Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wvr0059jTnJBl9RrSeMPVLF2GLg.roa
File: wvr0059jTnJBl9RrSeMPVLF2GLg.roa (raw, json)
Hash identifier: fj6+3rjS/FOHGx0dV4lrt0h9wTTj6T751NOt79EOddI=
Subject key identifier: C2:FA:F4:D3:9F:63:4E:72:41:97:D4:6B:49:E3:0F:54:B1:76:18:B8
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018961D8E68DB49545A458CA6A678ADB529B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wvr0059jTnJBl9RrSeMPVLF2GLg.roa
Signing time: Mon 17 Jul 2023 03:15:52 +0000
ROA not before: Mon 17 Jul 2023 03:15:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:61:d8:e6:8d:b4:95:45:a4:58:ca:6a:67:8a:db:52:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 17 03:15:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c2faf4d39f634e724197d46b49e30f54b17618b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:04:78:90:ed:28:3b:87:fa:52:63:c9:23:04:
70:c4:6f:b7:ba:b1:39:d0:88:a9:46:28:98:39:3f:
82:31:52:94:8e:db:f2:4f:b2:ab:ce:39:5d:ba:fc:
4b:a2:34:2d:bc:e2:cc:6b:9e:50:2e:37:e3:a5:95:
59:2d:d8:bf:54:35:10:fd:c9:3c:f1:35:e9:37:09:
85:dd:8c:02:ee:34:9b:1d:f7:bd:43:c3:89:f2:a0:
28:fa:f8:18:ed:85:16:26:bd:bd:1d:23:a4:0b:76:
b4:49:94:a0:b4:0d:ff:d0:9e:96:98:23:16:e2:61:
c9:4b:88:c7:dc:89:76:06:4b:66:00:3b:e8:fa:50:
eb:7f:28:1f:96:be:34:f5:26:38:3f:d3:56:77:ba:
70:3f:79:e4:a5:b0:9b:a3:b1:ac:4c:ed:12:9b:fa:
20:db:92:0d:35:8c:01:8c:aa:f5:a0:cb:75:3d:e9:
34:08:69:8f:82:9a:c9:ca:34:44:a6:93:13:a3:77:
36:03:7d:a7:57:03:a2:a9:42:6a:43:32:84:d8:7a:
0b:29:18:a2:fa:82:e8:e0:71:c5:02:90:3d:13:24:
9e:fa:c2:07:dd:dd:6e:fc:f4:d8:28:9c:92:d6:7c:
3b:77:6d:cd:c9:51:b9:4e:ea:49:b5:80:a0:9f:fd:
8e:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:FA:F4:D3:9F:63:4E:72:41:97:D4:6B:49:E3:0F:54:B1:76:18:B8
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wvr0059jTnJBl9RrSeMPVLF2GLg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a0:15:03:af:94:0e:25:3b:2f:64:ae:80:81:98:c4:3c:93:12:
ee:6a:2f:25:77:97:0d:d3:70:cc:7c:c3:6b:2d:0f:66:61:a2:
66:99:07:86:41:c1:7f:33:23:a8:a5:58:ed:2f:79:74:6d:bc:
c8:d6:87:0a:0c:fc:79:e0:41:ec:96:5c:da:f3:06:f9:e8:02:
5c:47:bf:8e:63:89:c3:fa:9b:3e:25:2a:34:4d:c2:f9:f0:41:
21:a4:10:8d:77:5e:4d:56:2c:33:f2:10:40:6a:a9:ab:96:6e:
aa:f6:fa:09:32:29:88:79:7a:8a:7d:3b:1b:e1:6a:34:66:78:
cb:5e:11:89:b3:3d:4d:c6:bd:a1:7e:b0:6b:3a:76:a8:39:b2:
eb:71:76:9f:d5:bc:d7:85:8a:8f:3e:4e:83:ae:7e:47:9e:9d:
cc:8a:87:20:7b:40:cc:76:8f:c2:4d:4d:ca:f1:32:7c:70:62:
49:4c:7d:e1:0e:b1:1f:3e:24:2a:14:e4:8c:63:a0:c6:a7:b6:
15:72:28:dc:0d:49:f4:3a:da:ab:06:a4:d8:5c:54:a7:3d:cc:
13:96:09:56:66:54:00:b5:4f:d2:2d:55:47:41:d4:ff:6b:2d:
19:e6:6a:6a:d4:3f:6a:d1:09:61:32:17:04:13:55:f9:ec:e4:
4a:90:93:06
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYlh2OaNtJVFpFjKameK21KbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNzE3MDMxNTUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMmZhZjRkMzlmNjM0ZTcyNDE5N2Q0NmI0OWUzMGY1NGIxNzYxOGI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgQR4kO0oO4f6UmPJIwRwxG+3urE5
0IipRiiYOT+CMVKUjtvyT7KrzjlduvxLojQtvOLMa55QLjfjpZVZLdi/VDUQ/ck8
8TXpNwmF3YwC7jSbHfe9Q8OJ8qAo+vgY7YUWJr29HSOkC3a0SZSgtA3/0J6WmCMW
4mHJS4jH3Il2BktmADvo+lDrfygflr409SY4P9NWd7pwP3nkpbCbo7GsTO0Sm/og
25INNYwBjKr1oMt1Pek0CGmPgprJyjREppMTo3c2A32nVwOiqUJqQzKE2HoLKRii
+oLo4HHFApA9EySe+sIH3d1u/PTYKJyS1nw7d23NyVG5TupJtYCgn/2OEwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFML69NOfY05yQZfUa0njD1Sxdhi4MB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvd3ZyMDA1OWpUbkpCbDlSclNlTVBWTEYyR0xnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAKAVA6+UDiU7L2SugIGY
xDyTEu5qLyV3lw3TcMx8w2stD2ZhomaZB4ZBwX8zI6ilWO0veXRtvMjWhwoM/Hng
QeyWXNrzBvnoAlxHv45jicP6mz4lKjRNwvnwQSGkEI13Xk1WLDPyEEBqqauWbqr2
+gkyKYh5eop9OxvhajRmeMteEYmzPU3GvaF+sGs6dqg5sutxdp/VvNeFio8+ToOu
fkeencyKhyB7QMx2j8JNTcrxMnxwYklMfeEOsR8+JCoU5IxjoManthVyKNwNSfQ6
2qsGpNhcVKc9zBOWCVZmVAC1T9ItVUdB1P9rLRnmamrUP2rRCWEyFwQTVfns5EqQ
kwY=
-----END CERTIFICATE-----
Generated at Tue Jun 10 11:44:25 2025 by rpki-client