Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3NADUi8WsLKF6JNycQQxbxuPBc8.roa
File: 3NADUi8WsLKF6JNycQQxbxuPBc8.roa (raw, json)
Hash identifier: coUXzdcvj1WQ4Rl2BqbohMVcQg/tRpQd2fcFnpv9cfo=
Subject key identifier: DC:D0:03:52:2F:16:B0:B2:85:E8:93:72:71:04:31:6F:1B:8F:05:CF
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01884C9AFA5C4F351CB296FEBB6C7E767081
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3NADUi8WsLKF6JNycQQxbxuPBc8.roa
Signing time: Wed 24 May 2023 07:13:24 +0000
ROA not before: Wed 24 May 2023 07:13:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:4c:9a:fa:5c:4f:35:1c:b2:96:fe:bb:6c:7e:76:70:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 24 07:13:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dcd003522f16b0b285e893727104316f1b8f05cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:93:96:64:49:59:51:2a:6f:c8:ee:45:02:61:
6c:8c:a6:2c:6f:c9:4e:67:63:c3:18:fc:6c:04:3f:
16:94:9b:5c:e0:de:d8:d4:1c:61:97:07:86:af:e3:
3d:16:ef:4a:01:8c:0f:ca:f1:f2:6e:aa:33:22:1a:
32:cc:ff:6d:5b:9f:fb:88:74:ec:f6:b1:b4:4c:ec:
fb:a7:77:d9:de:2e:07:29:fa:6c:6c:78:30:98:c7:
2f:41:53:52:93:bd:d3:81:bf:51:75:28:a0:91:cb:
5c:6b:a1:b3:b5:a3:85:96:ad:49:ad:dc:78:65:9b:
c6:d5:fc:3a:d2:ee:f4:83:61:27:fd:ee:01:8a:3f:
e3:46:26:4a:98:bf:40:27:7b:00:46:51:a1:48:a1:
70:f6:a9:09:e7:0b:af:7a:31:51:7c:22:73:0f:54:
ff:f5:72:64:d0:20:70:04:cd:36:2a:6e:d2:17:e9:
df:24:c1:ad:4f:d4:8a:cf:b7:e1:03:e6:59:f1:92:
73:60:b4:83:59:53:38:67:8f:fb:e6:1c:ec:3f:50:
36:1f:b6:87:ca:d2:d2:50:98:66:3c:47:ce:35:6c:
8e:ec:13:c0:bc:49:17:5b:34:ef:d9:02:d8:c2:20:
bf:e3:f7:8b:7e:a0:28:07:19:7b:2e:e3:8d:d7:3d:
11:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:D0:03:52:2F:16:B0:B2:85:E8:93:72:71:04:31:6F:1B:8F:05:CF
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3NADUi8WsLKF6JNycQQxbxuPBc8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
04:f0:e1:07:87:2a:6d:3f:fd:0c:54:07:c8:b8:2a:41:06:97:
8c:8d:f2:f5:a1:33:d3:5e:71:5b:c0:2d:f5:a1:9d:72:ec:2b:
74:06:93:2f:1c:bb:b4:0e:77:8b:1a:02:93:e2:9f:4c:e2:f7:
fb:58:64:f9:55:4e:64:5b:76:29:8d:1a:2d:9a:fb:ad:52:80:
db:b6:6f:be:1e:e7:a8:00:a8:cc:53:ff:02:2e:66:90:7a:22:
54:09:51:23:87:4a:60:16:76:74:24:bd:a1:59:41:36:1c:a5:
d6:97:71:af:e3:3e:50:ef:19:32:11:3b:1c:de:01:77:49:9a:
88:75:76:6f:3a:67:80:66:3d:e2:99:1d:16:65:93:f1:8d:e4:
eb:1d:d3:15:f5:5c:79:3c:0e:31:84:f9:bb:a6:12:8b:67:9f:
14:47:de:bc:70:2d:19:e1:90:84:49:d0:9a:94:22:0d:25:56:
05:30:bb:78:77:e1:89:9e:d3:82:0b:31:4a:93:30:7e:58:f8:
0e:da:38:4c:dd:8e:0d:46:4d:54:c0:6b:8e:0f:a8:d3:30:51:
2a:08:78:e6:6a:48:39:16:97:49:5b:b4:75:3f:2a:5f:b9:25:
41:5f:d1:5b:7a:d2:ed:96:82:24:f7:34:2b:5f:6e:e5:46:bf:
29:fe:46:e7
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYhMmvpcTzUcspb+u2x+dnCBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNTI0MDcxMzI0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkY2QwMDM1MjJmMTZiMGIyODVlODkzNzI3MTA0MzE2ZjFiOGYwNWNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAipOWZElZUSpvyO5FAmFsjKYsb8lO
Z2PDGPxsBD8WlJtc4N7Y1BxhlweGr+M9Fu9KAYwPyvHybqozIhoyzP9tW5/7iHTs
9rG0TOz7p3fZ3i4HKfpsbHgwmMcvQVNSk73Tgb9RdSigkctca6GztaOFlq1Jrdx4
ZZvG1fw60u70g2En/e4Bij/jRiZKmL9AJ3sARlGhSKFw9qkJ5wuvejFRfCJzD1T/
9XJk0CBwBM02Km7SF+nfJMGtT9SKz7fhA+ZZ8ZJzYLSDWVM4Z4/75hzsP1A2H7aH
ytLSUJhmPEfONWyO7BPAvEkXWzTv2QLYwiC/4/eLfqAoBxl7LuON1z0RawIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFNzQA1IvFrCyheiTcnEEMW8bjwXPMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvM05BRFVpOFdzTEtGNkpOeWNRUXhieHVQQmM4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAATw4QeHKm0//QxUB8i4
KkEGl4yN8vWhM9NecVvALfWhnXLsK3QGky8cu7QOd4saApPin0zi9/tYZPlVTmRb
dimNGi2a+61SgNu2b74e56gAqMxT/wIuZpB6IlQJUSOHSmAWdnQkvaFZQTYcpdaX
ca/jPlDvGTIROxzeAXdJmoh1dm86Z4BmPeKZHRZlk/GN5Osd0xX1XHk8DjGE+bum
EotnnxRH3rxwLRnhkIRJ0JqUIg0lVgUwu3h34Yme04ILMUqTMH5Y+A7aOEzdjg1G
TVTAa44PqNMwUSoIeOZqSDkWl0lbtHU/Kl+5JUFf0Vt60u2WgiT3NCtfbuVGvyn+
Ruc=
-----END CERTIFICATE-----
Generated at Thu May 1 06:11:18 2025 by rpki-client