Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3LLUZw0iaVBUX4GA2dfzKUsLXGA.roa
File: 3LLUZw0iaVBUX4GA2dfzKUsLXGA.roa (raw, json)
Hash identifier: RgHxs5wJs088znvX1aGa3r6uzfpdL2qgHTTnH9nN2Ks=
Subject key identifier: DC:B2:D4:67:0D:22:69:50:54:5F:81:80:D9:D7:F3:29:4B:0B:5C:60
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 718AA1B9
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3LLUZw0iaVBUX4GA2dfzKUsLXGA.roa
Signing time: Fri 11 Mar 2022 07:09:31 +0000
ROA not before: Fri 11 Mar 2022 07:09:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1904910777 (0x718aa1b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 11 07:09:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dcb2d4670d226950545f8180d9d7f3294b0b5c60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:47:b5:a4:be:47:3d:fc:db:cc:76:48:8b:47:
c4:fc:c9:cd:c5:15:bb:33:4f:a1:51:1d:d7:cd:17:
1d:11:7c:d3:31:82:ee:a7:f8:83:b0:8d:53:b1:14:
50:8f:8b:f7:3f:62:1d:d8:1d:a8:1a:f5:65:a0:f8:
b9:01:17:4b:70:38:8a:ad:07:10:c0:aa:6b:ca:5a:
0c:5f:c8:4a:f5:f5:79:f9:54:21:86:50:78:37:e6:
d7:98:a7:0c:ba:18:88:13:5b:3e:fc:62:ef:6c:ba:
8d:2e:47:21:43:55:d8:c7:4e:65:8f:03:fe:11:34:
06:e0:79:93:4a:22:2a:79:e6:32:97:8d:93:05:99:
76:ff:6e:9a:54:7d:83:92:e5:75:05:6a:26:93:b6:
7e:ed:c3:24:69:05:4a:15:9d:3d:41:fc:8b:01:43:
21:58:e6:d4:e5:f8:eb:e0:b9:6e:bf:50:24:96:d3:
59:64:83:e0:24:dc:92:90:22:ba:50:a8:a2:38:26:
40:cd:2a:c6:23:d8:f1:07:4b:05:27:9b:bd:1c:f4:
2b:01:87:1c:e5:5a:cb:63:42:e1:05:f1:cf:2f:52:
62:b1:28:00:d3:3a:83:7b:0b:5d:0e:28:d6:88:34:
b7:7c:9d:d9:b0:20:cd:83:87:42:34:5c:b1:4e:6f:
77:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:B2:D4:67:0D:22:69:50:54:5F:81:80:D9:D7:F3:29:4B:0B:5C:60
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3LLUZw0iaVBUX4GA2dfzKUsLXGA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
05:70:43:36:f7:65:9c:8d:7f:78:f6:2f:42:27:9b:c7:20:01:
a6:a7:64:99:8b:cb:ce:83:3a:92:a6:4e:5a:51:79:ef:5b:cc:
3b:80:84:fc:3a:f7:49:18:9d:b2:97:79:f3:ea:38:51:c3:a4:
f0:9b:b0:22:41:2f:3d:9c:9f:f0:a0:0a:71:d1:be:7a:16:83:
0e:a1:77:78:ac:a4:77:17:9d:05:c3:81:5b:42:5b:69:f1:92:
9b:f2:3c:69:2b:c0:03:b8:9f:02:92:db:6a:37:e2:cb:85:27:
d8:26:22:f8:8a:c6:94:44:8a:56:86:e4:7c:1b:a9:c8:7e:83:
e4:50:7f:35:da:47:01:1f:c2:bc:80:df:1e:73:f4:60:60:33:
79:30:83:9c:a1:21:af:a0:f2:3f:4a:6e:d4:10:3a:f4:5c:c1:
f9:e4:36:26:7c:bc:7e:62:64:97:50:dd:77:6e:c7:aa:23:31:
0c:73:2f:61:7d:8e:42:91:af:af:46:32:2b:96:13:1e:67:48:
49:5e:dd:d4:14:96:48:4e:19:b7:28:37:cd:bb:09:d8:fd:31:
40:42:35:f3:4d:7c:26:97:36:f2:0e:d2:ab:1d:66:ad:a9:71:
96:51:87:aa:52:0c:60:94:35:61:a9:a4:07:e3:96:d0:b4:8f:
88:fe:33:23
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIEcYqhuTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
MjA0N2JlMTViMjc1OTAyZGNmNjE3ZGMzZDBlMTZkYzFmMzA4MDIyMB4XDTIyMDMx
MTA3MDkzMVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZGNiMmQ0NjcwZDIy
Njk1MDU0NWY4MTgwZDlkN2YzMjk0YjBiNWM2MDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALRHtaS+Rz3828x2SItHxPzJzcUVuzNPoVEd180XHRF80zGC
7qf4g7CNU7EUUI+L9z9iHdgdqBr1ZaD4uQEXS3A4iq0HEMCqa8paDF/ISvX1eflU
IYZQeDfm15inDLoYiBNbPvxi72y6jS5HIUNV2MdOZY8D/hE0BuB5k0oiKnnmMpeN
kwWZdv9umlR9g5LldQVqJpO2fu3DJGkFShWdPUH8iwFDIVjm1OX46+C5br9QJJbT
WWSD4CTckpAiulCoojgmQM0qxiPY8QdLBSebvRz0KwGHHOVay2NC4QXxzy9SYrEo
ANM6g3sLXQ4o1og0t3yd2bAgzYOHQjRcsU5vd8kCAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBTcstRnDSJpUFRfgYDZ1/MpSwtcYDAfBgNVHSMEGDAWgBRyBHvhWydZAtz2
F9w9DhbcHzCAIjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2NnUjc0VnNuV1FMYzloZmNQUTRXM0I4d2dDSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNWUvNzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8x
LzNMTFVadzBpYVZCVVg0R0EyZGZ6S1VzTFhHQS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWUv
Nzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8xL2NnUjc0VnNuV1FM
YzloZmNQUTRXM0I4d2dDSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEA8EAGDAPBAIAAjAJAwcAIAEGfABk
MA0GCSqGSIb3DQEBCwUAA4IBAQAFcEM292WcjX949i9CJ5vHIAGmp2SZi8vOgzqS
pk5aUXnvW8w7gIT8OvdJGJ2yl3nz6jhRw6Twm7AiQS89nJ/woApx0b56FoMOoXd4
rKR3F50Fw4FbQltp8ZKb8jxpK8ADuJ8CkttqN+LLhSfYJiL4isaURIpWhuR8G6nI
foPkUH812kcBH8K8gN8ec/RgYDN5MIOcoSGvoPI/Sm7UEDr0XMH55DYmfLx+YmSX
UN13bseqIzEMcy9hfY5Cka+vRjIrlhMeZ0hJXt3UFJZIThm3KDfNuwnY/TFAQjXz
TXwmlzbyDtKrHWatqXGWUYeqUgxglDVhqaQH45bQtI+I/jMj
-----END CERTIFICATE-----
Generated at Thu May 1 14:34:03 2025 by rpki-client