Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PhoVKelg5JNVDuGOh9tN-fBO1QA.roa
File: PhoVKelg5JNVDuGOh9tN-fBO1QA.roa (raw, json)
Hash identifier: /l38X7BT+Kn/B8eJ2GRlqnMpDavi9YXuPSNZaE2ur4E=
Subject key identifier: 3E:1A:15:29:E9:60:E4:93:55:0E:E1:8E:87:DB:4D:F9:F0:4E:D5:00
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01860CAAE82E97865F9F26A373384A7546A6
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PhoVKelg5JNVDuGOh9tN-fBO1QA.roa
Signing time: Wed 01 Feb 2023 11:09:32 +0000
ROA not before: Wed 01 Feb 2023 11:09:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:0c:aa:e8:2e:97:86:5f:9f:26:a3:73:38:4a:75:46:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 1 11:09:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3e1a1529e960e493550ee18e87db4df9f04ed500
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:22:05:07:2a:63:8d:28:ba:e5:8a:86:7f:c2:
74:d8:18:8b:d5:b8:2b:21:29:90:ef:6c:ed:f0:27:
d8:be:79:16:90:23:29:ed:db:31:6b:3c:4c:68:18:
7a:e9:97:2e:50:0d:d5:b3:96:a4:49:46:27:e5:bd:
83:88:a1:fb:e4:e3:89:e5:21:c7:df:1c:36:bc:7d:
8a:19:72:bb:34:47:1f:e7:65:e0:46:6e:e7:ab:45:
14:11:c8:71:d6:77:70:51:b2:ff:4d:96:84:33:92:
32:e4:16:ee:bb:fa:2c:8f:6b:b5:91:21:1e:0d:5d:
e8:0d:bd:b0:12:44:21:f1:e1:88:e0:af:fd:d2:78:
9e:b8:6b:92:6a:b3:48:f0:db:63:ab:de:80:c1:5d:
eb:55:ad:5e:da:dc:4e:c6:fc:69:4f:6e:04:64:59:
75:04:99:d2:a4:7c:d7:56:a6:9d:55:f1:d1:78:2c:
67:07:f9:d4:94:de:af:f4:c7:d0:e9:96:60:7b:c9:
0f:41:a4:7f:c2:68:7f:35:4d:73:8c:6f:6b:1c:8f:
9e:8f:d1:6a:a4:20:36:19:95:bc:f3:d4:2c:01:43:
be:9b:cb:72:de:d2:19:e6:1a:03:a1:97:04:6c:a1:
56:93:86:30:11:9f:c7:b2:cb:5a:66:63:dc:99:11:
92:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:1A:15:29:E9:60:E4:93:55:0E:E1:8E:87:DB:4D:F9:F0:4E:D5:00
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PhoVKelg5JNVDuGOh9tN-fBO1QA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
73:8d:b5:e7:87:1d:4a:87:62:21:6a:f0:f8:01:84:23:f6:25:
83:ac:26:b0:c0:00:87:dd:ff:c4:0a:b1:69:ed:e9:84:d6:a6:
33:fe:43:3e:40:19:d4:e6:ca:58:25:4f:57:18:f8:12:43:89:
53:e5:a3:a8:f1:61:f2:09:3b:72:4a:d8:e7:79:41:5f:ba:d7:
52:e5:0f:c1:6d:49:60:6f:c7:1a:e8:14:88:e3:3d:89:c9:92:
50:84:27:4c:e0:a9:cd:33:c1:d3:b1:ed:9d:2c:a7:d5:3e:d4:
5b:47:80:8e:17:c1:60:25:6e:bb:42:b9:e6:f4:67:ed:dc:16:
5a:b1:72:0c:d6:58:96:26:ce:0d:3c:ea:55:2e:ef:23:96:17:
cf:f4:3b:1f:e1:16:6d:30:91:fc:e4:c8:75:e8:7b:32:71:bb:
95:f1:24:55:38:8c:25:cd:23:9b:7d:9a:8c:ef:84:26:2e:da:
bb:86:ed:7f:f9:91:2f:ad:e2:6f:09:b5:09:9c:fe:e1:bc:ea:
b9:e9:81:44:d4:26:ff:f3:64:ac:01:34:cf:c1:06:c4:fe:83:
53:97:24:cb:87:d7:96:7c:ad:1b:d2:41:50:87:51:90:d6:83:
41:b2:0f:bd:50:b5:9d:5f:1a:45:36:99:6c:50:9c:98:99:81:
8f:38:81:d0
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYYMqugul4ZfnyajczhKdUamMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMjAxMTEwOTMyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZTFhMTUyOWU5NjBlNDkzNTUwZWUxOGU4N2RiNGRmOWYwNGVkNTAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlSIFBypjjSi65YqGf8J02BiL1bgr
ISmQ72zt8CfYvnkWkCMp7dsxazxMaBh66ZcuUA3Vs5akSUYn5b2DiKH75OOJ5SHH
3xw2vH2KGXK7NEcf52XgRm7nq0UUEchx1ndwUbL/TZaEM5Iy5Bbuu/osj2u1kSEe
DV3oDb2wEkQh8eGI4K/90nieuGuSarNI8Ntjq96AwV3rVa1e2txOxvxpT24EZFl1
BJnSpHzXVqadVfHReCxnB/nUlN6v9MfQ6ZZge8kPQaR/wmh/NU1zjG9rHI+ej9Fq
pCA2GZW889QsAUO+m8ty3tIZ5hoDoZcEbKFWk4YwEZ/HsstaZmPcmRGS+QIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFD4aFSnpYOSTVQ7hjofbTfnwTtUAMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvUGhvVktlbGc1Sk5WRHVHT2g5dE4tZkJPMVFBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAHONteeHHUqHYiFq8PgB
hCP2JYOsJrDAAIfd/8QKsWnt6YTWpjP+Qz5AGdTmylglT1cY+BJDiVPlo6jxYfIJ
O3JK2Od5QV+611LlD8FtSWBvxxroFIjjPYnJklCEJ0zgqc0zwdOx7Z0sp9U+1FtH
gI4XwWAlbrtCueb0Z+3cFlqxcgzWWJYmzg086lUu7yOWF8/0Ox/hFm0wkfzkyHXo
ezJxu5XxJFU4jCXNI5t9mozvhCYu2ruG7X/5kS+t4m8JtQmc/uG86rnpgUTUJv/z
ZKwBNM/BBsT+g1OXJMuH15Z8rRvSQVCHUZDWg0GyD71QtZ1fGkU2mWxQnJiZgY84
gdA=
-----END CERTIFICATE-----
Generated at Fri May 2 13:13:13 2025 by rpki-client