Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/P7W3s3k67KOrYzBVzLp9GLZXdZw.roa
File: P7W3s3k67KOrYzBVzLp9GLZXdZw.roa (raw, json)
Hash identifier: FqhvetHO2X62s8XGU1/QubJkZ4fXZl64qhxz9ympLh8=
Subject key identifier: 3F:B5:B7:B3:79:3A:EC:A3:AB:63:30:55:CC:BA:7D:18:B6:57:75:9C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01887E966A6B98907925BBD1AE3E0A7F2D77
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/P7W3s3k67KOrYzBVzLp9GLZXdZw.roa
Signing time: Sat 03 Jun 2023 00:09:26 +0000
ROA not before: Sat 03 Jun 2023 00:09:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:7e:96:6a:6b:98:90:79:25:bb:d1:ae:3e:0a:7f:2d:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 3 00:09:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3fb5b7b3793aeca3ab633055ccba7d18b657759c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:dc:d7:10:a5:57:d6:2b:e2:33:aa:72:0a:bc:
ec:fc:54:bb:5f:dd:49:b1:83:8c:87:6f:71:c3:60:
69:ec:c4:a6:98:04:b9:b6:74:d2:d4:4c:93:8b:32:
97:7e:28:f0:27:03:2d:8c:48:c7:39:e5:3d:61:8d:
4b:54:15:59:03:70:e6:47:f8:6f:e2:0e:39:5d:f4:
c3:c5:25:a6:3d:38:1b:9a:a9:9e:ab:9e:f3:41:b2:
8f:cd:73:d6:8c:4e:4d:08:67:f1:7d:61:2a:33:67:
bb:93:95:3d:16:51:e4:81:9c:c2:d4:bd:2f:69:36:
2a:b8:99:e8:61:be:7e:a7:10:a7:ef:1c:54:63:35:
11:7f:f2:8e:3f:f6:64:f7:13:7a:e5:2f:35:30:dc:
d6:02:8c:5e:0e:d8:9d:a0:ba:2d:25:23:36:66:f0:
e1:2e:75:68:8c:da:ac:28:ec:a9:1f:8e:af:e9:5e:
e5:fb:bb:26:c0:e4:c1:b3:71:52:4b:67:0a:37:ab:
e5:d8:7c:fc:3d:d4:52:8d:eb:f9:c6:32:56:1b:b0:
fe:be:3f:4b:fc:3f:3b:a9:17:ec:9b:7f:b9:08:69:
44:1e:00:e7:a1:d6:a5:96:aa:88:95:93:05:0e:f5:
b2:b4:48:b3:16:65:f8:af:4d:d4:43:92:92:11:ab:
0d:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:B5:B7:B3:79:3A:EC:A3:AB:63:30:55:CC:BA:7D:18:B6:57:75:9C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/P7W3s3k67KOrYzBVzLp9GLZXdZw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2d:72:21:53:f8:61:78:2c:cb:3c:a6:51:bc:cb:42:d8:d9:5e:
48:02:95:bd:90:0f:cd:a2:a2:72:16:7e:f6:ca:11:31:e3:7b:
a4:8e:46:1b:cb:b7:43:48:16:fd:d3:f1:fb:d1:da:78:27:15:
0a:8b:8b:a4:ce:f2:f4:ba:a0:01:db:33:13:90:26:58:38:d9:
ff:b9:c0:fc:d9:7c:91:75:13:77:39:50:fc:3e:1c:55:fe:bd:
94:6e:e2:9f:f0:9c:4d:25:33:3f:91:d0:15:3b:68:cb:ac:0b:
27:28:3a:7f:0f:43:f5:c2:00:78:34:e2:ad:88:45:b5:bb:d3:
03:ed:cd:b9:2a:08:9e:8c:45:37:79:1d:1a:80:7e:de:c2:3e:
9f:48:8d:b7:d1:cc:5f:57:dd:0a:57:da:3f:ef:6f:9c:6b:0c:
99:74:32:2f:70:bb:7d:f3:28:3f:c3:ea:a8:2c:04:e8:db:77:
8b:ff:7f:51:35:c3:e4:f7:78:d8:f5:d4:95:25:0a:48:29:73:
49:e6:d1:3a:48:d1:39:fd:f5:fb:70:c1:fb:8d:0f:23:50:d1:
ac:59:56:fe:97:4e:6f:94:cd:8a:fb:9e:df:8b:49:00:2f:8a:
ec:a9:bb:93:fd:b4:07:ee:9e:fc:7e:26:da:c9:db:e1:26:1f:
06:da:9e:f4
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYh+lmprmJB5JbvRrj4Kfy13MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNjAzMDAwOTI2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZmI1YjdiMzc5M2FlY2EzYWI2MzMwNTVjY2JhN2QxOGI2NTc3NTljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAotzXEKVX1iviM6pyCrzs/FS7X91J
sYOMh29xw2Bp7MSmmAS5tnTS1EyTizKXfijwJwMtjEjHOeU9YY1LVBVZA3DmR/hv
4g45XfTDxSWmPTgbmqmeq57zQbKPzXPWjE5NCGfxfWEqM2e7k5U9FlHkgZzC1L0v
aTYquJnoYb5+pxCn7xxUYzURf/KOP/Zk9xN65S81MNzWAoxeDtidoLotJSM2ZvDh
LnVojNqsKOypH46v6V7l+7smwOTBs3FSS2cKN6vl2Hz8PdRSjev5xjJWG7D+vj9L
/D87qRfsm3+5CGlEHgDnodallqqIlZMFDvWytEizFmX4r03UQ5KSEasNUwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFD+1t7N5Ouyjq2MwVcy6fRi2V3WcMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvUDdXM3MzazY3S09yWXpCVnpMcDlHTFpYZFp3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAC1yIVP4YXgsyzymUbzL
QtjZXkgClb2QD82ionIWfvbKETHje6SORhvLt0NIFv3T8fvR2ngnFQqLi6TO8vS6
oAHbMxOQJlg42f+5wPzZfJF1E3c5UPw+HFX+vZRu4p/wnE0lMz+R0BU7aMusCyco
On8PQ/XCAHg04q2IRbW70wPtzbkqCJ6MRTd5HRqAft7CPp9IjbfRzF9X3QpX2j/v
b5xrDJl0Mi9wu33zKD/D6qgsBOjbd4v/f1E1w+T3eNj11JUlCkgpc0nm0TpI0Tn9
9ftwwfuNDyNQ0axZVv6XTm+UzYr7nt+LSQAviuypu5P9tAfunvx+JtrJ2+EmHwba
nvQ=
-----END CERTIFICATE-----
Generated at Thu May 1 03:01:25 2025 by rpki-client