Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3LLR184zEzIE3EcSEtxaeHv-v0M.roa
File: 3LLR184zEzIE3EcSEtxaeHv-v0M.roa (raw, json)
Hash identifier: Tqp+6PVTJCx6y8uVkcamfWVuVssWDKwSu3dWU3ENQzY=
Subject key identifier: DC:B2:D1:D7:CE:33:13:32:04:DC:47:12:12:DC:5A:78:7B:FE:BF:43
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018956ADB49CACFA510318B5AACE0BFCFDF2
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3LLR184zEzIE3EcSEtxaeHv-v0M.roa
Signing time: Fri 14 Jul 2023 23:12:51 +0000
ROA not before: Fri 14 Jul 2023 23:12:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:56:ad:b4:9c:ac:fa:51:03:18:b5:aa:ce:0b:fc:fd:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 14 23:12:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dcb2d1d7ce33133204dc471212dc5a787bfebf43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:2d:07:f9:42:86:e4:3c:dc:4b:18:0d:e6:7b:
78:d5:55:88:7d:cc:8e:87:44:cd:74:ca:67:cf:1d:
ab:a0:c1:57:7b:f3:94:47:ce:4a:56:a8:36:90:ae:
39:0b:3b:85:a8:73:6c:27:a9:50:03:66:28:5e:da:
29:38:90:1f:57:fb:1b:bf:0c:e1:88:9f:3e:d9:b3:
c5:4c:4d:3e:a0:b3:5e:54:10:35:76:4a:5e:78:b0:
c5:28:9f:ba:bf:f3:ca:16:b3:7a:99:04:33:a6:fc:
c5:48:f8:f8:85:c7:07:4a:33:a6:4e:08:1a:6b:ab:
c1:dc:1a:97:67:39:ee:e8:0a:7a:1b:04:d1:88:ea:
8d:bc:05:47:35:90:28:10:f9:71:21:0f:df:c7:4e:
01:db:39:45:7c:7c:dd:f9:ab:1c:a0:07:96:fb:bd:
8a:91:8d:5c:4d:1b:5b:4e:19:0c:a5:89:9e:96:b0:
87:d1:28:a1:35:1e:f7:bf:1d:7c:f0:5f:ee:3d:a7:
e6:16:8a:a2:8c:18:9a:3f:c8:23:56:09:7d:8d:fc:
a3:b9:ad:35:d8:b3:04:db:7d:34:92:ee:17:a0:ed:
6f:39:5c:ea:52:a6:7b:36:92:36:58:55:76:7a:d9:
2b:49:85:7a:8e:01:61:61:3c:16:63:bf:1c:78:c9:
f3:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:B2:D1:D7:CE:33:13:32:04:DC:47:12:12:DC:5A:78:7B:FE:BF:43
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3LLR184zEzIE3EcSEtxaeHv-v0M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
72:fe:1b:85:7c:67:c3:9d:14:64:7c:be:41:26:8f:bd:d6:76:
98:ed:99:43:17:f3:c7:5f:60:be:9e:9b:45:d8:92:7b:a7:55:
07:b3:94:de:a0:54:9e:7d:b2:ad:db:d2:53:5f:54:a2:d6:26:
7a:69:29:93:6e:f1:31:3e:ed:e7:4b:a9:9e:f6:d7:62:c9:05:
4c:17:00:ae:16:14:60:be:22:3c:bc:65:56:d4:a5:1f:84:a7:
f9:a9:a4:7b:2d:1d:c8:e3:4e:4a:20:52:78:2b:fe:4e:24:48:
c1:0b:cd:e1:33:eb:b7:a6:a6:35:5a:05:9d:fd:0a:0c:a5:a4:
36:24:cf:88:ca:1b:eb:1b:7e:10:aa:92:52:3a:07:58:17:e6:
c0:8b:e7:db:6c:eb:14:4b:17:1e:ab:31:c0:5a:0a:09:0e:0f:
cd:45:b5:83:f5:87:f6:d6:d5:ff:28:b3:28:e8:cc:78:c0:85:
82:88:3b:a3:19:e8:6e:dc:a6:1c:8b:4a:4c:97:5e:f2:ec:5d:
12:59:47:a3:f4:d5:b5:90:f7:a4:79:55:c4:97:08:6e:8e:58:
67:02:33:0b:02:a5:86:9e:aa:f8:82:6f:ae:e5:f0:a4:d6:49:
09:a5:d4:04:94:c2:1a:34:9d:bc:e6:66:b4:0d:be:15:21:a0:
6f:f7:c0:ad
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYlWrbScrPpRAxi1qs4L/P3yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNzE0MjMxMjUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkY2IyZDFkN2NlMzMxMzMyMDRkYzQ3MTIxMmRjNWE3ODdiZmViZjQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlC0H+UKG5DzcSxgN5nt41VWIfcyO
h0TNdMpnzx2roMFXe/OUR85KVqg2kK45CzuFqHNsJ6lQA2YoXtopOJAfV/sbvwzh
iJ8+2bPFTE0+oLNeVBA1dkpeeLDFKJ+6v/PKFrN6mQQzpvzFSPj4hccHSjOmTgga
a6vB3BqXZznu6Ap6GwTRiOqNvAVHNZAoEPlxIQ/fx04B2zlFfHzd+ascoAeW+72K
kY1cTRtbThkMpYmelrCH0SihNR73vx188F/uPafmFoqijBiaP8gjVgl9jfyjua01
2LME2300ku4XoO1vOVzqUqZ7NpI2WFV2etkrSYV6jgFhYTwWY78ceMnzlwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFNyy0dfOMxMyBNxHEhLcWnh7/r9DMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvM0xMUjE4NHpFeklFM0VjU0V0eGFlSHYtdjBNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAHL+G4V8Z8OdFGR8vkEm
j73WdpjtmUMX88dfYL6em0XYknunVQezlN6gVJ59sq3b0lNfVKLWJnppKZNu8TE+
7edLqZ7212LJBUwXAK4WFGC+Ijy8ZVbUpR+Ep/mppHstHcjjTkogUngr/k4kSMEL
zeEz67empjVaBZ39CgylpDYkz4jKG+sbfhCqklI6B1gX5sCL59ts6xRLFx6rMcBa
CgkOD81FtYP1h/bW1f8osyjozHjAhYKIO6MZ6G7cphyLSkyXXvLsXRJZR6P01bWQ
96R5VcSXCG6OWGcCMwsCpYaeqviCb67l8KTWSQml1ASUwho0nbzmZrQNvhUhoG/3
wK0=
-----END CERTIFICATE-----
Generated at Wed Apr 30 17:39:12 2025 by rpki-client