Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/POniG7qOWboSllPFUU6PAXDYGFY.roa
File: POniG7qOWboSllPFUU6PAXDYGFY.roa (raw, json)
Hash identifier: MWWyXSZCRd6eVggjXSxDBNIwMKw94iVAGJIpP7nCjtI=
Subject key identifier: 3C:E9:E2:1B:BA:8E:59:BA:12:96:53:C5:51:4E:8F:01:70:D8:18:56
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 73197E30
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/POniG7qOWboSllPFUU6PAXDYGFY.roa
Signing time: Wed 16 Mar 2022 19:09:17 +0000
ROA not before: Wed 16 Mar 2022 19:09:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:17f:87e3:2531/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1931050544 (0x73197e30)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 16 19:09:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3ce9e21bba8e59ba129653c5514e8f0170d81856
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a4:74:b8:38:b5:59:71:e3:a1:40:0a:e7:f3:
4a:ef:76:dd:f9:cf:bc:64:d1:a2:54:2e:37:82:51:
96:73:56:1c:40:64:01:90:a2:50:59:bb:09:d6:1d:
2a:7a:6b:25:1d:89:9e:72:13:dc:f8:a5:08:b7:12:
fc:9e:94:e6:9f:59:8c:f5:e1:e5:0f:b0:65:6e:40:
26:d4:b5:e5:72:84:e5:5c:19:f1:7f:6f:f7:76:f6:
93:5d:85:f4:35:34:13:17:f1:f9:c6:fc:df:9c:ab:
ad:3a:10:56:d6:0e:ba:db:af:5c:05:b1:38:25:dd:
50:05:60:aa:dc:5a:19:10:3d:57:00:2a:7b:41:e5:
38:f7:e4:22:80:9c:a0:5f:18:51:2b:43:fb:23:c5:
4a:dc:6f:cb:05:7b:68:82:3e:9b:e1:c2:d2:b3:03:
df:0e:63:cc:05:c8:f1:94:3e:e1:da:3a:75:f2:e6:
aa:52:a8:d0:83:29:ea:b1:a3:98:8e:e0:24:f5:71:
74:89:b5:bd:10:22:e0:6c:ef:ff:b2:0f:8f:3c:f4:
82:da:9d:87:80:43:4d:65:aa:ea:dc:f3:f2:9c:8b:
03:31:f1:36:43:46:6a:01:bc:b0:13:de:9e:95:a9:
dc:45:6d:04:60:6c:f2:a1:09:6b:a1:86:7d:28:0d:
84:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:E9:E2:1B:BA:8E:59:BA:12:96:53:C5:51:4E:8F:01:70:D8:18:56
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/POniG7qOWboSllPFUU6PAXDYGFY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a5:d3:9e:50:bb:53:8a:82:50:c6:60:d0:88:a6:d0:f0:a2:d4:
da:68:a1:9d:1a:e4:db:85:d3:ed:b9:6d:84:a4:51:db:ab:f0:
01:d7:0f:62:45:be:21:09:c2:ea:67:90:f7:c8:1e:a2:de:d6:
a9:75:d1:e4:7b:ae:18:69:04:25:2f:be:fd:7d:67:69:e9:08:
ad:e9:1a:1a:89:ff:fc:01:0e:ca:c4:83:4e:51:16:0b:ea:10:
3b:27:44:78:f5:27:30:16:a0:a9:59:26:b5:ba:4a:0c:93:46:
24:cd:5a:82:4e:75:cf:45:8c:31:dd:b0:57:19:02:83:8b:6e:
bc:a3:6e:26:a3:3b:d1:92:cb:ec:1b:a1:26:99:f1:52:d7:58:
0b:c5:37:be:a2:4a:af:45:2a:81:71:54:8b:b0:eb:7e:8e:4a:
2e:14:14:9a:54:8a:94:33:7f:89:bf:9f:d4:53:a9:99:3b:ec:
66:41:4e:45:a9:58:56:d0:32:42:a6:88:da:2b:39:51:da:8e:
91:72:22:69:aa:17:4f:76:b3:55:79:c1:5a:23:ea:49:75:de:
26:1d:fa:31:20:30:a1:f8:7e:26:bf:f4:4b:46:ab:28:e2:14:
55:25:1b:69:5c:1b:01:76:89:fb:30:22:32:37:77:59:bb:f2:
4e:4b:f6:10
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIEcxl+MDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
MjA0N2JlMTViMjc1OTAyZGNmNjE3ZGMzZDBlMTZkYzFmMzA4MDIyMB4XDTIyMDMx
NjE5MDkxN1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoM2NlOWUyMWJiYThl
NTliYTEyOTY1M2M1NTE0ZThmMDE3MGQ4MTg1NjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMCkdLg4tVlx46FACufzSu923fnPvGTRolQuN4JRlnNWHEBk
AZCiUFm7CdYdKnprJR2JnnIT3PilCLcS/J6U5p9ZjPXh5Q+wZW5AJtS15XKE5VwZ
8X9v93b2k12F9DU0Exfx+cb835yrrToQVtYOutuvXAWxOCXdUAVgqtxaGRA9VwAq
e0HlOPfkIoCcoF8YUStD+yPFStxvywV7aII+m+HC0rMD3w5jzAXI8ZQ+4do6dfLm
qlKo0IMp6rGjmI7gJPVxdIm1vRAi4Gzv/7IPjzz0gtqdh4BDTWWq6tzz8pyLAzHx
NkNGagG8sBPenpWp3EVtBGBs8qEJa6GGfSgNhLkCAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBQ86eIbuo5ZuhKWU8VRTo8BcNgYVjAfBgNVHSMEGDAWgBRyBHvhWydZAtz2
F9w9DhbcHzCAIjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2NnUjc0VnNuV1FMYzloZmNQUTRXM0I4d2dDSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNWUvNzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8x
L1BPbmlHN3FPV2JvU2xsUEZVVTZQQVhEWUdGWS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWUv
Nzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8xL2NnUjc0VnNuV1FM
YzloZmNQUTRXM0I4d2dDSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEA8EAGDAPBAIAAjAJAwcAIAEGfABk
MA0GCSqGSIb3DQEBCwUAA4IBAQCl055Qu1OKglDGYNCIptDwotTaaKGdGuTbhdPt
uW2EpFHbq/AB1w9iRb4hCcLqZ5D3yB6i3tapddHke64YaQQlL779fWdp6Qit6Roa
if/8AQ7KxINOURYL6hA7J0R49ScwFqCpWSa1ukoMk0YkzVqCTnXPRYwx3bBXGQKD
i268o24mozvRksvsG6EmmfFS11gLxTe+okqvRSqBcVSLsOt+jkouFBSaVIqUM3+J
v5/UU6mZO+xmQU5FqVhW0DJCpojaKzlR2o6RciJpqhdPdrNVecFaI+pJdd4mHfox
IDCh+H4mv/RLRqso4hRVJRtpXBsBdon7MCIyN3dZu/JOS/YQ
-----END CERTIFICATE-----
Generated at Sat May 3 11:25:39 2025 by rpki-client