0:c3:bc:4b:bf:37:
49:6b:05:75:cb:fd:49:cc:9c:95:1e:dc:9c:bb:8a:
22:c5:8d:55:e7:49:59:7f:5b:25:71:20:c5:11:5f:
34:98:c4:1a:f8:f0:1e:59:b1:13:a4:f9:8f:4a:35:
2d:5f:de:b8:b7:a7:d7:78:75:a4:b9:bb:b6:43:34:
86:07:7f:30:a9:78:3f:2f:0e:81:67:56:34:90:38:
1c:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:2F:15:A7:3A:98:6C:67:BF:6E:F7:21:D1:2B:AA:6E:C2:68:E1:98
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wy8VpzqYbGe_bvch0SuqbsJo4Zg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
32:a9:f7:30:3e:af:6f:5b:5e:e2:44:1e:2c:6c:94:d6:c8:b8:
08:ab:3a:17:32:28:b8:d6:34:ab:d5:6c:57:86:b8:86:2c:14:
94:14:25:61:bd:31:7f:73:3b:62:f7:c6:8b:12:e1:12:c0:ce:
ae:f5:75:ac:8f:cf:e5:b4:bc:04:4a:c4:fc:7a:a3:68:54:4b:
32:49:35:47:b8:1c:6e:fb:18:a5:3f:69:34:30:91:f4:4a:64:
f7:2c:11:33:0d:07:23:92:6f:84:0c:bd:46:45:bf:0d:57:38:
79:c5:68:16:b7:de:5c:e6:62:83:af:17:b1:54:53:17:8c:4e:
c4:4d:bf:73:01:57:0a:78:70:11:9f:09:d0:a8:2f:59:33:c9:
b4:4b:7a:b5:d1:72:ec:7a:d1:f3:a7:d4:c0:ad:7b:e2:33:3b:
f8:b6:51:ad:e5:4b:4c:37:77:fc:b8:80:d6:a0:8d:7b:e2:4c:
bc:f0:f2:55:2e:f2:0e:5e:3e:49:23:b0:57:71:17:60:61:0f:
ab:ae:56:cd:b7:ff:0b:45:ce:ff:d0:bd:c6:64:b3:fc:c9:89:
89:c6:c1:05:40:65:2b:2d:b7:53:87:33:9b:82:47:ba:03:da:
80:b1:8a:53:43:1e:14:b6:95:74:1d:51:67:42:4c:97:82:c7:
81:d2:15:b0
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYeM+oaqabWFaPLLEMyaDFReMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNDE3MDIxMDQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMzJmMTVhNzNhOTg2YzY3YmY2ZWY3MjFkMTJiYWE2ZWMyNjhlMTk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6KAZAj/wIyX999PRDvUKv+MZ0Qnz
ieU1XOioiCSWz2CfxfUZ/+Y9poYfdp5AxNOk49CvBa5AvtubvULpAnEKe6EJ/WmO
KjD158f7y57zlDK+5hahbmpYr7f8Aur3txHYP+xthdP+YG3GA2efTBmhSQ3mEzb9
C7HsK6JkFxFTToz51faWsmWhbofScYt2eWPjLzRHVhGOf3Nzl22+dMCtsEP5QFKd
8i7z0SYv7qeww7xLvzdJawV1y/1JzJyVHtycu4oixY1V50lZf1slcSDFEV80mMQa
+PAeWbETpPmPSjUtX964t6fXeHWkubu2QzSGB38wqXg/Lw6BZ1Y0kDgcQQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFMMvFac6mGxnv273IdErqm7CaOGYMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvd3k4VnB6cVliR2VfYnZjaDBTdXFic0pvNFpnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBADKp9zA+r29bXuJEHixs
lNbIuAirOhcyKLjWNKvVbFeGuIYsFJQUJWG9MX9zO2L3xosS4RLAzq71dayPz+W0
vARKxPx6o2hUSzJJNUe4HG77GKU/aTQwkfRKZPcsETMNByOSb4QMvUZFvw1XOHnF
aBa33lzmYoOvF7FUUxeMTsRNv3MBVwp4cBGfCdCoL1kzybRLerXRcux60fOn1MCt
e+IzO/i2Ua3lS0w3d/y4gNagjXviTLzw8lUu8g5ePkkjsFdxF2BhD6uuVs23/wtF
zv/QvcZks/zJiYnGwQVAZSstt1OHM5uCR7oD2oCxilNDHhS2lXQdUWdCTJeCx4HS
FbA=
-----END CERTIFICATE-----
Generated at Sat May 3 02:22:37 2025 by rpki-client