Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3POAohNDbFONPMjXUltBkvOJUwg.roa
File: 3POAohNDbFONPMjXUltBkvOJUwg.roa (raw, json)
Hash identifier: pAouJ49x0E3e19vsHn+WZJ+HG6NNGS3j9CNLrV0tShA=
Subject key identifier: DC:F3:80:A2:13:43:6C:53:8D:3C:C8:D7:52:5B:41:92:F3:89:53:08
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01884DA5657FAD6F7C2CA698253AA5DFD73D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3POAohNDbFONPMjXUltBkvOJUwg.roa
Signing time: Wed 24 May 2023 12:04:24 +0000
ROA not before: Wed 24 May 2023 12:04:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:188:4da5:5f6b/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:4d:a5:65:7f:ad:6f:7c:2c:a6:98:25:3a:a5:df:d7:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 24 12:04:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dcf380a213436c538d3cc8d7525b4192f3895308
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:36:5a:83:55:df:d2:dc:1f:ee:06:21:40:db:
3c:76:99:44:fb:37:fe:9a:9d:29:98:db:58:f5:38:
89:96:f3:cd:19:1a:9d:6f:c7:38:7d:50:d8:67:a5:
9d:3b:5a:0b:c7:44:c5:58:41:df:6f:2c:2f:56:48:
ed:5d:eb:54:b3:e1:08:21:0a:fd:76:0b:d5:ea:10:
e2:61:04:c8:e7:20:5a:ea:0b:4a:8e:5d:a1:6d:80:
03:27:fa:15:24:43:47:7b:39:8a:b5:03:5d:b2:5b:
20:7e:80:33:cc:8e:67:b8:b7:a0:0d:6d:0d:67:9f:
a3:e1:19:08:ef:c5:42:15:9d:10:37:d3:e8:87:9e:
5f:f8:f3:74:2d:9a:a6:41:2f:f6:d7:4b:65:39:3d:
9c:35:e1:ac:bc:ca:dc:01:4f:ee:1b:17:84:3d:f5:
f1:39:bc:5c:48:15:b0:c6:ce:23:2c:d5:10:db:56:
72:f3:01:be:db:70:20:56:cc:6e:84:90:cd:df:f5:
95:08:be:35:5a:05:f1:21:68:ef:f9:7d:24:e3:5c:
b8:87:df:35:16:de:b8:c0:1d:b6:9e:78:6c:52:8f:
bf:e8:85:79:34:e7:4b:3a:90:11:a9:6c:49:8a:7f:
e0:00:0b:c9:ff:e8:8b:1f:22:ff:1a:a8:2c:c9:e8:
58:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:F3:80:A2:13:43:6C:53:8D:3C:C8:D7:52:5B:41:92:F3:89:53:08
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3POAohNDbFONPMjXUltBkvOJUwg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
77:0c:3e:b1:ab:23:4a:e7:57:3d:e9:0e:14:b6:51:b4:b9:12:
9a:fb:b7:f0:5f:3c:39:3e:1b:fb:cd:ad:1a:ae:cc:21:1d:cf:
3a:f1:b2:4e:f2:c9:bc:c3:d5:b4:af:85:98:43:6a:ac:30:a8:
fe:0f:74:10:a5:a4:54:71:b3:b1:44:f0:14:de:1f:43:21:32:
88:20:ca:7a:f9:a8:e7:d6:37:a0:24:c3:02:28:b4:59:c1:3a:
97:07:03:9e:35:a5:6a:39:79:e7:8e:db:58:8c:9b:7b:3c:ba:
fa:87:7c:51:41:a8:44:76:b5:53:24:c2:96:f9:4c:48:e7:e2:
0a:6b:6e:d5:73:f1:15:21:1b:ce:3e:18:40:fc:e9:7c:d2:d4:
40:02:84:1b:1c:d9:72:5c:d0:04:91:84:1d:54:60:17:a7:d1:
39:67:88:c5:16:5a:ec:97:5f:96:51:83:d0:66:48:8c:a1:73:
84:43:b5:47:cd:fb:95:c1:cd:d7:65:03:85:9f:db:23:cd:80:
36:5f:0d:63:7b:4f:33:60:de:ea:fe:92:28:20:61:98:9e:b9:
a7:eb:c5:53:4e:e5:69:69:35:63:d2:e6:87:18:fe:3c:36:6e:
3d:c3:e9:e8:2b:7a:e1:99:20:c0:77:99:0e:8a:66:ec:98:9e:
f4:01:79:ef
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYhNpWV/rW98LKaYJTql39c9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNTI0MTIwNDI0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkY2YzODBhMjEzNDM2YzUzOGQzY2M4ZDc1MjViNDE5MmYzODk1MzA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhzZag1Xf0twf7gYhQNs8dplE+zf+
mp0pmNtY9TiJlvPNGRqdb8c4fVDYZ6WdO1oLx0TFWEHfbywvVkjtXetUs+EIIQr9
dgvV6hDiYQTI5yBa6gtKjl2hbYADJ/oVJENHezmKtQNdslsgfoAzzI5nuLegDW0N
Z5+j4RkI78VCFZ0QN9Poh55f+PN0LZqmQS/210tlOT2cNeGsvMrcAU/uGxeEPfXx
ObxcSBWwxs4jLNUQ21Zy8wG+23AgVsxuhJDN3/WVCL41WgXxIWjv+X0k41y4h981
Ft64wB22nnhsUo+/6IV5NOdLOpARqWxJin/gAAvJ/+iLHyL/GqgsyehYCwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFNzzgKITQ2xTjTzI11JbQZLziVMIMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvM1BPQW9oTkRiRk9OUE1qWFVsdEJrdk9KVXdnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAHcMPrGrI0rnVz3pDhS2
UbS5Epr7t/BfPDk+G/vNrRquzCEdzzrxsk7yybzD1bSvhZhDaqwwqP4PdBClpFRx
s7FE8BTeH0MhMoggynr5qOfWN6AkwwIotFnBOpcHA541pWo5eeeO21iMm3s8uvqH
fFFBqER2tVMkwpb5TEjn4gprbtVz8RUhG84+GED86XzS1EAChBsc2XJc0ASRhB1U
YBen0TlniMUWWuyXX5ZRg9BmSIyhc4RDtUfN+5XBzddlA4Wf2yPNgDZfDWN7TzNg
3ur+kiggYZieuafrxVNO5WlpNWPS5ocY/jw2bj3D6egreuGZIMB3mQ6KZuyYnvQB
ee8=
-----END CERTIFICATE-----
Generated at Thu May 1 01:37:58 2025 by rpki-client