Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/A0c36Xz9CQpSQe_uAT60zuBVYak.roa
File: A0c36Xz9CQpSQe_uAT60zuBVYak.roa (raw, json)
Hash identifier: s6n8oJa+hqRJ+jL0w14kaj/0JXH76IvUiJzjVvaSmUg=
Subject key identifier: 03:47:37:E9:7C:FD:09:0A:52:41:EF:EE:01:3E:B4:CE:E0:55:61:A9
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 7398C3D0
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/A0c36Xz9CQpSQe_uAT60zuBVYak.roa
Signing time: Fri 18 Mar 2022 18:11:03 +0000
ROA not before: Fri 18 Mar 2022 18:11:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:17f:87e3:2531/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1939391440 (0x7398c3d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 18 18:11:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=034737e97cfd090a5241efee013eb4cee05561a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b3:4c:ae:e8:39:6f:81:bc:09:73:b4:00:10:
33:dd:5b:5c:6a:41:3d:cd:98:92:d0:26:6b:86:64:
a0:29:22:73:57:a1:ad:2c:10:99:00:58:7e:20:b3:
e2:6e:77:75:76:38:da:9f:18:c3:61:c2:f4:30:0c:
0e:5e:d0:16:00:30:74:f4:99:bc:73:6d:0a:09:a7:
b7:6d:4e:9f:f1:50:ae:95:ac:ca:a2:fc:8a:f4:a4:
fb:2e:6e:9d:c2:ab:e3:af:d0:a9:1f:22:7c:4a:b1:
95:f1:df:a3:13:d8:e0:3c:32:85:49:62:e0:02:64:
10:af:3f:f0:d5:d0:fa:d0:9b:a9:cd:06:d1:7a:bf:
57:9b:ef:4f:08:f7:d2:64:10:01:50:ac:ee:28:12:
30:a6:a0:ca:98:c9:8c:4c:4b:08:68:47:72:20:9a:
0a:1a:6e:83:5b:93:b2:4c:d3:e2:20:b1:69:b3:87:
9d:c1:90:32:fb:22:07:7a:8c:bb:4e:81:b5:c8:4f:
aa:e4:b1:96:09:55:b2:3e:64:87:73:06:f9:84:b8:
40:76:94:b5:43:42:e3:92:47:5d:21:8d:50:7c:67:
9a:b0:7f:51:8d:5c:6f:f8:a2:b9:d4:eb:1e:f8:16:
fb:e6:51:74:57:02:25:c6:19:f9:73:b7:68:12:b2:
9d:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:47:37:E9:7C:FD:09:0A:52:41:EF:EE:01:3E:B4:CE:E0:55:61:A9
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/A0c36Xz9CQpSQe_uAT60zuBVYak.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
31:77:b0:a0:b6:3d:d9:2c:df:13:ae:9b:4b:12:38:5d:15:dc:
49:ef:97:5b:6e:5e:bd:72:2d:0e:0c:ad:01:51:0b:62:e6:a3:
9f:bf:4c:cc:0a:3e:f6:15:a6:99:eb:32:7b:9e:a1:07:00:02:
22:4c:33:e4:85:91:d3:38:91:f0:bb:f2:0b:5f:c6:17:16:ca:
51:92:22:c4:f4:83:4b:d4:60:21:ad:dc:ac:6e:4a:86:7f:51:
e5:39:5d:33:01:2f:c6:58:88:70:e8:fa:fb:90:ed:4e:ba:95:
f5:cb:2f:8d:60:a4:5d:fd:30:c5:3a:17:ff:e0:00:ab:17:18:
95:dd:7b:62:0b:17:69:ad:c2:2c:c8:c3:d2:2e:bb:ca:48:30:
91:d3:14:f4:d1:f0:83:23:33:06:98:7a:f5:26:f1:76:a2:73:
e4:9c:4e:bc:4d:af:d8:ed:0f:49:44:43:5c:68:f6:db:6f:37:
b3:23:4f:7c:41:48:60:fe:5c:fd:d7:2f:78:d6:3d:fe:7a:e5:
e5:ce:9a:5b:0b:89:97:6d:34:df:05:b9:74:31:52:55:66:6f:
29:cb:4d:55:70:70:08:cc:60:d2:22:7d:9b:42:9c:fe:cd:47:
ac:6f:df:fe:08:ce:24:82:c9:2f:86:e9:62:d3:a0:99:0c:23:
1b:fd:bf:31
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIEc5jD0DANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
MjA0N2JlMTViMjc1OTAyZGNmNjE3ZGMzZDBlMTZkYzFmMzA4MDIyMB4XDTIyMDMx
ODE4MTEwM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMDM0NzM3ZTk3Y2Zk
MDkwYTUyNDFlZmVlMDEzZWI0Y2VlMDU1NjFhOTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAK6zTK7oOW+BvAlztAAQM91bXGpBPc2YktAma4ZkoCkic1eh
rSwQmQBYfiCz4m53dXY42p8Yw2HC9DAMDl7QFgAwdPSZvHNtCgmnt21On/FQrpWs
yqL8ivSk+y5uncKr46/QqR8ifEqxlfHfoxPY4DwyhUli4AJkEK8/8NXQ+tCbqc0G
0Xq/V5vvTwj30mQQAVCs7igSMKagypjJjExLCGhHciCaChpug1uTskzT4iCxabOH
ncGQMvsiB3qMu06BtchPquSxlglVsj5kh3MG+YS4QHaUtUNC45JHXSGNUHxnmrB/
UY1cb/iiudTrHvgW++ZRdFcCJcYZ+XO3aBKynfMCAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBQDRzfpfP0JClJB7+4BPrTO4FVhqTAfBgNVHSMEGDAWgBRyBHvhWydZAtz2
F9w9DhbcHzCAIjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2NnUjc0VnNuV1FMYzloZmNQUTRXM0I4d2dDSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNWUvNzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8x
L0EwYzM2WHo5Q1FwU1FlX3VBVDYwenVCVllhay5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWUv
Nzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8xL2NnUjc0VnNuV1FM
YzloZmNQUTRXM0I4d2dDSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEA8EAGDAPBAIAAjAJAwcAIAEGfABk
MA0GCSqGSIb3DQEBCwUAA4IBAQAxd7Cgtj3ZLN8TrptLEjhdFdxJ75dbbl69ci0O
DK0BUQti5qOfv0zMCj72FaaZ6zJ7nqEHAAIiTDPkhZHTOJHwu/ILX8YXFspRkiLE
9INL1GAhrdysbkqGf1HlOV0zAS/GWIhw6Pr7kO1OupX1yy+NYKRd/TDFOhf/4ACr
FxiV3XtiCxdprcIsyMPSLrvKSDCR0xT00fCDIzMGmHr1JvF2onPknE68Ta/Y7Q9J
RENcaPbbbzezI098QUhg/lz91y941j3+euXlzppbC4mXbTTfBbl0MVJVZm8py01V
cHAIzGDSIn2bQpz+zUesb9/+CM4kgskvhuli06CZDCMb/b8x
-----END CERTIFICATE-----
Generated at Wed Apr 30 17:44:01 2025 by rpki-client