Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/WCO-9-0PwqxIZrVqE7V7oIXO5qY.roa
File: WCO-9-0PwqxIZrVqE7V7oIXO5qY.roa (raw, json)
Hash identifier: Ek0jdyO0LXZAV8ty6rGlD8N8SCwibPabXSY+a13QUl0=
Subject key identifier: 58:23:BE:F7:ED:0F:C2:AC:48:66:B5:6A:13:B5:7B:A0:85:CE:E6:A6
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184233BC8CAB11FC63494BB3EB1CBF2A749
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/WCO-9-0PwqxIZrVqE7V7oIXO5qY.roa
Signing time: Sat 29 Oct 2022 10:13:51 +0000
ROA not before: Sat 29 Oct 2022 10:13:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:23:3b:c8:ca:b1:1f:c6:34:94:bb:3e:b1:cb:f2:a7:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Oct 29 10:13:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5823bef7ed0fc2ac4866b56a13b57ba085cee6a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a6:cf:ab:64:b9:2b:42:24:40:f5:a3:23:2e:
4a:d9:52:c9:27:13:07:e4:fd:17:0f:de:b2:db:b6:
6a:26:0b:e1:de:ad:74:68:f6:59:28:fb:a0:bd:75:
bf:75:13:45:c8:52:2d:6e:af:17:9f:02:d7:83:64:
6e:29:df:81:76:a4:89:4f:ce:98:89:60:38:97:57:
cd:68:9c:98:f9:f8:31:74:99:63:2f:f2:85:27:85:
04:e4:a5:13:11:9c:54:f8:85:57:fe:ea:be:9a:08:
4e:62:81:09:31:2a:d9:c8:fb:ff:e3:cf:a2:02:03:
4f:8f:c5:8d:91:d4:d6:f0:dc:f7:32:e9:cd:29:67:
82:d5:93:92:d1:3b:4e:b7:c1:3f:bc:9f:6b:cf:2e:
7b:cc:82:b2:d0:f0:13:b3:10:f7:88:fe:d1:8e:84:
03:e6:39:64:28:53:f9:ae:c8:b1:09:14:35:d6:14:
f7:66:6c:15:9d:1e:75:11:cb:2e:ef:b6:3f:83:bc:
71:bd:0c:bd:44:69:28:50:cb:fb:14:73:0e:c3:0f:
1c:92:1d:ec:56:e5:22:b1:22:1e:fe:c7:65:fe:0e:
70:9f:59:15:9b:70:c8:a2:be:dd:17:17:3a:fc:44:
a0:8d:c8:6c:83:ab:55:e5:bf:df:2a:86:0a:22:8e:
ad:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:23:BE:F7:ED:0F:C2:AC:48:66:B5:6A:13:B5:7B:A0:85:CE:E6:A6
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/WCO-9-0PwqxIZrVqE7V7oIXO5qY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5a:89:93:cd:65:92:be:08:c1:89:c6:b4:15:8a:3d:de:36:42:
28:4f:87:2b:25:76:74:18:73:f6:fa:fa:14:9e:4d:43:c9:76:
44:48:3a:07:53:79:63:77:57:14:ae:77:7f:ed:9f:b3:c4:2e:
53:98:2f:3f:ad:e8:66:e3:23:6d:be:b1:06:c1:3f:e8:3c:ac:
25:2d:84:52:5a:cc:78:69:3d:5d:db:4b:7a:35:cb:cb:83:a6:
43:f3:32:6f:7a:8e:0f:5f:a2:1f:2c:42:80:f3:89:04:23:5c:
e1:44:db:bd:c5:2e:9c:44:5f:1c:12:70:5c:59:6d:31:08:6c:
0f:8c:c6:45:51:05:ab:38:fc:bb:34:a9:03:fe:02:f1:57:44:
0a:7d:f7:6f:ce:5f:3a:e5:7b:7f:d0:ba:a8:79:c1:9a:81:45:
e3:ec:de:7f:35:29:be:de:9f:a7:d3:68:35:a5:94:1a:b0:b8:
02:65:7c:7c:7d:ad:d5:a9:fc:59:4f:f5:24:75:e5:e8:5d:a4:
0f:ed:1e:73:c8:ca:0f:9a:a8:4e:5e:a6:2c:52:c8:ad:f7:14:
09:13:92:5b:49:46:8f:8a:99:1f:44:28:a2:a2:5e:d0:a9:90:
59:52:78:18:77:8d:07:98:8f:c4:cf:a6:df:d0:26:55:5c:3d:
63:d6:12:09
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYQjO8jKsR/GNJS7PrHL8qdJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIxMDI5MTAxMzUxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ODIzYmVmN2VkMGZjMmFjNDg2NmI1NmExM2I1N2JhMDg1Y2VlNmE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsabPq2S5K0IkQPWjIy5K2VLJJxMH
5P0XD96y27ZqJgvh3q10aPZZKPugvXW/dRNFyFItbq8XnwLXg2RuKd+BdqSJT86Y
iWA4l1fNaJyY+fgxdJljL/KFJ4UE5KUTEZxU+IVX/uq+mghOYoEJMSrZyPv/48+i
AgNPj8WNkdTW8Nz3MunNKWeC1ZOS0TtOt8E/vJ9rzy57zIKy0PATsxD3iP7RjoQD
5jlkKFP5rsixCRQ11hT3ZmwVnR51Ecsu77Y/g7xxvQy9RGkoUMv7FHMOww8ckh3s
VuUisSIe/sdl/g5wn1kVm3DIor7dFxc6/ESgjchsg6tV5b/fKoYKIo6tVQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFFgjvvftD8KsSGa1ahO1e6CFzuamMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvV0NPLTktMFB3cXhJWnJWcUU3VjdvSVhPNXFZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAFqJk81lkr4IwYnGtBWK
Pd42QihPhysldnQYc/b6+hSeTUPJdkRIOgdTeWN3VxSud3/tn7PELlOYLz+t6Gbj
I22+sQbBP+g8rCUthFJazHhpPV3bS3o1y8uDpkPzMm96jg9foh8sQoDziQQjXOFE
273FLpxEXxwScFxZbTEIbA+MxkVRBas4/Ls0qQP+AvFXRAp992/OXzrle3/Quqh5
wZqBRePs3n81Kb7en6fTaDWllBqwuAJlfHx9rdWp/FlP9SR15ehdpA/tHnPIyg+a
qE5epixSyK33FAkTkltJRo+KmR9EKKKiXtCpkFlSeBh3jQeYj8TPpt/QJlVcPWPW
Egk=
-----END CERTIFICATE-----
Generated at Tue Jun 10 05:53:34 2025 by rpki-client