Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/N-v_0-3KR-f-y1-UMLelBYJdqNw.roa
File: N-v_0-3KR-f-y1-UMLelBYJdqNw.roa (raw, json)
Hash identifier: lvYe20l6hD8y/5/YjAXImaidx7yY2nlJaumxplcilwE=
Subject key identifier: 37:EB:FF:D3:ED:CA:47:E7:FE:CB:5F:94:30:B7:A5:05:82:5D:A8:DC
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0182AE0D3C3556ABA401E152E7A2EB89D43E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/N-v_0-3KR-f-y1-UMLelBYJdqNw.roa
Signing time: Wed 17 Aug 2022 23:04:39 +0000
ROA not before: Wed 17 Aug 2022 23:04:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64:ffff:0:182:ae0d:5f6/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:ae:0d:3c:35:56:ab:a4:01:e1:52:e7:a2:eb:89:d4:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 17 23:04:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=37ebffd3edca47e7fecb5f9430b7a505825da8dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:25:ff:8e:12:0b:a5:3b:a4:f1:67:4f:98:01:
76:3c:45:b5:c7:13:14:9e:0b:c6:ab:a2:26:ee:50:
2d:92:7b:af:bd:1e:f1:7c:62:56:d3:a4:0c:82:15:
2c:65:d6:c8:7b:c3:23:73:c1:c5:48:a7:08:52:09:
4c:5c:9b:85:eb:f0:97:cf:ba:75:36:22:38:93:d3:
17:31:07:15:70:52:ca:45:88:18:e0:d1:96:bb:99:
71:d1:1b:e9:bb:8e:97:58:f0:ba:6f:c3:33:49:6e:
a2:28:ad:47:8e:cc:bc:a1:3a:c1:c8:3f:9a:6e:ec:
80:9e:d4:35:44:16:80:04:99:c4:2b:24:74:bb:e8:
77:cf:87:64:09:20:26:83:91:9f:d8:a8:eb:aa:30:
fa:06:06:66:93:51:d3:d3:a1:b8:71:28:5f:c0:59:
50:99:23:4c:09:b4:cc:ed:b2:ea:ad:4c:aa:90:81:
c9:49:b2:1b:47:6c:e3:c3:5a:4b:9e:5b:01:4b:13:
d4:47:be:7e:f9:c5:19:a3:22:43:fd:a0:b8:bb:75:
92:c9:22:f1:82:fd:62:78:f6:e4:6d:be:31:67:3c:
3d:d4:b6:f4:42:98:05:ae:9a:4f:bb:e7:51:72:ae:
b1:c0:69:f3:66:97:06:19:11:55:a0:e0:5f:51:12:
24:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:EB:FF:D3:ED:CA:47:E7:FE:CB:5F:94:30:B7:A5:05:82:5D:A8:DC
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/N-v_0-3KR-f-y1-UMLelBYJdqNw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
77:61:1a:12:c6:44:e1:22:bf:04:8d:95:ee:a9:0c:95:cc:01:
32:3f:ba:f2:9c:6f:55:1e:f5:4b:af:a8:71:e2:df:be:69:20:
22:64:23:9e:eb:e9:d6:4e:4e:95:f9:55:69:ed:ab:d3:3b:d4:
71:5f:c3:6b:f2:77:65:e2:03:9b:8e:51:5f:fb:55:05:48:56:
1e:9b:60:27:5b:e8:9e:a6:d7:bb:ed:01:68:fa:f9:2b:2a:4e:
d6:d8:c1:6f:e9:22:8b:ca:ca:67:5b:89:8e:cb:4a:fb:fe:51:
76:f3:bc:49:3d:e3:10:5d:48:be:5a:03:fb:07:6a:c0:5a:99:
4a:34:52:e4:f2:07:67:e9:a3:7b:02:e8:24:aa:39:27:88:12:
74:0e:e9:5a:85:d1:14:a3:63:a6:cb:c5:0a:ff:e9:23:51:db:
82:c0:77:59:cc:8f:da:af:59:27:c8:ba:2c:6c:5f:0a:06:7c:
7a:37:3f:15:f8:ad:b1:80:ca:20:ae:f4:26:1d:07:24:b9:58:
30:b1:2c:c9:a1:e4:fc:94:f1:14:cb:dd:20:0b:ef:64:47:be:
2b:c2:59:b9:f8:d4:be:ce:97:9e:8d:fd:ca:ac:f0:02:e6:e8:
b5:50:65:0a:f4:be:eb:57:9b:d3:e1:fd:4a:fc:3e:e0:6e:e5:
91:6b:55:ff
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYKuDTw1VqukAeFS56LridQ+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIwODE3MjMwNDM5WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzN2ViZmZkM2VkY2E0N2U3ZmVjYjVmOTQzMGI3YTUwNTgyNWRhOGRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlyX/jhILpTuk8WdPmAF2PEW1xxMU
ngvGq6Im7lAtknuvvR7xfGJW06QMghUsZdbIe8Mjc8HFSKcIUglMXJuF6/CXz7p1
NiI4k9MXMQcVcFLKRYgY4NGWu5lx0Rvpu46XWPC6b8MzSW6iKK1Hjsy8oTrByD+a
buyAntQ1RBaABJnEKyR0u+h3z4dkCSAmg5Gf2KjrqjD6BgZmk1HT06G4cShfwFlQ
mSNMCbTM7bLqrUyqkIHJSbIbR2zjw1pLnlsBSxPUR75++cUZoyJD/aC4u3WSySLx
gv1iePbkbb4xZzw91Lb0QpgFrppPu+dRcq6xwGnzZpcGGRFVoOBfURIkhwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFDfr/9Ptykfn/stflDC3pQWCXajcMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvTi12XzAtM0tSLWYteTEtVU1MZWxCWUpkcU53LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAHdhGhLGROEivwSNle6p
DJXMATI/uvKcb1Ue9UuvqHHi375pICJkI57r6dZOTpX5VWntq9M71HFfw2vyd2Xi
A5uOUV/7VQVIVh6bYCdb6J6m17vtAWj6+SsqTtbYwW/pIovKymdbiY7LSvv+UXbz
vEk94xBdSL5aA/sHasBamUo0UuTyB2fpo3sC6CSqOSeIEnQO6VqF0RSjY6bLxQr/
6SNR24LAd1nMj9qvWSfIuixsXwoGfHo3PxX4rbGAyiCu9CYdByS5WDCxLMmh5PyU
8RTL3SAL72RHvivCWbn41L7Ol56N/cqs8ALm6LVQZQr0vutXm9Ph/Ur8PuBu5ZFr
Vf8=
-----END CERTIFICATE-----
Generated at Wed Apr 30 20:40:34 2025 by rpki-client