Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/O-1DniG27C_rochF4z-pwdsXxOM.roa
File: O-1DniG27C_rochF4z-pwdsXxOM.roa (raw, json)
Hash identifier: GtjAF3SSro5FWq5KEEuOG+1/xq9xF/FKb6tNKH7SXrU=
Subject key identifier: 3B:ED:43:9E:21:B6:EC:2F:EB:A1:C8:45:E3:3F:A9:C1:DB:17:C4:E3
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188470316CB35AD380743B897EE220F56A2
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/O-1DniG27C_rochF4z-pwdsXxOM.roa
Signing time: Tue 23 May 2023 05:09:24 +0000
ROA not before: Tue 23 May 2023 05:09:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:47:03:16:cb:35:ad:38:07:43:b8:97:ee:22:0f:56:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 23 05:09:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3bed439e21b6ec2feba1c845e33fa9c1db17c4e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:d5:d2:c4:cc:90:d3:0a:bd:57:ca:6f:12:8f:
5a:d0:96:b3:fa:56:67:a4:58:d7:37:a0:35:66:cc:
36:83:77:cd:b2:d1:a1:3f:76:d6:d9:55:fc:20:b1:
99:08:8c:48:06:bf:10:b6:2b:4c:4a:c3:cf:05:58:
0e:cf:2c:fd:91:30:f5:3e:6a:8a:71:f2:b0:51:7b:
ba:78:a2:7c:c5:ef:9c:3a:e0:9d:84:4b:02:f2:70:
d7:1f:06:48:48:e1:f9:8c:43:51:67:a8:9a:a4:32:
e2:4c:7e:27:f5:d1:65:88:5b:25:07:a2:c8:17:36:
05:80:21:01:6f:c8:77:0c:d5:98:6a:a6:1e:d1:34:
5b:a2:40:43:1a:b2:75:8a:ae:bd:af:aa:f5:00:85:
fa:27:20:fc:ae:2d:13:36:66:52:ee:1a:1b:f7:6d:
52:2d:e2:00:56:b5:f4:28:1a:5a:3f:d9:a0:49:54:
ff:35:08:f8:34:bb:df:e9:01:bc:bd:20:ac:55:f8:
9e:06:70:77:c2:ed:be:72:37:33:24:4f:f1:36:00:
a3:d6:f9:5d:79:49:4d:2e:d5:d1:37:c4:04:4a:b2:
d3:c1:f9:d4:0e:fc:81:5c:d6:4a:59:59:e7:c1:63:
f1:08:78:36:1c:b7:31:71:ea:aa:22:fd:57:e2:6c:
04:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:ED:43:9E:21:B6:EC:2F:EB:A1:C8:45:E3:3F:A9:C1:DB:17:C4:E3
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/O-1DniG27C_rochF4z-pwdsXxOM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
35:13:0c:ca:73:86:1b:f6:ea:36:e4:06:ff:92:9d:19:2b:79:
d0:8b:e3:32:6a:c1:a3:28:06:97:92:f1:8d:fb:64:4a:37:0a:
7a:a3:80:09:d7:69:2c:15:3b:4c:b1:d6:a5:68:34:d6:c6:aa:
3d:f3:7a:df:f9:a2:29:fc:fd:a9:aa:93:b2:c0:88:0d:df:48:
22:8a:0c:30:0e:9a:b4:ca:4c:c5:33:fe:12:4c:9d:a9:c5:61:
1d:ef:f9:43:ec:b7:df:8e:48:3b:2a:e0:8c:aa:d8:9d:3c:9b:
94:70:ea:c9:4c:db:87:69:b6:da:d5:97:9f:cf:b6:47:80:8c:
2f:f3:dd:7c:52:46:92:f2:76:2e:5f:10:7e:fc:99:02:a0:06:
9c:70:10:6d:e3:08:3b:0b:f6:da:a3:7a:0e:8e:3c:27:8e:a4:
55:82:43:05:d4:ca:19:d2:6d:9c:e6:f4:87:95:c3:12:ec:e2:
4c:3c:c2:3f:dd:23:22:43:d9:11:8d:1f:43:e2:46:46:1d:30:
f3:f9:c3:e5:2a:c4:ba:3e:8f:47:e6:99:42:19:c1:46:81:b4:
9c:f7:46:5b:7b:a5:85:b4:f2:9f:72:f4:71:8a:2a:ac:f0:9e:
f2:46:99:8a:9b:19:8c:cb:5b:aa:c2:a5:73:80:68:1d:de:68:
bd:6e:04:65
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYhHAxbLNa04B0O4l+4iD1aiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNTIzMDUwOTI0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYmVkNDM5ZTIxYjZlYzJmZWJhMWM4NDVlMzNmYTljMWRiMTdjNGUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAitXSxMyQ0wq9V8pvEo9a0Jaz+lZn
pFjXN6A1Zsw2g3fNstGhP3bW2VX8ILGZCIxIBr8QtitMSsPPBVgOzyz9kTD1PmqK
cfKwUXu6eKJ8xe+cOuCdhEsC8nDXHwZISOH5jENRZ6iapDLiTH4n9dFliFslB6LI
FzYFgCEBb8h3DNWYaqYe0TRbokBDGrJ1iq69r6r1AIX6JyD8ri0TNmZS7hob921S
LeIAVrX0KBpaP9mgSVT/NQj4NLvf6QG8vSCsVfieBnB3wu2+cjczJE/xNgCj1vld
eUlNLtXRN8QESrLTwfnUDvyBXNZKWVnnwWPxCHg2HLcxceqqIv1X4mwE8wIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFDvtQ54htuwv66HIReM/qcHbF8TjMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvTy0xRG5pRzI3Q19yb2NoRjR6LXB3ZHNYeE9NLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBADUTDMpzhhv26jbkBv+S
nRkredCL4zJqwaMoBpeS8Y37ZEo3CnqjgAnXaSwVO0yx1qVoNNbGqj3zet/5oin8
/amqk7LAiA3fSCKKDDAOmrTKTMUz/hJMnanFYR3v+UPst9+OSDsq4Iyq2J08m5Rw
6slM24dpttrVl5/PtkeAjC/z3XxSRpLydi5fEH78mQKgBpxwEG3jCDsL9tqjeg6O
PCeOpFWCQwXUyhnSbZzm9IeVwxLs4kw8wj/dIyJD2RGNH0PiRkYdMPP5w+UqxLo+
j0fmmUIZwUaBtJz3Rlt7pYW08p9y9HGKKqzwnvJGmYqbGYzLW6rCpXOAaB3eaL1u
BGU=
-----END CERTIFICATE-----
Generated at Wed Apr 30 18:45:15 2025 by rpki-client