Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3FTxFaUCfBMS1koLjZsVwtEGTuA.roa
File: 3FTxFaUCfBMS1koLjZsVwtEGTuA.roa (raw, json)
Hash identifier: CZAou+B0ZNJFwIVDI0O9wL9M0HIWmnogsqTWyiMp+kQ=
Subject key identifier: DC:54:F1:15:A5:02:7C:13:12:D6:4A:0B:8D:9B:15:C2:D1:06:4E:E0
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01880B92CAF2DA1AB3AA58DF8276F2DF4618
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3FTxFaUCfBMS1koLjZsVwtEGTuA.roa
Signing time: Thu 11 May 2023 16:09:09 +0000
ROA not before: Thu 11 May 2023 16:09:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:0b:92:ca:f2:da:1a:b3:aa:58:df:82:76:f2:df:46:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 11 16:09:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dc54f115a5027c1312d64a0b8d9b15c2d1064ee0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:d8:bd:4e:c6:f5:3e:bf:57:9f:b2:7d:ce:19:
61:38:36:c2:11:b7:b4:7a:26:88:5f:5c:58:47:a2:
34:0f:d4:93:3b:1b:96:42:dd:04:b4:00:8d:72:75:
4f:20:2c:f3:47:83:26:71:e6:50:86:f7:43:9c:2d:
aa:c8:14:f7:1c:d8:12:f0:0d:2f:7c:60:ed:05:bc:
48:44:9e:f2:cf:91:49:60:d7:e2:eb:46:70:f0:05:
4a:a0:8c:73:56:86:31:4b:4d:8a:e5:e5:f7:1f:83:
ea:96:d9:56:09:92:71:e9:4d:ca:6b:de:31:d8:33:
2a:70:d9:de:94:5e:d2:80:f7:39:a1:e9:8c:e1:76:
bb:05:9d:58:fd:25:24:de:f1:fe:00:3b:cf:8a:e3:
b3:f5:6b:9f:5f:b0:d9:85:80:0f:79:f4:cd:7c:39:
f5:1a:3f:33:46:f2:de:cb:c3:05:9b:4b:c2:be:5d:
4a:af:74:fe:84:9a:6a:a1:09:3e:83:ac:43:80:98:
c4:89:78:ab:e3:d3:07:2b:17:c1:b6:c1:9f:84:81:
4b:64:9a:e5:67:ef:41:fd:bf:04:8b:1c:22:1e:cb:
0c:83:c9:df:b9:dd:80:64:6a:f0:33:60:dd:dc:40:
3f:98:95:92:7e:3d:91:b6:b4:a9:39:2c:ef:6d:31:
d6:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:54:F1:15:A5:02:7C:13:12:D6:4A:0B:8D:9B:15:C2:D1:06:4E:E0
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3FTxFaUCfBMS1koLjZsVwtEGTuA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1e:03:6d:8b:ef:9b:61:6c:81:73:dc:fe:6e:a7:6a:af:75:e3:
ad:04:2b:7c:b7:bb:2a:75:53:5a:bb:6d:e3:80:7e:21:e1:fb:
81:00:9f:46:55:52:be:18:15:cb:4c:b4:09:17:48:2e:87:81:
d9:3b:a4:8e:4f:a3:b5:d3:75:2c:35:c6:6b:e5:31:ef:d6:a3:
ec:e9:58:37:c4:d6:59:55:7d:a7:d6:45:40:75:b0:14:71:f4:
aa:6a:95:94:0f:26:4e:a0:b5:20:fd:b3:d7:c6:e3:7c:8b:ec:
c1:fe:66:b2:51:bc:39:5b:53:70:4f:06:08:54:fe:ae:f5:1c:
ae:6c:19:73:68:4a:8a:4c:79:9e:cf:e6:02:5a:91:ce:5d:0e:
e3:d5:9d:d0:7e:bd:3a:9a:0f:4a:f7:38:52:15:91:52:c8:4d:
97:dd:28:b4:ce:66:90:cd:e0:6a:67:1d:7d:ff:b3:15:9f:c0:
ea:a2:52:fa:ae:7a:39:85:28:7f:3e:a9:99:66:db:ce:bc:5f:
48:4b:b2:ff:7b:92:90:83:f7:d7:d1:65:dc:e0:9a:00:ab:30:
50:a7:36:c1:9f:6b:84:fe:d6:91:c9:d1:4b:ce:0e:d5:5b:04:
8b:e4:30:91:f8:d9:66:84:0c:7d:10:60:06:da:8c:bd:69:8d:
0b:cf:f1:0e
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYgLksry2hqzqljfgnby30YYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNTExMTYwOTA5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYzU0ZjExNWE1MDI3YzEzMTJkNjRhMGI4ZDliMTVjMmQxMDY0ZWUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgdi9Tsb1Pr9Xn7J9zhlhODbCEbe0
eiaIX1xYR6I0D9STOxuWQt0EtACNcnVPICzzR4MmceZQhvdDnC2qyBT3HNgS8A0v
fGDtBbxIRJ7yz5FJYNfi60Zw8AVKoIxzVoYxS02K5eX3H4PqltlWCZJx6U3Ka94x
2DMqcNnelF7SgPc5oemM4Xa7BZ1Y/SUk3vH+ADvPiuOz9WufX7DZhYAPefTNfDn1
Gj8zRvLey8MFm0vCvl1Kr3T+hJpqoQk+g6xDgJjEiXir49MHKxfBtsGfhIFLZJrl
Z+9B/b8EixwiHssMg8nfud2AZGrwM2Dd3EA/mJWSfj2RtrSpOSzvbTHW1wIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFNxU8RWlAnwTEtZKC42bFcLRBk7gMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvM0ZUeEZhVUNmQk1TMWtvTGpac1Z3dEVHVHVBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAB4DbYvvm2FsgXPc/m6n
aq91460EK3y3uyp1U1q7beOAfiHh+4EAn0ZVUr4YFctMtAkXSC6Hgdk7pI5Po7XT
dSw1xmvlMe/Wo+zpWDfE1llVfafWRUB1sBRx9KpqlZQPJk6gtSD9s9fG43yL7MH+
ZrJRvDlbU3BPBghU/q71HK5sGXNoSopMeZ7P5gJakc5dDuPVndB+vTqaD0r3OFIV
kVLITZfdKLTOZpDN4GpnHX3/sxWfwOqiUvquejmFKH8+qZlm2868X0hLsv97kpCD
99fRZdzgmgCrMFCnNsGfa4T+1pHJ0UvODtVbBIvkMJH42WaEDH0QYAbajL1pjQvP
8Q4=
-----END CERTIFICATE-----
Generated at Thu May 1 06:46:42 2025 by rpki-client