Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3hZzU3J57rDAqdnNw4keepqsfYg.roa
File: 3hZzU3J57rDAqdnNw4keepqsfYg.roa (raw, json)
Hash identifier: Ge0IVq8ffH6liNROo9ER03nLLhAmy8Jbt6dONEaDcXs=
Subject key identifier: DE:16:73:53:72:79:EE:B0:C0:A9:D9:CD:C3:89:1E:7A:9A:AC:7D:88
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 896DB47B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3hZzU3J57rDAqdnNw4keepqsfYg.roa
Signing time: Thu 02 Jun 2022 23:12:20 +0000
ROA not before: Thu 02 Jun 2022 23:12:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:181:22f:7a99/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2305668219 (0x896db47b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 2 23:12:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=de1673537279eeb0c0a9d9cdc3891e7a9aac7d88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f9:1f:e4:12:5f:ed:4c:4a:0b:5d:7a:59:e4:
17:16:a4:d4:ef:ef:a4:12:a2:61:c8:32:e7:e9:1e:
09:c0:f2:b8:52:75:ba:92:ad:9e:7e:52:d5:d5:cf:
6f:d5:74:bf:c5:16:40:e6:43:98:2b:0d:26:f2:79:
44:94:3e:a1:06:e1:da:b1:c5:8f:07:52:47:3b:0e:
a5:da:34:52:de:49:30:f0:e1:13:89:60:b8:4d:c7:
c8:b7:23:de:94:87:49:c6:31:c9:73:8e:05:3e:f5:
37:b0:40:51:6f:3c:9c:cd:6b:e5:2e:aa:2b:7f:1f:
78:86:b7:fd:58:23:6c:62:ce:ca:10:1e:5e:5c:d9:
68:ce:90:08:d5:37:61:b0:64:ac:cf:e0:6f:51:75:
c6:67:65:e0:d8:90:a5:6b:11:40:20:ad:02:8c:0a:
ca:d8:38:9a:fe:8d:55:7b:3d:29:73:89:36:2b:86:
8a:a6:3a:f0:be:00:7b:b0:b4:c5:86:31:25:ac:58:
12:f8:96:b1:55:8b:5c:cc:27:da:7c:7b:9a:ac:37:
9a:5e:87:20:85:25:16:46:b6:fd:9f:79:1a:db:b4:
16:05:db:3e:67:7f:58:b1:5d:de:37:28:48:cc:46:
ee:37:04:49:50:9f:89:d2:1e:72:8b:22:10:1d:bd:
c4:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:16:73:53:72:79:EE:B0:C0:A9:D9:CD:C3:89:1E:7A:9A:AC:7D:88
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3hZzU3J57rDAqdnNw4keepqsfYg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8f:27:bc:46:3d:58:97:6d:0f:5a:6b:45:47:6f:06:17:c1:22:
07:04:46:a4:91:62:f3:82:a8:d6:b5:04:af:9a:7e:59:0c:31:
73:b0:f3:c6:cb:43:24:1d:8f:ed:45:f6:7f:71:e6:c8:f9:31:
5b:dd:04:9f:e2:32:41:a4:0e:57:47:d0:80:56:8f:20:40:98:
9b:12:a8:16:1a:27:4f:f9:02:01:ab:2a:24:40:70:d8:d9:0d:
1c:31:1f:c5:76:73:db:6e:2f:e8:25:22:33:c3:96:28:1c:d7:
d9:e2:dd:02:7c:ed:eb:9a:4e:be:37:94:28:1b:ab:a0:64:14:
21:e1:e4:f8:99:37:31:f0:df:cc:38:0a:c5:c6:7a:1f:02:ad:
61:ae:2b:48:01:16:9a:15:e7:44:90:a7:fd:74:19:90:16:5d:
62:2e:ce:4d:35:7c:35:11:81:00:a4:4e:ce:07:86:e2:fa:09:
12:d3:c5:b6:e8:58:bb:5d:f4:5f:e7:db:6f:3f:8e:9e:af:7c:
1d:9f:2f:a4:77:d9:6f:b0:ed:f1:fa:b2:12:e0:a2:13:65:70:
d2:a5:7f:5f:fc:47:70:26:83:bb:24:bb:3a:67:42:21:35:03:
a1:c8:d6:53:4c:55:75:8b:d3:08:f5:59:49:29:a9:3a:cd:de:
35:cf:0c:0b
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgIFAIlttHswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMo
NzIwNDdiZTE1YjI3NTkwMmRjZjYxN2RjM2QwZTE2ZGMxZjMwODAyMjAeFw0yMjA2
MDIyMzEyMjBaFw0yMzA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKGRlMTY3MzUzNzI3
OWVlYjBjMGE5ZDljZGMzODkxZTdhOWFhYzdkODgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCv+R/kEl/tTEoLXXpZ5BcWpNTv76QSomHIMufpHgnA8rhS
dbqSrZ5+UtXVz2/VdL/FFkDmQ5grDSbyeUSUPqEG4dqxxY8HUkc7DqXaNFLeSTDw
4ROJYLhNx8i3I96Uh0nGMclzjgU+9TewQFFvPJzNa+Uuqit/H3iGt/1YI2xizsoQ
Hl5c2WjOkAjVN2GwZKzP4G9RdcZnZeDYkKVrEUAgrQKMCsrYOJr+jVV7PSlziTYr
hoqmOvC+AHuwtMWGMSWsWBL4lrFVi1zMJ9p8e5qsN5pehyCFJRZGtv2feRrbtBYF
2z5nf1ixXd43KEjMRu43BElQn4nSHnKLIhAdvcQjAgMBAAGjggIaMIICFjAdBgNV
HQ4EFgQU3hZzU3J57rDAqdnNw4keepqsfYgwHwYDVR0jBBgwFoAUcgR74VsnWQLc
9hfcPQ4W3B8wgCIwDgYDVR0PAQH/BAQDAgeAMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVM
VC9jZ1I3NFZzbldRTGM5aGZjUFE0VzNCOHdnQ0kuY2VyMIGNBggrBgEFBQcBCwSB
gDB+MHwGCCsGAQUFBzALhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9ERUZBVUxULzVlLzc5ODQ0Ny0yMWY0LTQ1YWItOTlkYy0xYWJlM2FjMTBhYTYv
MS8zaFp6VTNKNTdyREFxZG5OdzRrZWVwcXNmWWcucm9hMIGBBgNVHR8EejB4MHag
dKByhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVl
Lzc5ODQ0Ny0yMWY0LTQ1YWItOTlkYy0xYWJlM2FjMTBhYTYvMS9jZ1I3NFZzbldR
TGM5aGZjUFE0VzNCOHdnQ0kuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
MAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYDBAPBABgwDwQCAAIwCQMHACABBnwA
ZDANBgkqhkiG9w0BAQsFAAOCAQEAjye8Rj1Yl20PWmtFR28GF8EiBwRGpJFi84Ko
1rUEr5p+WQwxc7DzxstDJB2P7UX2f3HmyPkxW90En+IyQaQOV0fQgFaPIECYmxKo
FhonT/kCAasqJEBw2NkNHDEfxXZz224v6CUiM8OWKBzX2eLdAnzt65pOvjeUKBur
oGQUIeHk+Jk3MfDfzDgKxcZ6HwKtYa4rSAEWmhXnRJCn/XQZkBZdYi7OTTV8NRGB
AKROzgeG4voJEtPFtuhYu130X+fbbz+Onq98HZ8vpHfZb7Dt8fqyEuCiE2Vw0qV/
X/xHcCaDuyS7OmdCITUDocjWU0xVdYvTCPVZSSmpOs3eNc8MCw==
-----END CERTIFICATE-----
Generated at Thu May 1 05:37:46 2025 by rpki-client