Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wGaEQ8ylE3g7n_bJ-DdSGeS-T8w.roa
File: wGaEQ8ylE3g7n_bJ-DdSGeS-T8w.roa (raw, json)
Hash identifier: cJBmsy5vWgTWoOYHpXsjMCWAAk7qGdx0lCPrXOb6sWw=
Subject key identifier: C0:66:84:43:CC:A5:13:78:3B:9F:F6:C9:F8:37:52:19:E4:BE:4F:CC
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 689EF995
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wGaEQ8ylE3g7n_bJ-DdSGeS-T8w.roa
Signing time: Mon 07 Feb 2022 05:08:27 +0000
ROA not before: Mon 07 Feb 2022 05:08:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17e:a0dd:2f5b/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1755249045 (0x689ef995)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 7 05:08:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c0668443cca513783b9ff6c9f8375219e4be4fcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:64:3b:75:c7:f2:44:c4:00:02:12:1c:7a:9f:
59:40:00:94:0f:05:ad:70:b1:89:83:ec:f8:20:68:
58:32:de:ca:7b:f5:87:9f:14:e2:19:36:1a:7c:81:
68:ea:8d:f4:3e:c7:54:72:40:78:ec:4c:dd:90:9b:
91:08:1c:35:d3:5e:0d:e2:e0:f0:9f:07:0e:a7:5d:
76:70:3e:90:0d:0f:87:87:a9:4c:8c:ce:12:16:bc:
9f:93:49:bd:97:b5:bf:cb:11:c5:4e:46:56:f7:02:
65:ee:b2:21:b5:cd:1c:f6:4b:39:07:f1:6b:34:ec:
c5:90:2a:36:11:66:20:ed:26:7a:be:a5:d6:57:5f:
2b:01:c8:a2:a1:05:7f:17:50:ed:70:80:f5:01:f2:
b7:57:19:ce:10:bf:79:f1:43:c5:88:69:69:76:26:
51:00:7b:f8:b0:a0:ff:f5:64:8a:ff:55:a0:91:f7:
b8:f7:56:3e:fb:36:f4:73:72:86:02:f5:64:2d:12:
57:30:19:8c:9c:a9:3e:31:21:1f:5f:ea:d8:79:3d:
8b:3e:d7:c3:3d:15:5a:e2:0d:9e:4f:bd:40:21:a9:
8d:ee:15:64:fc:8d:0b:f4:40:5e:28:16:73:2e:1b:
8b:84:68:f6:8c:c6:5d:fd:be:02:fc:aa:27:75:e3:
75:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:66:84:43:CC:A5:13:78:3B:9F:F6:C9:F8:37:52:19:E4:BE:4F:CC
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wGaEQ8ylE3g7n_bJ-DdSGeS-T8w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
21:da:e8:18:1f:27:18:5b:1f:f8:b5:cd:37:48:87:37:81:01:
75:b8:55:56:7c:e4:12:97:32:b9:eb:61:dc:50:f9:a6:76:18:
9a:07:bd:87:22:bf:62:15:b5:5f:ee:71:ed:0c:8a:46:59:98:
5a:79:01:64:c2:89:50:44:2b:58:b4:8f:bf:d2:60:72:94:82:
3d:07:5a:86:90:fc:16:68:59:54:6b:fa:29:cd:4a:85:6c:d5:
e1:a4:f5:13:94:75:a4:45:d6:57:0c:1e:1e:3e:9c:07:15:ab:
1a:76:04:9d:3f:37:65:bb:8a:30:64:cb:d0:72:ee:8b:fe:19:
5b:1b:f4:9d:1c:92:f6:e0:6b:9e:f9:4b:3e:22:7d:6d:fd:29:
5f:c8:4d:cf:3b:55:a0:b3:5d:2e:f9:54:d5:20:03:90:12:11:
75:78:eb:8f:a3:1b:b9:5b:9a:57:3e:a4:72:23:78:fe:e8:ad:
1b:bd:69:4d:ba:ce:f5:ab:08:e8:14:1b:13:7f:b8:22:46:1b:
58:a1:41:0b:f1:42:65:7f:11:6c:65:b3:45:52:c3:e2:16:3a:
23:21:47:e3:8d:eb:08:13:9f:bd:a0:77:88:c0:56:ca:17:f4:
e6:60:b6:07:9b:b0:60:cf:6f:ce:ae:c6:6f:ab:85:58:cd:7c:
b9:51:e9:69
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIEaJ75lTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
MjA0N2JlMTViMjc1OTAyZGNmNjE3ZGMzZDBlMTZkYzFmMzA4MDIyMB4XDTIyMDIw
NzA1MDgyN1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYzA2Njg0NDNjY2E1
MTM3ODNiOWZmNmM5ZjgzNzUyMTllNGJlNGZjYzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAOZkO3XH8kTEAAISHHqfWUAAlA8FrXCxiYPs+CBoWDLeynv1
h58U4hk2GnyBaOqN9D7HVHJAeOxM3ZCbkQgcNdNeDeLg8J8HDqdddnA+kA0Ph4ep
TIzOEha8n5NJvZe1v8sRxU5GVvcCZe6yIbXNHPZLOQfxazTsxZAqNhFmIO0mer6l
1ldfKwHIoqEFfxdQ7XCA9QHyt1cZzhC/efFDxYhpaXYmUQB7+LCg//Vkiv9VoJH3
uPdWPvs29HNyhgL1ZC0SVzAZjJypPjEhH1/q2Hk9iz7Xwz0VWuINnk+9QCGpje4V
ZPyNC/RAXigWcy4bi4Ro9ozGXf2+AvyqJ3Xjdb0CAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBTAZoRDzKUTeDuf9sn4N1IZ5L5PzDAfBgNVHSMEGDAWgBRyBHvhWydZAtz2
F9w9DhbcHzCAIjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2NnUjc0VnNuV1FMYzloZmNQUTRXM0I4d2dDSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNWUvNzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8x
L3dHYUVROHlsRTNnN25fYkotRGRTR2VTLVQ4dy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWUv
Nzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8xL2NnUjc0VnNuV1FM
YzloZmNQUTRXM0I4d2dDSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEA8EAGDAPBAIAAjAJAwcAIAEGfABk
MA0GCSqGSIb3DQEBCwUAA4IBAQAh2ugYHycYWx/4tc03SIc3gQF1uFVWfOQSlzK5
62HcUPmmdhiaB72HIr9iFbVf7nHtDIpGWZhaeQFkwolQRCtYtI+/0mBylII9B1qG
kPwWaFlUa/opzUqFbNXhpPUTlHWkRdZXDB4ePpwHFasadgSdPzdlu4owZMvQcu6L
/hlbG/SdHJL24Gue+Us+In1t/SlfyE3PO1Wgs10u+VTVIAOQEhF1eOuPoxu5W5pX
PqRyI3j+6K0bvWlNus71qwjoFBsTf7giRhtYoUEL8UJlfxFsZbNFUsPiFjojIUfj
jesIE5+9oHeIwFbKF/TmYLYHm7Bgz2/OrsZvq4VYzXy5Uelp
-----END CERTIFICATE-----
Generated at Mon Jun 9 11:54:25 2025 by rpki-client