Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3L9MWPAH5stQiV15vKvd2eMsszI.roa
File: 3L9MWPAH5stQiV15vKvd2eMsszI.roa (raw, json)
Hash identifier: X+wfVFxOb46XSF86QqJWyBM9E3F73SvK480oygURMmg=
Subject key identifier: DC:BF:4C:58:F0:07:E6:CB:50:89:5D:79:BC:AB:DD:D9:E3:2C:B3:32
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186D6CEF7AAD24951FDD9EC399C448E566E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3L9MWPAH5stQiV15vKvd2eMsszI.roa
Signing time: Sun 12 Mar 2023 17:12:13 +0000
ROA not before: Sun 12 Mar 2023 17:12:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:d6:ce:f7:aa:d2:49:51:fd:d9:ec:39:9c:44:8e:56:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 12 17:12:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dcbf4c58f007e6cb50895d79bcabddd9e32cb332
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:e1:d5:90:d2:8f:73:6e:62:de:c3:01:3f:3d:
36:ae:22:40:c5:dc:35:23:db:d2:da:79:9f:a1:71:
1f:89:f9:83:aa:5d:bf:9e:b7:33:9f:fd:4d:36:2c:
c2:3a:b0:0f:bb:df:c6:ef:f3:a2:f9:4c:d2:c1:74:
ff:43:fe:34:1b:c7:8a:37:97:36:34:af:64:d6:a5:
9f:97:7b:8c:cc:82:3c:85:f4:6f:25:35:32:31:fb:
81:42:73:8d:5d:f0:63:74:d2:7a:73:36:61:d0:0b:
52:b9:ff:59:0f:48:58:2f:1d:0e:82:8a:72:95:e3:
03:3f:d0:ea:83:bb:a9:59:c2:ee:7a:ec:c4:ec:8c:
78:d2:93:70:c6:e0:b5:41:83:fa:25:6d:33:78:1d:
71:ac:4a:1b:f7:bf:aa:07:f2:d8:22:8c:25:a9:3a:
76:d4:c7:7a:4d:05:91:98:ea:7c:be:53:83:6a:d8:
bf:f3:ee:2d:85:b8:2f:20:ec:15:66:be:f5:ac:e5:
d6:a1:d6:30:fb:2d:55:36:29:49:fc:64:d3:a2:32:
94:81:25:a1:44:ba:61:fe:e6:8a:eb:dc:d7:ca:55:
34:0c:b5:b7:69:04:e5:bf:0e:0b:c0:44:9a:13:b5:
9d:e9:cc:c6:b8:34:31:d3:df:4b:9c:97:41:05:03:
ba:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:BF:4C:58:F0:07:E6:CB:50:89:5D:79:BC:AB:DD:D9:E3:2C:B3:32
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3L9MWPAH5stQiV15vKvd2eMsszI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a9:60:89:4b:f2:b7:64:60:35:2a:6d:ff:d0:bb:4c:05:f0:0b:
0e:a9:0d:60:e2:e9:7f:bf:18:cb:eb:dc:bf:d9:db:22:ce:21:
f4:e7:cb:9d:dc:f2:c1:31:1b:32:87:4d:5f:7d:d5:9d:c1:01:
85:d7:d4:79:d9:c7:2e:d8:d0:8b:13:c4:0b:7d:a0:63:d4:6b:
35:e6:d9:62:46:4f:86:46:b7:83:c5:e3:f6:27:1f:39:b2:41:
a6:ca:ee:ab:ab:73:06:ef:6a:d9:4b:0e:e7:c4:3e:6a:19:b6:
ce:c7:44:15:fd:59:a9:74:24:10:a9:2e:d7:b7:fc:fd:d0:1c:
08:f0:96:08:e3:95:8b:13:76:c0:4c:f2:47:dd:16:0f:5c:f2:
4f:a0:7f:0e:98:b4:14:2e:3f:f9:6f:61:84:9e:58:9f:c3:f1:
0b:67:57:57:ca:73:ff:bc:ab:76:f0:e2:d1:11:de:1f:f5:f5:
ae:e1:09:eb:70:4e:0d:2f:f4:a2:a3:94:ce:cb:57:ba:bf:b3:
a9:e8:a9:08:1a:b1:a6:b5:7a:f8:82:99:fa:47:c1:ac:e8:12:
0c:bb:f5:e4:f1:f8:7b:65:52:fc:de:92:6a:04:25:69:fe:d1:
54:fe:93:24:6f:9a:07:64:85:d3:e6:9a:7c:cb:9e:ad:91:2a:
c2:58:2a:33
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYbWzveq0klR/dnsOZxEjlZuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMzEyMTcxMjEzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkY2JmNGM1OGYwMDdlNmNiNTA4OTVkNzliY2FiZGRkOWUzMmNiMzMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAheHVkNKPc25i3sMBPz02riJAxdw1
I9vS2nmfoXEfifmDql2/nrczn/1NNizCOrAPu9/G7/Oi+UzSwXT/Q/40G8eKN5c2
NK9k1qWfl3uMzII8hfRvJTUyMfuBQnONXfBjdNJ6czZh0AtSuf9ZD0hYLx0Ogopy
leMDP9Dqg7upWcLueuzE7Ix40pNwxuC1QYP6JW0zeB1xrEob97+qB/LYIowlqTp2
1Md6TQWRmOp8vlODati/8+4thbgvIOwVZr71rOXWodYw+y1VNilJ/GTTojKUgSWh
RLph/uaK69zXylU0DLW3aQTlvw4LwESaE7Wd6czGuDQx099LnJdBBQO6bwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFNy/TFjwB+bLUIldebyr3dnjLLMyMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvM0w5TVdQQUg1c3RRaVYxNXZLdmQyZU1zc3pJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAKlgiUvyt2RgNSpt/9C7
TAXwCw6pDWDi6X+/GMvr3L/Z2yLOIfTny53c8sExGzKHTV991Z3BAYXX1HnZxy7Y
0IsTxAt9oGPUazXm2WJGT4ZGt4PF4/YnHzmyQabK7qurcwbvatlLDufEPmoZts7H
RBX9Wal0JBCpLte3/P3QHAjwlgjjlYsTdsBM8kfdFg9c8k+gfw6YtBQuP/lvYYSe
WJ/D8QtnV1fKc/+8q3bw4tER3h/19a7hCetwTg0v9KKjlM7LV7q/s6noqQgasaa1
eviCmfpHwazoEgy79eTx+HtlUvzekmoEJWn+0VT+kyRvmgdkhdPmmnzLnq2RKsJY
KjM=
-----END CERTIFICATE-----
Generated at Thu May 1 11:17:00 2025 by rpki-client