Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3zH79gyGoHvTJubrsMCN7_xxGvM.roa
File: 3zH79gyGoHvTJubrsMCN7_xxGvM.roa (raw, json)
Hash identifier: kIfRB3VOUwzGHPoC/ZN7i/6fvdkI3S6v/REwiDocXmE=
Subject key identifier: DF:31:FB:F6:0C:86:A0:7B:D3:26:E6:EB:B0:C0:8D:EF:FC:71:1A:F3
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018939B6D4855AA82B7B8706006D7DBBDE0C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3zH79gyGoHvTJubrsMCN7_xxGvM.roa
Signing time: Sun 09 Jul 2023 08:13:50 +0000
ROA not before: Sun 09 Jul 2023 08:13:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:39:b6:d4:85:5a:a8:2b:7b:87:06:00:6d:7d:bb:de:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 9 08:13:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=df31fbf60c86a07bd326e6ebb0c08deffc711af3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:24:11:7a:44:00:a3:3d:d6:87:80:dc:a9:10:
27:d5:d7:69:ea:a1:bb:16:47:f4:c4:29:f3:00:7f:
41:c6:5b:f6:d5:05:70:a7:e8:62:3b:f1:7f:83:d3:
5b:bf:54:4e:16:63:fa:98:de:23:f6:f3:b4:e9:85:
e2:1f:ac:98:39:24:bc:0e:17:46:34:41:2a:f2:26:
0c:e4:b4:12:e5:a5:a7:65:dc:64:c2:da:2c:d8:7d:
26:57:fd:d4:02:c2:6d:29:80:bc:b0:e6:8b:08:ce:
c2:0c:85:fc:16:cd:9d:74:d8:ee:c0:1e:85:eb:70:
ea:e4:63:c4:bc:a1:b4:1b:a1:2e:90:50:5c:26:0f:
a2:c1:a6:6a:d2:2d:b7:ef:71:79:9c:7c:3a:fd:2e:
d6:d3:3c:4d:31:89:d9:8e:c4:1b:c9:51:5b:a3:09:
d9:33:f1:53:de:7d:c1:0a:6f:05:5e:18:39:ad:39:
50:6c:86:00:92:fd:c8:0d:c6:3b:ed:66:36:16:19:
c5:cb:0f:9e:ca:f2:59:de:ad:bb:76:fc:cf:02:8c:
6b:6a:00:a0:4e:d9:4b:00:27:86:59:57:3d:da:63:
fc:f0:06:66:db:8c:58:ee:fd:33:da:59:3e:9b:28:
9e:84:16:fc:e4:14:91:20:d9:fb:42:cd:c9:75:8a:
a0:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:31:FB:F6:0C:86:A0:7B:D3:26:E6:EB:B0:C0:8D:EF:FC:71:1A:F3
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3zH79gyGoHvTJubrsMCN7_xxGvM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
77:4f:fd:4f:a6:eb:02:09:54:b5:96:53:1e:38:0b:8a:4a:19:
54:c7:0e:e3:f5:87:ea:28:1a:a2:e0:0c:94:51:d4:fc:a6:6f:
34:37:2c:9b:4c:94:3e:5d:9c:68:21:b3:08:96:3a:07:5c:de:
23:ef:35:28:bb:c1:0c:90:a8:d7:9e:d6:e8:32:f4:d7:cc:c8:
6b:ca:b7:dd:02:c0:9d:5c:57:2b:2c:13:e8:af:58:8f:d6:08:
59:0c:f1:0a:48:23:00:dd:d7:6a:91:8a:05:40:76:f8:a2:46:
8d:72:60:ff:6a:93:5f:d7:85:34:99:79:1a:9f:b1:bd:54:0a:
31:c5:9b:ec:6d:79:f7:d7:9e:2a:e1:3e:b1:7b:88:a3:1c:4f:
03:57:8c:3c:9f:bd:43:20:96:72:25:6f:43:84:d0:44:d3:42:
0a:85:1b:d2:50:f1:57:c4:c2:64:ae:59:44:8d:72:c6:ef:d2:
a9:03:fd:77:7e:63:58:86:2f:96:9b:9b:4a:0e:79:46:b2:c0:
8e:b3:cc:c3:a3:e9:a7:4e:ab:75:dd:85:a9:68:79:5c:3c:7e:
df:8f:6d:04:48:bf:50:1d:2f:40:4a:2d:b6:4c:de:dd:4a:86:
8e:d1:b2:a2:91:af:4e:33:e4:53:02:2f:50:ba:c0:e9:cd:d5:
31:c3:d2:f0
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYk5ttSFWqgre4cGAG19u94MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNzA5MDgxMzUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZjMxZmJmNjBjODZhMDdiZDMyNmU2ZWJiMGMwOGRlZmZjNzExYWYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkiQRekQAoz3Wh4DcqRAn1ddp6qG7
Fkf0xCnzAH9Bxlv21QVwp+hiO/F/g9Nbv1ROFmP6mN4j9vO06YXiH6yYOSS8DhdG
NEEq8iYM5LQS5aWnZdxkwtos2H0mV/3UAsJtKYC8sOaLCM7CDIX8Fs2ddNjuwB6F
63Dq5GPEvKG0G6EukFBcJg+iwaZq0i2373F5nHw6/S7W0zxNMYnZjsQbyVFbownZ
M/FT3n3BCm8FXhg5rTlQbIYAkv3IDcY77WY2FhnFyw+eyvJZ3q27dvzPAoxragCg
TtlLACeGWVc92mP88AZm24xY7v0z2lk+myiehBb85BSRINn7Qs3JdYqgIQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFN8x+/YMhqB70ybm67DAje/8cRrzMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvM3pINzlneUdvSHZUSnVicnNNQ043X3h4R3ZNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAHdP/U+m6wIJVLWWUx44
C4pKGVTHDuP1h+ooGqLgDJRR1PymbzQ3LJtMlD5dnGghswiWOgdc3iPvNSi7wQyQ
qNee1ugy9NfMyGvKt90CwJ1cVyssE+ivWI/WCFkM8QpIIwDd12qRigVAdviiRo1y
YP9qk1/XhTSZeRqfsb1UCjHFm+xteffXnirhPrF7iKMcTwNXjDyfvUMglnIlb0OE
0ETTQgqFG9JQ8VfEwmSuWUSNcsbv0qkD/Xd+Y1iGL5abm0oOeUaywI6zzMOj6adO
q3XdhaloeVw8ft+PbQRIv1AdL0BKLbZM3t1Kho7RsqKRr04z5FMCL1C6wOnN1THD
0vA=
-----END CERTIFICATE-----
Generated at Fri May 2 14:55:15 2025 by rpki-client