Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3VBmL1qETzz2Av-VXR6Qq4ffg7s.roa
File: 3VBmL1qETzz2Av-VXR6Qq4ffg7s.roa (raw, json)
Hash identifier: pdkQ2vhxZhGaHLoaSGcHS84/451yVz89180rOG3o4Eo=
Subject key identifier: DD:50:66:2F:5A:84:4F:3C:F6:02:FF:95:5D:1E:90:AB:87:DF:83:BB
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186E869675F8081CDBB0391E70869D7E52C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3VBmL1qETzz2Av-VXR6Qq4ffg7s.roa
Signing time: Thu 16 Mar 2023 03:14:27 +0000
ROA not before: Thu 16 Mar 2023 03:14:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:e8:69:67:5f:80:81:cd:bb:03:91:e7:08:69:d7:e5:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 16 03:14:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dd50662f5a844f3cf602ff955d1e90ab87df83bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:23:f6:6f:b1:43:bb:9c:48:89:05:31:be:5a:
e4:c0:94:48:b2:42:39:bc:bf:4d:5f:2d:c5:71:7c:
40:3a:f3:02:0e:2f:e1:48:aa:78:08:a2:df:73:01:
d2:f2:b5:1d:fc:e0:e4:14:b2:98:67:18:91:77:d7:
77:5b:10:fa:e8:13:ce:87:3f:41:ba:8e:1a:34:3a:
6d:46:48:58:46:da:ec:38:05:87:d2:d3:5d:53:d0:
9a:9d:0b:2c:bc:28:eb:3c:88:05:7f:f0:9b:e7:af:
2f:a3:26:1a:3f:fd:32:7c:f2:6c:6e:28:4e:81:bd:
e1:51:54:c5:d0:87:ff:60:17:f7:95:6f:10:85:2e:
0d:f7:7a:47:2e:ee:7e:81:1e:7a:7d:68:9e:00:22:
1b:0c:db:b2:1b:9a:a0:94:b8:47:ca:80:fc:5e:ee:
8e:c8:d5:ee:51:5f:a5:fa:cb:33:19:59:dd:70:88:
30:60:84:45:18:0d:77:e2:4b:7b:2d:a6:b3:3d:4d:
93:2b:47:30:2a:69:9a:18:5e:9a:8e:62:29:88:4b:
f4:03:58:63:09:59:66:5b:89:be:b6:71:e8:13:39:
59:8e:04:81:73:96:8c:1c:5f:4d:27:2d:c0:ad:47:
7c:86:4f:4d:f0:56:f8:e3:a9:20:04:6a:78:7b:dd:
c6:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:50:66:2F:5A:84:4F:3C:F6:02:FF:95:5D:1E:90:AB:87:DF:83:BB
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3VBmL1qETzz2Av-VXR6Qq4ffg7s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1f:e0:dc:81:13:28:3e:ae:25:0e:70:26:67:4b:13:61:68:29:
ef:f8:96:59:cd:6c:86:ca:a1:43:9d:e1:9d:d3:fa:8b:95:1d:
a2:13:11:61:f6:e6:a7:5e:de:f5:f3:3a:c4:55:ed:7e:9d:1c:
33:00:33:b4:72:78:cf:04:77:93:65:40:c0:e6:b7:e4:cb:1b:
d5:fa:82:eb:ad:c8:d5:95:b8:9a:94:0c:11:f0:18:ee:4c:63:
f8:9b:d1:e0:46:a0:70:9d:32:ec:be:df:18:4e:60:7f:92:88:
cb:ab:89:7a:f3:d7:b7:46:26:82:05:f9:39:1a:79:c0:75:a8:
50:97:45:e2:2d:f9:5b:c0:97:71:1d:6e:38:81:56:ab:d2:21:
eb:f1:ec:da:b9:4a:ad:09:f3:d6:10:4d:7d:a5:bf:fe:ab:e0:
51:a9:27:12:e3:70:8d:b4:b7:34:e3:5b:6b:06:7b:71:c0:26:
79:38:dd:df:e0:f0:5b:64:d0:6a:70:86:cd:af:f0:06:b0:a9:
61:d3:f0:8e:25:ef:9d:91:50:4b:f0:76:11:15:c2:f7:6c:9d:
0a:a2:db:ad:61:95:ee:49:a8:fd:c0:50:1c:15:70:84:67:37:
c0:c1:da:d2:de:a3:e1:4b:06:7f:0b:d2:9a:9b:66:92:46:6b:
d9:a0:32:85
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYboaWdfgIHNuwOR5whp1+UsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMzE2MDMxNDI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZDUwNjYyZjVhODQ0ZjNjZjYwMmZmOTU1ZDFlOTBhYjg3ZGY4M2JiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkCP2b7FDu5xIiQUxvlrkwJRIskI5
vL9NXy3FcXxAOvMCDi/hSKp4CKLfcwHS8rUd/ODkFLKYZxiRd9d3WxD66BPOhz9B
uo4aNDptRkhYRtrsOAWH0tNdU9CanQssvCjrPIgFf/Cb568voyYaP/0yfPJsbihO
gb3hUVTF0If/YBf3lW8QhS4N93pHLu5+gR56fWieACIbDNuyG5qglLhHyoD8Xu6O
yNXuUV+l+sszGVndcIgwYIRFGA134kt7LaazPU2TK0cwKmmaGF6ajmIpiEv0A1hj
CVlmW4m+tnHoEzlZjgSBc5aMHF9NJy3ArUd8hk9N8Fb446kgBGp4e93GWwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFN1QZi9ahE889gL/lV0ekKuH34O7MB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvM1ZCbUwxcUVUenoyQXYtVlhSNlFxNGZmZzdzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAB/g3IETKD6uJQ5wJmdL
E2FoKe/4llnNbIbKoUOd4Z3T+ouVHaITEWH25qde3vXzOsRV7X6dHDMAM7RyeM8E
d5NlQMDmt+TLG9X6guutyNWVuJqUDBHwGO5MY/ib0eBGoHCdMuy+3xhOYH+SiMur
iXrz17dGJoIF+TkaecB1qFCXReIt+VvAl3EdbjiBVqvSIevx7Nq5Sq0J89YQTX2l
v/6r4FGpJxLjcI20tzTjW2sGe3HAJnk43d/g8Ftk0Gpwhs2v8AawqWHT8I4l752R
UEvwdhEVwvdsnQqi261hle5JqP3AUBwVcIRnN8DB2tLeo+FLBn8L0pqbZpJGa9mg
MoU=
-----END CERTIFICATE-----
Generated at Thu May 1 02:51:51 2025 by rpki-client