Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3A_nv_W6ZLjScvvRIsm-IpSgu_8.roa
File: 3A_nv_W6ZLjScvvRIsm-IpSgu_8.roa (raw, json)
Hash identifier: z8OodDibJB4fOTYMVoHk5yD9t+sibvAePbSnrALP0As=
Subject key identifier: DC:0F:E7:BF:F5:BA:64:B8:D2:72:FB:D1:22:C9:BE:22:94:A0:BB:FF
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01874A41BCB7F8720C5BFBDCF76474F16A98
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3A_nv_W6ZLjScvvRIsm-IpSgu_8.roa
Signing time: Tue 04 Apr 2023 03:13:54 +0000
ROA not before: Tue 04 Apr 2023 03:13:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:4a:41:bc:b7:f8:72:0c:5b:fb:dc:f7:64:74:f1:6a:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 4 03:13:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dc0fe7bff5ba64b8d272fbd122c9be2294a0bbff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b3:dd:65:72:96:9a:c8:20:ec:96:a1:82:a6:
9d:d0:04:c6:47:44:cc:93:5f:f1:56:f3:13:73:ef:
5f:f5:d9:df:55:be:97:15:26:aa:2c:66:02:4a:72:
5c:93:1a:c9:50:d1:06:52:50:ff:b7:55:19:73:25:
5f:da:66:28:ab:73:d0:0f:9f:3b:1d:08:f9:d3:f3:
d9:c2:43:0d:6d:81:d6:5f:fe:4c:50:91:8c:0b:5b:
ed:de:72:f2:07:81:72:61:5b:37:12:bf:6e:a2:ac:
e2:ce:b3:62:5f:01:5d:0a:28:9e:fa:8b:5a:88:1e:
99:e3:e0:35:a7:0d:e6:37:9a:c6:0c:3a:27:80:9a:
7b:99:c4:e9:04:bf:30:ca:71:b8:ea:8c:fd:8a:9f:
ff:de:be:24:b3:de:b0:6c:cb:b9:cc:05:25:3e:3a:
a2:21:55:17:70:a5:37:89:bf:8a:40:88:3f:c0:66:
50:f5:12:3c:fe:4f:d2:7a:de:77:1b:d6:51:d8:40:
e7:f8:2a:43:bc:a7:08:ad:cd:4a:67:31:a4:45:3d:
59:30:6e:c7:a6:8c:54:0a:ec:bb:59:75:35:98:db:
06:c5:54:2b:24:8e:b0:59:66:ee:c3:11:65:9e:4f:
f0:34:f9:2d:b6:e9:16:6a:27:dd:d7:c1:ca:1e:c1:
30:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:0F:E7:BF:F5:BA:64:B8:D2:72:FB:D1:22:C9:BE:22:94:A0:BB:FF
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3A_nv_W6ZLjScvvRIsm-IpSgu_8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
32:a9:8c:d4:9d:05:ea:03:57:73:45:8d:b9:f0:3f:f5:ca:a1:
33:6d:8c:e1:2e:f3:46:f7:80:bf:b2:2c:25:1c:f6:ed:db:a7:
f7:44:18:99:82:c3:13:ae:ed:c4:66:28:bd:90:83:a7:8b:00:
8a:32:bb:c5:d2:fe:31:93:d2:de:83:0d:1d:be:8b:60:92:f7:
7f:24:a4:dc:f6:38:6e:1b:88:15:0c:7c:9c:6e:95:70:30:ec:
ec:b3:92:cd:c7:b2:08:3f:01:55:44:cd:2f:ea:bc:fb:30:43:
ec:31:7b:d4:a1:bf:fa:95:c7:e8:47:07:c7:97:6f:0a:2b:d7:
00:13:84:d3:9a:fa:25:d2:fa:0b:f9:9d:19:ec:06:d7:54:78:
cf:70:34:56:24:58:9e:33:d6:50:11:8a:5c:dc:ab:7b:51:30:
e9:52:37:2e:76:d3:4c:7e:fd:25:71:d1:ab:bb:88:37:9c:a9:
5a:93:e6:46:6b:17:98:26:3a:9c:4b:c6:55:0c:7e:85:bb:7e:
6d:ed:78:1d:4d:03:c6:6d:e6:90:c7:73:79:d7:9f:86:a0:3f:
f8:5b:6b:d2:1c:ec:62:31:a3:f6:3a:c6:a0:7d:64:b6:5c:b9:
eb:04:d1:eb:0a:39:44:00:02:bf:aa:52:05:a7:31:2d:36:8c:
06:ed:74:e2
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYdKQby3+HIMW/vc92R08WqYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNDA0MDMxMzU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYzBmZTdiZmY1YmE2NGI4ZDI3MmZiZDEyMmM5YmUyMjk0YTBiYmZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvrPdZXKWmsgg7Jahgqad0ATGR0TM
k1/xVvMTc+9f9dnfVb6XFSaqLGYCSnJckxrJUNEGUlD/t1UZcyVf2mYoq3PQD587
HQj50/PZwkMNbYHWX/5MUJGMC1vt3nLyB4FyYVs3Er9uoqzizrNiXwFdCiie+ota
iB6Z4+A1pw3mN5rGDDongJp7mcTpBL8wynG46oz9ip//3r4ks96wbMu5zAUlPjqi
IVUXcKU3ib+KQIg/wGZQ9RI8/k/Set53G9ZR2EDn+CpDvKcIrc1KZzGkRT1ZMG7H
poxUCuy7WXU1mNsGxVQrJI6wWWbuwxFlnk/wNPkttukWaifd18HKHsEwdwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFNwP57/1umS40nL70SLJviKUoLv/MB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvM0FfbnZfVzZaTGpTY3Z2UklzbS1JcFNndV84LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBADKpjNSdBeoDV3NFjbnw
P/XKoTNtjOEu80b3gL+yLCUc9u3bp/dEGJmCwxOu7cRmKL2Qg6eLAIoyu8XS/jGT
0t6DDR2+i2CS938kpNz2OG4biBUMfJxulXAw7Oyzks3Hsgg/AVVEzS/qvPswQ+wx
e9Shv/qVx+hHB8eXbwor1wAThNOa+iXS+gv5nRnsBtdUeM9wNFYkWJ4z1lARilzc
q3tRMOlSNy5200x+/SVx0au7iDecqVqT5kZrF5gmOpxLxlUMfoW7fm3teB1NA8Zt
5pDHc3nXn4agP/hba9Ic7GIxo/Y6xqB9ZLZcuesE0esKOUQAAr+qUgWnMS02jAbt
dOI=
-----END CERTIFICATE-----
Generated at Thu May 1 06:46:44 2025 by rpki-client