Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PRZ3r2hMDA1uODec4XzgCWp2LXQ.roa
File: PRZ3r2hMDA1uODec4XzgCWp2LXQ.roa (raw, json)
Hash identifier: kDffViovjHErH79e3ML6koBU+9Epz0D9/7vbb642vOM=
Subject key identifier: 3D:16:77:AF:68:4C:0C:0D:6E:38:37:9C:E1:7C:E0:09:6A:76:2D:74
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01823E48EE7C1CC4FD128F28151484A365AA
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PRZ3r2hMDA1uODec4XzgCWp2LXQ.roa
Signing time: Wed 27 Jul 2022 06:12:23 +0000
ROA not before: Wed 27 Jul 2022 06:12:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:3e:48:ee:7c:1c:c4:fd:12:8f:28:15:14:84:a3:65:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 27 06:12:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3d1677af684c0c0d6e38379ce17ce0096a762d74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f4:0a:8d:74:f9:cf:c8:ac:33:a3:98:36:22:
6b:08:fc:34:a8:e9:f0:7f:2a:f8:8b:6a:ee:ad:43:
2b:ad:03:d4:41:61:eb:f8:11:ee:04:60:ee:73:fe:
45:bc:91:b8:3a:a8:04:c4:7b:a8:e7:54:44:db:85:
04:f6:73:b0:05:c4:f9:72:dd:f6:c1:1e:ff:e5:20:
a7:ca:c5:d3:41:c7:d9:f8:33:7e:17:7e:37:45:b7:
71:4d:06:9d:3c:bd:21:fb:1f:5e:e4:7c:53:f4:b9:
e7:5a:5f:a4:e6:f5:d4:37:3e:65:50:04:54:33:2d:
84:63:74:34:3d:08:e7:4f:b8:e8:7c:7c:9e:60:f2:
86:13:85:60:bd:46:5b:44:1b:82:a2:ec:d6:9f:a5:
b6:94:a0:ca:76:7b:2c:50:41:05:2c:be:2c:5a:57:
d3:4b:e9:58:68:2f:15:25:33:64:84:6e:29:bb:37:
25:cb:f6:81:4d:5d:b1:1b:25:e2:22:72:36:f2:dd:
e5:cb:8d:cc:9f:ac:7a:e2:fe:1d:b0:0e:79:b8:69:
4b:35:71:25:b6:32:60:fb:a5:58:ad:d9:cd:35:40:
ba:e3:55:03:89:0e:93:aa:d5:76:ef:4e:24:8e:c5:
e9:bc:dc:36:0f:44:6f:78:ea:a3:93:84:9e:de:08:
b9:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:16:77:AF:68:4C:0C:0D:6E:38:37:9C:E1:7C:E0:09:6A:76:2D:74
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PRZ3r2hMDA1uODec4XzgCWp2LXQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
24:2f:e4:ec:e0:e6:51:fe:55:d3:2b:df:35:31:9b:3a:66:20:
12:a3:e2:bf:89:8e:3c:48:8f:f3:9b:73:27:fc:c1:6b:47:4c:
56:c7:ad:db:7e:f2:d1:85:4e:69:dc:6c:ba:6c:56:33:ad:74:
3b:01:47:fb:67:b2:a8:85:8e:32:f4:a9:8b:9f:ce:21:4f:11:
e7:0c:4d:65:1b:a0:e6:da:86:ba:48:46:5b:7a:13:9e:9c:a3:
04:63:97:31:7b:43:61:98:cd:af:a8:99:cc:1e:1a:bf:4b:e0:
81:47:f9:ab:43:5e:74:7f:fa:fc:88:8a:56:64:00:50:92:b5:
09:10:28:aa:79:e1:06:36:99:12:3e:24:16:36:e8:51:30:38:
99:1d:9d:69:5d:49:75:2c:1a:7b:3d:0e:f7:0b:24:11:f3:3a:
a6:02:bf:ce:5a:e8:a7:5b:ec:a6:92:fb:c0:d8:c2:f1:83:d8:
7f:f9:27:97:c2:4d:ad:0a:a2:a4:9a:40:39:80:4a:65:bc:ed:
0e:de:23:cf:8f:3e:59:81:38:f5:da:f5:8d:b9:73:81:67:ee:
14:a8:4e:fa:48:fe:3c:07:b3:2a:e4:dc:f4:f1:cd:b2:e9:7d:
d6:6a:1a:7f:50:33:84:80:8c:71:d7:0d:91:73:c9:21:c4:ea:
2e:f2:ae:c1
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYI+SO58HMT9Eo8oFRSEo2WqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIwNzI3MDYxMjIzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZDE2NzdhZjY4NGMwYzBkNmUzODM3OWNlMTdjZTAwOTZhNzYyZDc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArPQKjXT5z8isM6OYNiJrCPw0qOnw
fyr4i2rurUMrrQPUQWHr+BHuBGDuc/5FvJG4OqgExHuo51RE24UE9nOwBcT5ct32
wR7/5SCnysXTQcfZ+DN+F343RbdxTQadPL0h+x9e5HxT9LnnWl+k5vXUNz5lUARU
My2EY3Q0PQjnT7jofHyeYPKGE4VgvUZbRBuCouzWn6W2lKDKdnssUEEFLL4sWlfT
S+lYaC8VJTNkhG4puzcly/aBTV2xGyXiInI28t3ly43Mn6x64v4dsA55uGlLNXEl
tjJg+6VYrdnNNUC641UDiQ6TqtV2704kjsXpvNw2D0RveOqjk4Se3gi51wIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFD0Wd69oTAwNbjg3nOF84Alqdi10MB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvUFJaM3IyaE1EQTF1T0RlYzRYemdDV3AyTFhRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBACQv5Ozg5lH+VdMr3zUx
mzpmIBKj4r+JjjxIj/Obcyf8wWtHTFbHrdt+8tGFTmncbLpsVjOtdDsBR/tnsqiF
jjL0qYufziFPEecMTWUboObahrpIRlt6E56cowRjlzF7Q2GYza+omcweGr9L4IFH
+atDXnR/+vyIilZkAFCStQkQKKp54QY2mRI+JBY26FEwOJkdnWldSXUsGns9DvcL
JBHzOqYCv85a6Kdb7KaS+8DYwvGD2H/5J5fCTa0KoqSaQDmASmW87Q7eI8+PPlmB
OPXa9Y25c4Fn7hSoTvpI/jwHsyrk3PTxzbLpfdZqGn9QM4SAjHHXDZFzySHE6i7y
rsE=
-----END CERTIFICATE-----
Generated at Thu May 1 20:55:27 2025 by rpki-client