Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/WeYUVqvjQZK_OeINbPnMP9as878.roa
File: WeYUVqvjQZK_OeINbPnMP9as878.roa (raw, json)
Hash identifier: Pe24Gh4t6n50D2DiqvN9T3E1QYXafBc5TZn0akjwd6w=
Subject key identifier: 59:E6:14:56:AB:E3:41:92:BF:39:E2:0D:6C:F9:CC:3F:D6:AC:F3:BF
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A2248A3D394C819726525341852A1AC94
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/WeYUVqvjQZK_OeINbPnMP9as878.roa
Signing time: Wed 23 Aug 2023 12:05:00 +0000
ROA not before: Wed 23 Aug 2023 12:05:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18a:178d:7ed9/128 maxlen: 128
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
2001:67c:64:ffff:0:18a:2248:80ba/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:22:48:a3:d3:94:c8:19:72:65:25:34:18:52:a1:ac:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 23 12:05:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=59e61456abe34192bf39e20d6cf9cc3fd6acf3bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b7:dd:b8:55:c0:3a:69:38:26:3b:8e:91:e4:
6a:4f:d1:24:ce:44:66:3f:a4:54:7e:0d:cf:5c:77:
22:7e:f2:5f:80:66:af:87:74:82:8d:0a:a6:56:12:
42:61:82:c4:87:0a:82:ea:90:c2:af:da:bf:1c:54:
39:a5:7c:a9:ea:23:7c:de:c8:cb:3c:f3:ee:e4:3d:
f9:57:82:08:02:51:c8:a1:de:83:59:20:a2:54:ba:
58:9e:6d:eb:8a:97:d5:c6:f6:e2:05:81:9d:8b:6d:
ef:ab:92:d2:dd:64:06:ea:95:13:fd:cd:13:df:8e:
ec:09:69:ac:78:71:8e:41:59:6f:62:ba:4d:ed:64:
bd:ac:a0:7e:e5:7a:92:b7:dc:b7:2b:63:b8:d8:06:
d2:53:f3:50:e5:3e:30:48:9b:42:16:7d:39:1c:46:
e4:13:67:ea:ed:74:a1:00:b5:69:c5:3b:86:3e:92:
77:72:e8:ab:ef:58:d3:02:0a:19:14:aa:94:26:d8:
45:44:a4:9e:56:04:8f:71:87:07:4f:16:6e:67:f8:
07:e5:1f:65:d8:06:9c:c3:b9:e5:7d:7e:10:77:3f:
1f:2d:c2:01:b2:71:bf:67:7e:f0:2d:22:cc:7a:97:
e9:28:df:1f:1b:8e:19:cb:5e:bb:be:a7:03:97:01:
2e:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:E6:14:56:AB:E3:41:92:BF:39:E2:0D:6C:F9:CC:3F:D6:AC:F3:BF
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/WeYUVqvjQZK_OeINbPnMP9as878.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
08:e7:0d:4b:ae:7a:74:56:fb:43:32:ed:28:c1:1d:37:f0:ea:
b9:08:02:58:bf:69:f7:82:e5:a9:91:4f:de:0a:12:08:7c:17:
6a:b8:da:e4:82:5f:86:0e:01:fc:0a:06:8b:76:87:2d:ab:a8:
6e:8c:e8:42:aa:0a:a8:29:dd:aa:8d:d6:6e:12:90:f6:a8:1b:
e4:17:5f:02:16:d5:1d:79:a4:ed:47:f3:32:d2:13:13:8a:ed:
3d:1d:a4:8a:ff:4d:fe:a6:ea:72:31:0a:bf:5c:d0:61:a8:0b:
c8:07:f3:32:b7:53:fa:6f:0f:56:ef:3a:b4:7e:8c:60:50:03:
90:26:18:70:a0:55:c3:ee:8e:b7:d7:bd:b1:54:7b:32:63:13:
dc:48:8b:3f:50:89:a5:f9:3d:09:a3:76:c2:fc:24:6f:ad:7a:
dc:28:5b:e9:65:5e:9d:c6:1f:7f:d7:ef:1e:5e:fa:cd:82:7b:
61:7d:e9:d1:9d:56:b8:f9:c6:f6:77:90:f1:eb:dd:bf:f5:f3:
f7:58:a3:54:58:d1:8d:29:eb:69:8a:bb:f9:23:cd:9e:38:44:
e8:0a:34:21:01:e8:2e:94:55:80:d9:70:63:bb:cf:b1:d1:c9:
0f:95:35:1a:63:bc:8a:93:b0:33:dd:6d:5e:d5:0f:14:0f:9b:
c6:d9:4a:ef
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYoiSKPTlMgZcmUlNBhSoayUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwODIzMTIwNTAwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1OWU2MTQ1NmFiZTM0MTkyYmYzOWUyMGQ2Y2Y5Y2MzZmQ2YWNmM2JmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7fduFXAOmk4JjuOkeRqT9EkzkRm
P6RUfg3PXHcifvJfgGavh3SCjQqmVhJCYYLEhwqC6pDCr9q/HFQ5pXyp6iN83sjL
PPPu5D35V4IIAlHIod6DWSCiVLpYnm3ripfVxvbiBYGdi23vq5LS3WQG6pUT/c0T
347sCWmseHGOQVlvYrpN7WS9rKB+5XqSt9y3K2O42AbSU/NQ5T4wSJtCFn05HEbk
E2fq7XShALVpxTuGPpJ3cuir71jTAgoZFKqUJthFRKSeVgSPcYcHTxZuZ/gH5R9l
2Aacw7nlfX4Qdz8fLcIBsnG/Z37wLSLMepfpKN8fG44Zy167vqcDlwEu0wIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFFnmFFar40GSvzniDWz5zD/WrPO/MB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvV2VZVVZxdmpRWktfT2VJTmJQbk1QOWFzODc4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAAjnDUuuenRW+0My7SjB
HTfw6rkIAli/afeC5amRT94KEgh8F2q42uSCX4YOAfwKBot2hy2rqG6M6EKqCqgp
3aqN1m4SkPaoG+QXXwIW1R15pO1H8zLSExOK7T0dpIr/Tf6m6nIxCr9c0GGoC8gH
8zK3U/pvD1bvOrR+jGBQA5AmGHCgVcPujrfXvbFUezJjE9xIiz9QiaX5PQmjdsL8
JG+tetwoW+llXp3GH3/X7x5e+s2Ce2F96dGdVrj5xvZ3kPHr3b/18/dYo1RY0Y0p
62mKu/kjzZ44ROgKNCEB6C6UVYDZcGO7z7HRyQ+VNRpjvIqTsDPdbV7VDxQPm8bZ
Su8=
-----END CERTIFICATE-----
Generated at Mon Jun 9 00:59:43 2025 by rpki-client