Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PlpYGxMdc08angFHBwBae0gyIzE.roa
File: PlpYGxMdc08angFHBwBae0gyIzE.roa (raw, json)
Hash identifier: Q5Ii+LOLxqKI9UiDZOa0lGA1vuP9plGibrye32l1Zbs=
Subject key identifier: 3E:5A:58:1B:13:1D:73:4F:1A:9E:01:47:07:00:5A:7B:48:32:23:31
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A326CB4740F7E441223F5410822B42960
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PlpYGxMdc08angFHBwBae0gyIzE.roa
Signing time: Sat 26 Aug 2023 15:18:19 +0000
ROA not before: Sat 26 Aug 2023 15:18:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:32:6c:b4:74:0f:7e:44:12:23:f5:41:08:22:b4:29:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 26 15:18:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3e5a581b131d734f1a9e014707005a7b48322331
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:34:49:1d:be:4c:37:8c:01:70:ae:3f:35:02:
5b:8d:f0:8b:f1:59:25:1a:76:e6:c5:6f:7b:58:f2:
f4:e1:3f:06:66:43:17:fc:39:f5:d4:1a:6b:c0:de:
bb:15:bb:33:09:62:f1:e7:73:5a:8e:80:79:2b:4a:
94:34:5d:04:37:ba:27:69:13:6f:73:da:fd:a3:bd:
d3:39:77:5d:d5:57:12:ce:0c:f8:f5:71:3c:91:af:
be:8c:6d:d6:0c:8a:78:37:f3:79:9b:5f:fe:3e:76:
35:0c:ef:59:83:63:63:41:50:dd:3e:55:d9:e1:90:
72:04:cf:a3:bd:5a:92:af:0b:32:fa:8f:31:64:5e:
25:8a:be:18:f9:a8:ef:e0:ea:66:24:8e:ca:3b:32:
54:c7:6f:3a:73:bb:06:15:70:bd:bd:a7:81:3d:2e:
f4:62:45:76:5b:15:d4:69:6c:04:02:bf:ff:b2:51:
0c:46:43:3d:98:1c:03:00:36:cc:de:f9:42:11:3c:
d5:36:bd:af:3f:b1:a0:fa:f7:ff:0a:d6:da:74:95:
7d:97:c7:5b:79:b4:ea:c0:b0:3c:fa:ff:24:4e:7f:
fb:e1:fd:42:ab:e8:8d:49:4f:86:fb:ea:59:f9:5f:
ab:a0:8b:9e:a3:0f:57:69:15:94:34:e7:3d:11:9f:
fd:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:5A:58:1B:13:1D:73:4F:1A:9E:01:47:07:00:5A:7B:48:32:23:31
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PlpYGxMdc08angFHBwBae0gyIzE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b3:6b:4e:05:dd:df:fa:fa:5d:26:cc:59:cb:13:c2:70:b8:ac:
48:80:0a:41:50:51:5c:a2:1b:79:81:d9:a8:d4:37:58:2f:b1:
87:3b:b9:8b:85:b4:aa:ed:aa:6c:d4:df:a5:4a:03:a1:64:e4:
c0:ac:9c:82:cb:6e:53:19:e7:f2:0f:bb:f9:1f:20:b2:c8:69:
83:20:3d:3a:1a:85:09:bd:cc:20:fe:e1:ca:6b:68:0e:f8:a0:
f3:c0:b8:2b:52:30:c9:a5:1e:27:30:84:08:ed:17:12:41:fc:
2f:40:04:60:4a:eb:ed:10:91:bf:77:13:74:9a:45:a6:8f:9d:
1f:65:14:9b:01:9e:85:b2:3e:16:56:ed:19:84:af:82:e3:43:
21:92:c9:c8:4c:4a:94:65:9e:51:32:ec:7a:44:9d:64:85:d3:
8d:06:c4:f6:34:f0:06:69:5d:af:8b:63:24:df:5a:e0:2f:94:
b8:e1:1a:db:66:93:4c:96:b7:08:f6:1b:d8:cd:1c:fa:05:49:
aa:e9:e6:d9:68:56:e8:ce:c2:a5:83:db:20:3b:b4:cb:21:36:
72:0a:73:e8:a7:46:72:50:3d:67:7e:1c:05:e8:4a:e1:7d:f0:
94:40:20:c4:54:f2:e1:0a:bc:60:bf:53:d9:55:22:14:52:bf:
87:22:d7:8d
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYoybLR0D35EEiP1QQgitClgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwODI2MTUxODE5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZTVhNTgxYjEzMWQ3MzRmMWE5ZTAxNDcwNzAwNWE3YjQ4MzIyMzMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuDRJHb5MN4wBcK4/NQJbjfCL8Vkl
GnbmxW97WPL04T8GZkMX/Dn11BprwN67FbszCWLx53NajoB5K0qUNF0EN7onaRNv
c9r9o73TOXdd1VcSzgz49XE8ka++jG3WDIp4N/N5m1/+PnY1DO9Zg2NjQVDdPlXZ
4ZByBM+jvVqSrwsy+o8xZF4lir4Y+ajv4OpmJI7KOzJUx286c7sGFXC9vaeBPS70
YkV2WxXUaWwEAr//slEMRkM9mBwDADbM3vlCETzVNr2vP7Gg+vf/CtbadJV9l8db
ebTqwLA8+v8kTn/74f1Cq+iNSU+G++pZ+V+roIueow9XaRWUNOc9EZ/97QIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFD5aWBsTHXNPGp4BRwcAWntIMiMxMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvUGxwWUd4TWRjMDhhbmdGSEJ3QmFlMGd5SXpFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBALNrTgXd3/r6XSbMWcsT
wnC4rEiACkFQUVyiG3mB2ajUN1gvsYc7uYuFtKrtqmzU36VKA6Fk5MCsnILLblMZ
5/IPu/kfILLIaYMgPToahQm9zCD+4cpraA74oPPAuCtSMMmlHicwhAjtFxJB/C9A
BGBK6+0Qkb93E3SaRaaPnR9lFJsBnoWyPhZW7RmEr4LjQyGSychMSpRlnlEy7HpE
nWSF040GxPY08AZpXa+LYyTfWuAvlLjhGttmk0yWtwj2G9jNHPoFSarp5tloVujO
wqWD2yA7tMshNnIKc+inRnJQPWd+HAXoSuF98JRAIMRU8uEKvGC/U9lVIhRSv4ci
140=
-----END CERTIFICATE-----
Generated at Thu May 1 05:06:13 2025 by rpki-client