Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/DX3TGIyE-7xKt4LaV2XPupQOcyw.roa
File: DX3TGIyE-7xKt4LaV2XPupQOcyw.roa (raw, json)
Hash identifier: BxjHkqdYE42CRtvXXH6/TjF8hTsg6XQQNwfrxrdZszI=
Subject key identifier: 0D:7D:D3:18:8C:84:FB:BC:4A:B7:82:DA:57:65:CF:BA:94:0E:73:2C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018307BE68A0E15D4620EBA00FC41534E3DA
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/DX3TGIyE-7xKt4LaV2XPupQOcyw.roa
Signing time: Sun 04 Sep 2022 09:04:22 +0000
ROA not before: Sun 04 Sep 2022 09:04:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:183:7be:2198/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:07:be:68:a0:e1:5d:46:20:eb:a0:0f:c4:15:34:e3:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Sep 4 09:04:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0d7dd3188c84fbbc4ab782da5765cfba940e732c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a7:5c:2b:40:fe:bc:79:e0:b9:0b:d6:95:13:
4f:d4:ff:13:68:6e:f9:ce:6f:e2:62:9c:ee:64:0b:
42:f9:12:7f:ba:e2:77:d4:58:f7:78:bb:6d:e9:0e:
b5:19:15:5a:60:5f:26:e2:e6:8e:12:55:19:6a:4c:
f1:e9:69:72:22:18:34:04:3b:e6:7b:f1:f9:59:f3:
9a:1f:e2:64:68:f4:46:7b:2c:9a:4c:d6:95:0a:42:
d1:a7:b4:0a:0c:76:17:28:1e:16:87:8c:fc:a0:75:
6b:71:60:f1:c5:30:1d:0b:07:d2:e5:76:6e:6c:b0:
38:16:f5:b6:da:a4:08:f7:e8:2a:ba:4c:af:f0:e4:
1f:b3:3d:2a:f3:a1:2c:8c:21:0f:a2:95:bf:33:73:
4e:db:4a:00:1e:b0:19:83:bc:94:b9:ef:52:91:82:
b7:a4:07:17:11:8e:cd:66:f3:13:cd:5d:b6:ad:74:
44:93:1d:64:03:7b:d0:27:ee:89:18:05:a2:22:bd:
24:41:31:d3:fe:55:ac:30:23:85:64:22:04:5c:e2:
0b:36:d1:fb:95:52:40:e0:ec:3f:f9:d8:70:5d:67:
0a:d3:c3:87:09:3c:d7:2d:72:64:37:1f:d3:1e:3b:
38:c7:92:f1:53:e3:70:99:8e:ea:ce:11:b4:44:5e:
82:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:7D:D3:18:8C:84:FB:BC:4A:B7:82:DA:57:65:CF:BA:94:0E:73:2C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/DX3TGIyE-7xKt4LaV2XPupQOcyw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6b:b6:4b:5d:2c:4a:f1:54:b6:42:31:4d:36:63:5a:3c:27:46:
e9:d1:1e:c7:0b:40:2b:b2:10:2c:b8:56:3c:30:bc:aa:07:e7:
b4:c6:a2:b3:b8:3d:ef:d1:3a:89:c5:a1:41:b7:f1:2f:5a:af:
d3:15:e9:54:48:7c:fa:e0:49:7f:c1:e0:37:de:61:8a:78:c5:
65:0b:10:69:62:67:dd:22:b7:ff:a4:7d:b1:26:7a:ca:bb:21:
25:e2:2e:6b:17:eb:17:49:86:80:00:98:76:0b:69:2c:51:3c:
97:ab:c9:33:21:16:4e:bc:81:d4:b1:be:8d:59:14:4e:1c:e0:
0c:7d:8b:09:0c:09:c6:18:68:2e:29:f7:60:45:83:3b:16:ca:
81:8a:02:62:35:44:1d:ab:1b:1e:88:3b:94:74:e0:48:51:ba:
e7:08:b2:f7:8e:51:df:62:6d:42:33:81:ce:ec:bd:37:b4:0c:
60:2b:8b:f9:9e:d7:3e:04:9b:72:74:5c:31:a2:00:40:5a:54:
5f:e3:37:d9:e9:87:f8:fc:ac:ad:d5:eb:9d:07:b6:2e:ec:cf:
70:69:d2:97:12:77:28:de:de:0e:a1:2b:29:65:6b:54:bc:ac:
7f:79:5a:36:c2:86:15:50:b3:35:c4:9a:b9:91:0e:ea:37:43:
6d:8e:94:d6
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYMHvmig4V1GIOugD8QVNOPaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIwOTA0MDkwNDIyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZDdkZDMxODhjODRmYmJjNGFiNzgyZGE1NzY1Y2ZiYTk0MGU3MzJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr6dcK0D+vHnguQvWlRNP1P8TaG75
zm/iYpzuZAtC+RJ/uuJ31Fj3eLtt6Q61GRVaYF8m4uaOElUZakzx6WlyIhg0BDvm
e/H5WfOaH+JkaPRGeyyaTNaVCkLRp7QKDHYXKB4Wh4z8oHVrcWDxxTAdCwfS5XZu
bLA4FvW22qQI9+gqukyv8OQfsz0q86EsjCEPopW/M3NO20oAHrAZg7yUue9SkYK3
pAcXEY7NZvMTzV22rXREkx1kA3vQJ+6JGAWiIr0kQTHT/lWsMCOFZCIEXOILNtH7
lVJA4Ow/+dhwXWcK08OHCTzXLXJkNx/THjs4x5LxU+NwmY7qzhG0RF6CpQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFA190xiMhPu8SreC2ldlz7qUDnMsMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvRFgzVEdJeUUtN3hLdDRMYVYyWFB1cFFPY3l3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAGu2S10sSvFUtkIxTTZj
WjwnRunRHscLQCuyECy4VjwwvKoH57TGorO4Pe/ROonFoUG38S9ar9MV6VRIfPrg
SX/B4DfeYYp4xWULEGliZ90it/+kfbEmesq7ISXiLmsX6xdJhoAAmHYLaSxRPJer
yTMhFk68gdSxvo1ZFE4c4Ax9iwkMCcYYaC4p92BFgzsWyoGKAmI1RB2rGx6IO5R0
4EhRuucIsveOUd9ibUIzgc7svTe0DGAri/me1z4Em3J0XDGiAEBaVF/jN9nph/j8
rK3V650Hti7sz3Bp0pcSdyje3g6hKylla1S8rH95WjbChhVQszXEmrmRDuo3Q22O
lNY=
-----END CERTIFICATE-----
Generated at Thu May 1 03:36:39 2025 by rpki-client