Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/L3g4UbJZNmBRaDdx5DNUG_T6mCQ.roa
File: L3g4UbJZNmBRaDdx5DNUG_T6mCQ.roa (raw, json)
Hash identifier: MzzjdZlt2m+bl/3XdXFdKrlrHISZRDVrBttFCu/BUYo=
Subject key identifier: 2F:78:38:51:B2:59:36:60:51:68:37:71:E4:33:54:1B:F4:FA:98:24
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184F739A38BCF13E7F1B97EF5141E01B192
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/L3g4UbJZNmBRaDdx5DNUG_T6mCQ.roa
Signing time: Fri 09 Dec 2022 14:11:00 +0000
ROA not before: Fri 09 Dec 2022 14:11:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:f7:39:a3:8b:cf:13:e7:f1:b9:7e:f5:14:1e:01:b1:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 9 14:11:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2f783851b259366051683771e433541bf4fa9824
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:c7:3f:2f:97:d0:34:77:b0:2d:72:e9:66:bd:
a3:26:97:5c:e9:95:ac:10:9d:c7:71:30:1e:04:5c:
94:95:d4:f4:9c:61:fc:b9:48:9c:62:e3:d4:8e:e8:
db:59:80:16:48:4e:87:74:dd:40:ce:48:b5:d5:23:
6c:8b:48:13:ec:80:0e:d2:eb:d0:66:14:94:c9:90:
79:f4:61:3d:3c:9e:26:d6:53:3c:5a:d8:d0:f3:45:
8b:76:79:1e:a1:df:ea:b0:8c:f1:aa:cc:d0:0a:e2:
14:81:1b:73:22:02:87:03:d2:8a:98:17:d4:2c:1e:
5e:29:9c:ff:42:85:b7:d5:77:6a:cf:98:0c:6f:44:
d2:e0:29:62:be:97:32:59:ff:3a:49:1e:89:5b:d6:
71:28:eb:ea:2d:41:c0:5a:12:a6:f0:f5:49:26:ad:
fb:5e:23:09:77:79:54:a6:69:61:ed:70:4b:8a:8f:
9f:b2:fc:4a:d2:67:3c:0d:c1:77:b4:cc:f5:3b:0b:
42:48:8d:d4:e9:13:80:17:2d:27:a0:d0:cc:4e:f5:
4d:36:90:46:d4:c6:2d:22:24:1c:44:36:c7:1a:5b:
2f:b0:9f:a7:61:41:a4:59:02:c4:ce:19:80:f3:5d:
13:a9:c5:66:21:4e:6b:c8:e5:00:86:a4:51:ff:b4:
b7:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:78:38:51:B2:59:36:60:51:68:37:71:E4:33:54:1B:F4:FA:98:24
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/L3g4UbJZNmBRaDdx5DNUG_T6mCQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5b:59:78:f4:37:6f:ce:0d:69:c3:c7:f9:57:d1:a5:e9:32:3d:
16:1c:66:4d:f6:a7:40:ea:88:af:ac:d8:8a:84:9b:8b:c1:9c:
9a:56:b8:ed:e7:71:d3:a7:85:d2:e3:b3:46:cd:e8:99:8f:87:
8a:32:3e:05:04:7e:66:12:99:ec:b9:3c:05:f0:6d:45:89:38:
9a:12:3d:9e:cb:f1:d1:50:68:3e:3e:08:08:66:fc:1f:f2:6f:
99:a3:08:ad:86:ba:45:59:4c:67:e2:ed:2b:a6:cb:0d:5b:72:
03:b8:27:57:26:b1:74:35:c3:77:c8:e0:ba:66:6b:34:e8:5c:
cf:50:ec:e3:57:26:e8:da:fe:ee:24:db:49:51:7e:e1:62:c5:
0b:c7:af:b8:89:fb:56:2c:44:3d:5b:01:19:6c:f8:48:72:fa:
6f:76:04:c6:bd:a7:93:cb:7b:ef:0b:e8:60:86:8a:cb:ef:73:
f8:c7:69:c0:6c:18:f8:21:9d:67:4c:20:97:05:65:db:95:a1:
7a:99:7f:b7:9f:05:b0:93:da:13:b6:1e:4f:4b:d5:84:da:19:
d7:62:fc:f4:a0:b9:d6:b0:d0:05:24:02:1b:63:e4:09:9a:06:
44:91:73:64:63:b7:36:ee:12:ad:82:95:d3:ab:ca:b4:87:ce:
b8:c3:c4:a3
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYT3OaOLzxPn8bl+9RQeAbGSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIxMjA5MTQxMTAwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZjc4Mzg1MWIyNTkzNjYwNTE2ODM3NzFlNDMzNTQxYmY0ZmE5ODI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAisc/L5fQNHewLXLpZr2jJpdc6ZWs
EJ3HcTAeBFyUldT0nGH8uUicYuPUjujbWYAWSE6HdN1Azki11SNsi0gT7IAO0uvQ
ZhSUyZB59GE9PJ4m1lM8WtjQ80WLdnkeod/qsIzxqszQCuIUgRtzIgKHA9KKmBfU
LB5eKZz/QoW31Xdqz5gMb0TS4ClivpcyWf86SR6JW9ZxKOvqLUHAWhKm8PVJJq37
XiMJd3lUpmlh7XBLio+fsvxK0mc8DcF3tMz1OwtCSI3U6ROAFy0noNDMTvVNNpBG
1MYtIiQcRDbHGlsvsJ+nYUGkWQLEzhmA810TqcVmIU5ryOUAhqRR/7S3XQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFC94OFGyWTZgUWg3ceQzVBv0+pgkMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvTDNnNFViSlpObUJSYURkeDVETlVHX1Q2bUNRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAFtZePQ3b84NacPH+VfR
pekyPRYcZk32p0DqiK+s2IqEm4vBnJpWuO3ncdOnhdLjs0bN6JmPh4oyPgUEfmYS
mey5PAXwbUWJOJoSPZ7L8dFQaD4+CAhm/B/yb5mjCK2GukVZTGfi7Sumyw1bcgO4
J1cmsXQ1w3fI4LpmazToXM9Q7ONXJuja/u4k20lRfuFixQvHr7iJ+1YsRD1bARls
+Ehy+m92BMa9p5PLe+8L6GCGisvvc/jHacBsGPghnWdMIJcFZduVoXqZf7efBbCT
2hO2Hk9L1YTaGddi/PSgudaw0AUkAhtj5AmaBkSRc2RjtzbuEq2CldOryrSHzrjD
xKM=
-----END CERTIFICATE-----
Generated at Fri May 2 22:09:40 2025 by rpki-client