Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/O-xw3xGvAhDLvHSz1kMxnjIYMXU.roa
File: O-xw3xGvAhDLvHSz1kMxnjIYMXU.roa (raw, json)
Hash identifier: NgyzKcl0mG8GgiU+v0ASYEArarAGvzRk0LrjMQGFQvY=
Subject key identifier: 3B:EC:70:DF:11:AF:02:10:CB:BC:74:B3:D6:43:31:9E:32:18:31:75
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 77C7676F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/O-xw3xGvAhDLvHSz1kMxnjIYMXU.roa
Signing time: Sat 02 Apr 2022 12:10:49 +0000
ROA not before: Sat 02 Apr 2022 12:10:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2009556847 (0x77c7676f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 2 12:10:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3bec70df11af0210cbbc74b3d643319e32183175
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:aa:14:4f:cc:78:b1:65:29:3c:ce:0e:2d:0f:
1e:53:f2:9e:e6:d3:2c:af:6c:e9:b1:21:8e:95:34:
47:8a:ee:2b:bd:6b:80:7d:87:dc:c9:14:8f:62:9e:
67:40:f4:d0:35:1b:4c:c6:19:26:a9:58:ce:ef:a6:
e4:36:19:b0:c3:60:2a:6f:32:da:25:ea:9a:8e:76:
71:ff:c2:93:7a:06:98:67:8e:27:de:6c:5a:5a:d0:
b5:e9:7e:07:14:91:f9:c0:de:af:f4:74:04:ca:9e:
9d:8d:01:e8:17:3c:48:ad:36:31:e6:41:c7:93:9d:
55:e4:27:1d:c9:19:2d:56:61:90:50:65:91:26:22:
ca:58:94:79:bc:83:7f:c2:93:99:d7:38:ee:65:23:
51:eb:e3:d8:6f:82:8d:40:cd:68:c7:12:a4:07:49:
e6:27:08:48:8e:0e:26:8a:1e:54:9e:3c:3f:96:42:
c2:69:d0:55:fe:56:2a:b4:7d:6f:55:0f:0d:43:a5:
8f:fd:16:4b:f4:4d:fb:1a:35:cf:f6:4b:12:98:f2:
e0:94:cf:b4:4a:d7:d9:dd:2c:3f:cb:7f:cf:fc:e8:
f4:05:bd:ac:b2:99:29:3c:77:2b:7f:4c:15:fe:45:
f8:5b:79:9a:1f:3b:2d:31:c4:40:a1:3a:00:69:f7:
b9:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:EC:70:DF:11:AF:02:10:CB:BC:74:B3:D6:43:31:9E:32:18:31:75
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/O-xw3xGvAhDLvHSz1kMxnjIYMXU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2e:53:25:96:f2:b9:67:ca:4e:b0:24:e9:8b:29:65:50:56:bf:
29:4f:8a:5f:d8:94:4d:13:15:f4:4f:c4:8d:29:2e:19:a0:f0:
e0:a6:78:16:8e:02:87:4e:3f:e1:c1:4a:f7:be:ac:57:37:eb:
77:41:0e:12:11:07:14:8d:32:72:3b:6f:32:a6:fa:9c:98:d3:
9a:c5:03:b3:bd:32:b8:9c:69:06:0f:c2:ed:25:f5:5c:93:42:
f9:a5:ff:70:0f:3e:a9:d1:bf:7d:e7:02:43:e4:fb:02:be:90:
9d:54:b5:c3:2e:d4:58:a5:a3:91:6b:a9:09:c4:f3:26:97:e8:
d7:68:52:6a:d5:b1:fc:ad:47:a0:c6:90:29:fd:e7:8c:a0:44:
1c:10:d4:d1:b9:64:2d:c3:93:5c:76:55:4e:d6:26:d0:8e:6e:
27:85:01:48:12:6d:78:1c:a5:18:a6:53:e9:dd:0e:fd:70:78:
1b:86:90:eb:ac:cb:ae:5c:e1:a7:c4:1f:b0:04:4d:fd:c7:88:
b1:2d:3b:99:f1:af:4c:76:ed:3b:22:9b:2d:b1:e0:cf:b9:3c:
84:d1:53:4d:1e:02:ac:56:a6:f7:24:4e:d3:9f:02:91:7f:ef:
6f:e6:74:37:54:84:02:96:f1:76:53:36:17:68:4e:b3:e6:00:
0e:41:72:d7
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIEd8dnbzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
MjA0N2JlMTViMjc1OTAyZGNmNjE3ZGMzZDBlMTZkYzFmMzA4MDIyMB4XDTIyMDQw
MjEyMTA0OVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoM2JlYzcwZGYxMWFm
MDIxMGNiYmM3NGIzZDY0MzMxOWUzMjE4MzE3NTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKaqFE/MeLFlKTzODi0PHlPynubTLK9s6bEhjpU0R4ruK71r
gH2H3MkUj2KeZ0D00DUbTMYZJqlYzu+m5DYZsMNgKm8y2iXqmo52cf/Ck3oGmGeO
J95sWlrQtel+BxSR+cDer/R0BMqenY0B6Bc8SK02MeZBx5OdVeQnHckZLVZhkFBl
kSYiyliUebyDf8KTmdc47mUjUevj2G+CjUDNaMcSpAdJ5icISI4OJooeVJ48P5ZC
wmnQVf5WKrR9b1UPDUOlj/0WS/RN+xo1z/ZLEpjy4JTPtErX2d0sP8t/z/zo9AW9
rLKZKTx3K39MFf5F+Ft5mh87LTHEQKE6AGn3uQUCAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBQ77HDfEa8CEMu8dLPWQzGeMhgxdTAfBgNVHSMEGDAWgBRyBHvhWydZAtz2
F9w9DhbcHzCAIjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2NnUjc0VnNuV1FMYzloZmNQUTRXM0I4d2dDSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNWUvNzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8x
L08teHczeEd2QWhETHZIU3oxa014bmpJWU1YVS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWUv
Nzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8xL2NnUjc0VnNuV1FM
YzloZmNQUTRXM0I4d2dDSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEA8EAGDAPBAIAAjAJAwcAIAEGfABk
MA0GCSqGSIb3DQEBCwUAA4IBAQAuUyWW8rlnyk6wJOmLKWVQVr8pT4pf2JRNExX0
T8SNKS4ZoPDgpngWjgKHTj/hwUr3vqxXN+t3QQ4SEQcUjTJyO28ypvqcmNOaxQOz
vTK4nGkGD8LtJfVck0L5pf9wDz6p0b995wJD5PsCvpCdVLXDLtRYpaORa6kJxPMm
l+jXaFJq1bH8rUegxpAp/eeMoEQcENTRuWQtw5NcdlVO1ibQjm4nhQFIEm14HKUY
plPp3Q79cHgbhpDrrMuuXOGnxB+wBE39x4ixLTuZ8a9Mdu07IpstseDPuTyE0VNN
HgKsVqb3JE7TnwKRf+9v5nQ3VIQClvF2UzYXaE6z5gAOQXLX
-----END CERTIFICATE-----
Generated at Sat May 3 03:55:42 2025 by rpki-client