Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3fg9Zf94UrC4WruwBTYx5YHyab0.roa
File: 3fg9Zf94UrC4WruwBTYx5YHyab0.roa (raw, json)
Hash identifier: cu/d1qRRZDRLbwUptQfcnMjLPhTPPQbABey5lTGKOMA=
Subject key identifier: DD:F8:3D:65:FF:78:52:B0:B8:5A:BB:B0:05:36:31:E5:81:F2:69:BD
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01863ACF9832119788B3D3788B9DF4FACB59
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3fg9Zf94UrC4WruwBTYx5YHyab0.roa
Signing time: Fri 10 Feb 2023 10:12:08 +0000
ROA not before: Fri 10 Feb 2023 10:12:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:3a:cf:98:32:11:97:88:b3:d3:78:8b:9d:f4:fa:cb:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 10 10:12:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ddf83d65ff7852b0b85abbb0053631e581f269bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e0:1b:e8:60:33:fa:77:ec:8a:dc:28:af:49:
3d:a9:a2:d1:0e:39:ba:6d:0b:63:e8:63:46:e3:a9:
bb:7a:87:db:97:78:26:b6:1a:a3:75:10:76:04:6e:
24:d5:77:44:b3:62:43:74:e5:c9:56:36:72:f5:bb:
a5:7e:83:c5:13:29:bc:ff:bd:de:d1:4c:80:9b:f3:
e4:71:8e:ba:04:5f:ea:0d:36:cd:2d:7e:98:cb:ee:
71:c5:20:59:ef:cf:79:1f:c8:ec:7d:a9:2e:13:b1:
e7:47:7a:87:3b:36:81:a0:7d:33:a4:5c:25:ff:9e:
8c:a5:a5:64:db:45:98:25:f2:45:09:2e:3c:37:d0:
7c:bf:4c:1f:d0:83:36:d7:a1:85:ad:a7:c3:25:61:
0d:31:a0:82:c5:96:16:ea:99:42:3a:73:b3:d2:c2:
74:fb:3a:de:f8:dd:dd:ab:66:f7:60:48:50:e9:2b:
fc:f7:ad:59:19:63:d2:09:dd:37:d1:93:5e:25:59:
16:01:37:09:09:86:61:5d:92:5e:a1:48:b4:8b:f8:
da:0e:22:99:7b:2a:27:b8:f5:d1:95:6a:a1:86:df:
ce:58:30:67:da:a9:51:1f:5a:3d:b9:b4:b7:f8:c6:
19:ef:3d:81:c2:98:34:6a:33:9d:dc:32:2f:97:8b:
30:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:F8:3D:65:FF:78:52:B0:B8:5A:BB:B0:05:36:31:E5:81:F2:69:BD
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3fg9Zf94UrC4WruwBTYx5YHyab0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
42:f4:50:2c:91:65:d0:01:84:c1:1a:c0:f5:d4:5c:83:dc:48:
08:81:4c:6c:06:82:f6:aa:07:56:e8:5b:da:3f:18:e3:dd:03:
31:02:75:27:b1:af:3a:4e:35:6a:16:0a:de:e4:ad:3b:eb:e4:
a5:26:67:d8:39:45:4e:2c:0c:5d:fc:c1:98:27:fd:5f:6f:99:
b3:d4:75:4d:a8:b3:01:35:35:4a:ea:cd:de:15:48:34:0a:c2:
32:a1:b0:7f:ef:ad:03:1a:95:0c:02:f3:a5:26:2d:2e:19:02:
66:42:02:fc:34:46:a9:62:c4:c6:fd:6f:d8:e2:09:13:dc:40:
c5:36:c3:a6:d3:13:70:c1:37:34:29:87:45:f2:f5:78:b1:af:
78:65:7a:65:a0:0a:c7:b8:f4:1c:e5:d5:51:da:f6:4a:25:fe:
50:f2:01:35:8b:39:3b:68:e7:3d:80:fe:d1:c8:21:22:b2:f2:
76:b8:93:c8:f2:7e:f8:5a:aa:18:1a:83:36:24:ae:0f:43:aa:
67:77:f6:49:6c:2f:a3:b3:95:57:2f:ae:d1:f7:16:4d:bf:e4:
20:4d:22:b6:e1:39:6c:9e:ea:40:e3:ed:4c:a2:7c:f1:cd:43:
8f:d7:5c:cd:43:2e:f2:b8:f7:ce:e1:b5:72:ba:b5:15:07:56:
86:80:c2:1a
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYY6z5gyEZeIs9N4i530+stZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMjEwMTAxMjA4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZGY4M2Q2NWZmNzg1MmIwYjg1YWJiYjAwNTM2MzFlNTgxZjI2OWJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+Ab6GAz+nfsitwor0k9qaLRDjm6
bQtj6GNG46m7eofbl3gmthqjdRB2BG4k1XdEs2JDdOXJVjZy9bulfoPFEym8/73e
0UyAm/PkcY66BF/qDTbNLX6Yy+5xxSBZ7895H8jsfakuE7HnR3qHOzaBoH0zpFwl
/56MpaVk20WYJfJFCS48N9B8v0wf0IM216GFrafDJWENMaCCxZYW6plCOnOz0sJ0
+zre+N3dq2b3YEhQ6Sv8961ZGWPSCd030ZNeJVkWATcJCYZhXZJeoUi0i/jaDiKZ
eyonuPXRlWqhht/OWDBn2qlRH1o9ubS3+MYZ7z2Bwpg0ajOd3DIvl4swswIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFN34PWX/eFKwuFq7sAU2MeWB8mm9MB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvM2ZnOVpmOTRVckM0V3J1d0JUWXg1WUh5YWIwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAEL0UCyRZdABhMEawPXU
XIPcSAiBTGwGgvaqB1boW9o/GOPdAzECdSexrzpONWoWCt7krTvr5KUmZ9g5RU4s
DF38wZgn/V9vmbPUdU2oswE1NUrqzd4VSDQKwjKhsH/vrQMalQwC86UmLS4ZAmZC
Avw0RqlixMb9b9jiCRPcQMU2w6bTE3DBNzQph0Xy9Xixr3hlemWgCse49Bzl1VHa
9kol/lDyATWLOTto5z2A/tHIISKy8na4k8jyfvhaqhgagzYkrg9Dqmd39klsL6Oz
lVcvrtH3Fk2/5CBNIrbhOWye6kDj7UyifPHNQ4/XXM1DLvK4987htXK6tRUHVoaA
who=
-----END CERTIFICATE-----
Generated at Wed Apr 30 18:23:42 2025 by rpki-client