Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/W8H5Eeak_4AzcTuILQo_7m8cocE.roa
File: W8H5Eeak_4AzcTuILQo_7m8cocE.roa (raw, json)
Hash identifier: 2V0+PCF9Ftqe5t8JyRD5J0MSf6Xl3/ovPOV8T07ECqE=
Subject key identifier: 5B:C1:F9:11:E6:A4:FF:80:33:71:3B:88:2D:0A:3F:EE:6F:1C:A1:C1
Certificate issuer: /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial: 018F5E50AD71C192782013649C3876990DBC
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/W8H5Eeak_4AzcTuILQo_7m8cocE.roa
Signing time: Thu 09 May 2024 17:04:56 +0000
ROA not before: Thu 09 May 2024 17:04:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18f:543:9e41/128 maxlen: 128
2001:67c:64:ffff:0:18f:5e50:f6a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:5e:50:ad:71:c1:92:78:20:13:64:9c:38:76:99:0d:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Validity
Not Before: May 9 17:04:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5bc1f911e6a4ff8033713b882d0a3fee6f1ca1c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:15:bf:76:eb:eb:1e:41:70:d6:dc:8b:3c:16:
79:98:9b:c0:56:f6:6a:1b:03:e3:27:e4:b5:0d:a5:
92:5a:c9:f3:4b:51:2d:fe:9c:54:6a:75:40:46:52:
70:50:6c:ef:9e:8b:e3:90:85:0a:9c:c0:79:0f:ad:
9b:ee:02:9c:57:5f:e2:46:3e:a4:51:a3:79:a7:9d:
ca:a0:f3:53:81:c7:89:62:f1:3b:29:30:05:89:78:
58:29:d5:07:64:57:2e:82:55:30:27:0b:74:49:27:
73:eb:c8:ad:34:0f:8a:4a:8d:2a:03:f2:82:39:47:
e2:3f:3c:93:ca:1d:35:2b:b4:7c:3b:32:ce:97:4f:
e9:34:86:82:fb:83:3b:77:1c:ab:24:40:85:79:6d:
71:52:bc:53:f2:59:d9:a1:71:f5:e4:d1:0f:21:c0:
17:f8:08:74:13:f0:fa:b1:57:3d:c8:c5:82:2a:7d:
4f:d1:e9:9d:cc:63:81:29:c6:f9:b9:91:1b:86:36:
05:e0:1c:0c:19:5b:65:58:4f:78:69:a3:5e:6a:93:
f7:3f:45:fb:01:7f:6b:8e:6f:d3:a1:99:a2:81:b5:
ee:8d:16:95:34:d7:83:75:4c:28:6f:46:d8:df:5f:
64:c3:f4:12:cc:f0:6a:52:83:75:e8:04:52:28:f0:
df:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:C1:F9:11:E6:A4:FF:80:33:71:3B:88:2D:0A:3F:EE:6F:1C:A1:C1
X509v3 Authority Key Identifier:
keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/W8H5Eeak_4AzcTuILQo_7m8cocE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1c:ad:b1:1f:6c:72:1e:03:a8:64:e2:27:24:d1:4d:5c:92:26:
fe:87:a1:b3:18:d7:3c:de:ed:61:bc:7f:cd:a8:eb:1d:99:64:
af:3f:30:da:aa:50:be:fb:c0:1e:1e:e0:fb:0f:d6:ec:64:41:
8a:a8:f3:bf:cc:8b:3f:f3:ac:3f:b6:a1:56:4d:1e:9f:dd:a3:
09:8f:d2:d7:58:24:39:47:45:f4:49:fa:11:1b:87:bb:a3:b2:
9d:61:76:b4:dd:56:4d:88:73:0a:f8:ce:a8:37:8e:13:90:1a:
61:0c:b5:97:ac:95:cb:07:08:df:d0:65:44:67:57:69:88:82:
31:57:7c:37:21:40:a1:a9:21:d5:b6:dd:ea:c2:6f:f2:63:43:
9c:6a:2b:bd:02:5f:a0:21:e7:b9:7b:ce:8f:df:69:00:99:4a:
ca:75:12:1b:8e:b7:f5:72:33:a3:f3:fe:5e:0b:3e:39:f7:cf:
54:94:15:20:24:23:c4:56:1b:4d:13:86:ce:e6:b0:72:fb:51:
98:74:a6:78:a0:7a:7d:6d:16:1b:83:6b:99:ef:82:08:da:20:
73:bd:e8:6e:0a:9d:50:e2:ad:d6:e6:9e:3d:bd:c2:c8:a2:9c:
c7:b9:33:d9:a9:d0:56:59:44:a4:42:7a:09:31:a6:cf:89:b2:
7d:73:4f:bd
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY9eUK1xwZJ4IBNknDh2mQ28MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyYmVjNDFiZDJmM2IxNzlkZTA5NTE0MzA2NTMwYmQzZmJh
YzcwN2IwHhcNMjQwNTA5MTcwNDU2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YmMxZjkxMWU2YTRmZjgwMzM3MTNiODgyZDBhM2ZlZTZmMWNhMWMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArxW/duvrHkFw1tyLPBZ5mJvAVvZq
GwPjJ+S1DaWSWsnzS1Et/pxUanVARlJwUGzvnovjkIUKnMB5D62b7gKcV1/iRj6k
UaN5p53KoPNTgceJYvE7KTAFiXhYKdUHZFcuglUwJwt0SSdz68itNA+KSo0qA/KC
OUfiPzyTyh01K7R8OzLOl0/pNIaC+4M7dxyrJECFeW1xUrxT8lnZoXH15NEPIcAX
+Ah0E/D6sVc9yMWCKn1P0emdzGOBKcb5uZEbhjYF4BwMGVtlWE94aaNeapP3P0X7
AX9rjm/ToZmigbXujRaVNNeDdUwob0bY319kw/QSzPBqUoN16ARSKPDfEQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFFvB+RHmpP+AM3E7iC0KP+5vHKHBMB8GA1UdIwQY
MBaAFLK+xBvS87F53glRQwZTC9P7rHB7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3I3RUc5THpzWG5lQ1ZGREJsTUwwX3VzY0hzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9kODkwMjUtZDZmMy00ODkxLTlkODYt
ZDEyZjAzOWRiMmM5LzEvVzhINUVlYWtfNEF6Y1R1SUxRb183bThjb2NFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS9kODkwMjUtZDZmMy00ODkxLTlkODYtZDEyZjAzOWRiMmM5
LzEvc3I3RUc5THpzWG5lQ1ZGREJsTUwwX3VzY0hzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBABytsR9sch4DqGTiJyTR
TVySJv6HobMY1zze7WG8f82o6x2ZZK8/MNqqUL77wB4e4PsP1uxkQYqo87/Miz/z
rD+2oVZNHp/dowmP0tdYJDlHRfRJ+hEbh7ujsp1hdrTdVk2Icwr4zqg3jhOQGmEM
tZeslcsHCN/QZURnV2mIgjFXfDchQKGpIdW23erCb/JjQ5xqK70CX6Ah57l7zo/f
aQCZSsp1EhuOt/VyM6Pz/l4LPjn3z1SUFSAkI8RWG00Ths7msHL7UZh0pnigen1t
FhuDa5nvggjaIHO96G4KnVDirdbmnj29wsiinMe5M9mp0FZZRKRCegkxps+Jsn1z
T70=
-----END CERTIFICATE-----
Generated at Sun Apr 20 04:25:09 2025 by rpki-client