Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PnUBUfqKPzEW50FvPUI3BZyXEDc.roa
File: PnUBUfqKPzEW50FvPUI3BZyXEDc.roa (raw, json)
Hash identifier: +mUdewZKfRyVVWZliL/Cwp92OjqT26PRuhXnAh/xKw0=
Subject key identifier: 3E:75:01:51:FA:8A:3F:31:16:E7:41:6F:3D:42:37:05:9C:97:10:37
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01823EEF8F23BF0A0F6358314B6C2B40A519
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PnUBUfqKPzEW50FvPUI3BZyXEDc.roa
Signing time: Wed 27 Jul 2022 09:14:23 +0000
ROA not before: Wed 27 Jul 2022 09:14:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:3e:ef:8f:23:bf:0a:0f:63:58:31:4b:6c:2b:40:a5:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 27 09:14:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3e750151fa8a3f3116e7416f3d4237059c971037
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:73:c9:83:d6:16:37:b8:84:ad:4a:60:bb:c7:
f9:41:25:75:21:0e:38:bb:fb:98:ce:44:69:5b:44:
d6:6d:18:08:4b:f2:0e:91:ab:fc:7a:42:b6:67:7d:
c3:4a:42:e4:0e:00:ee:47:1d:f9:64:89:b7:b0:18:
6e:04:a1:74:14:84:57:8d:20:92:d1:da:0a:a6:d7:
aa:4e:5b:30:3f:5f:1c:4e:53:cb:5d:d8:9f:1e:57:
21:58:30:50:05:2a:ff:52:3f:f5:fa:ad:86:03:af:
f2:ec:96:6b:bc:f7:e2:77:b9:6b:05:eb:1a:a4:21:
70:e5:c1:90:02:94:c1:01:b6:19:e0:52:fb:fc:8c:
a7:bf:50:8e:04:2d:2d:aa:c0:6f:0f:94:28:33:95:
02:fe:ac:6c:d1:c9:15:dd:bd:32:27:33:59:20:cc:
b0:41:08:64:14:8c:c2:b6:72:fa:6c:60:72:a8:4f:
62:66:ee:eb:b8:a0:ca:62:a1:21:c2:72:ef:7f:fa:
a3:a2:7a:e5:74:4f:dc:9f:05:c0:37:76:4d:28:d8:
19:5e:13:07:b2:b9:3d:a3:70:36:0a:d4:e7:c6:c4:
a7:de:05:b5:96:d4:ed:81:01:3b:db:0d:2d:b9:46:
c0:e2:29:16:17:ea:40:aa:d5:a3:f5:c3:6e:3f:75:
2b:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:75:01:51:FA:8A:3F:31:16:E7:41:6F:3D:42:37:05:9C:97:10:37
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PnUBUfqKPzEW50FvPUI3BZyXEDc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
02:f0:87:eb:1c:16:7c:ae:d5:ca:6f:c2:7f:fe:61:db:4f:da:
1a:5c:2d:2d:22:4e:fa:49:49:92:5b:e0:86:7f:db:11:d4:70:
0a:dc:8c:41:83:c1:14:2d:22:60:00:36:62:25:5d:e9:a6:59:
21:8a:8e:d1:e4:fb:ae:94:ff:2c:54:8f:28:44:e3:6a:74:2f:
b0:37:bf:e3:66:ef:73:73:f1:41:7d:65:f8:99:31:bb:ff:28:
c6:c7:9b:b7:d4:b5:fc:66:30:d8:94:92:ab:ce:22:3b:9b:2f:
d7:bd:07:be:59:44:aa:19:f0:fd:90:d8:c9:4e:99:31:57:ab:
b6:20:dd:2d:c9:5a:b2:6f:d4:ab:20:8e:39:71:87:dd:8e:ae:
fa:77:15:a1:58:4b:70:22:30:3d:57:02:bf:44:fd:99:76:8d:
5e:fc:d8:68:bf:bd:be:39:c7:42:dd:46:e8:fb:cf:b6:b2:c1:
15:21:29:1f:60:9d:c2:41:d4:36:23:df:69:02:13:e5:db:6d:
51:21:4f:52:1a:9a:2a:44:fe:00:6b:b8:a3:54:7b:63:78:3f:
93:1e:2d:d9:37:c0:b7:04:1a:bf:22:14:ce:01:bb:39:9b:d4:
76:4c:0e:38:f2:0f:08:d9:ba:ea:bc:69:ae:1f:3d:a5:59:26:
25:60:56:9d
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYI+748jvwoPY1gxS2wrQKUZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIwNzI3MDkxNDIzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZTc1MDE1MWZhOGEzZjMxMTZlNzQxNmYzZDQyMzcwNTljOTcxMDM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkHPJg9YWN7iErUpgu8f5QSV1IQ44
u/uYzkRpW0TWbRgIS/IOkav8ekK2Z33DSkLkDgDuRx35ZIm3sBhuBKF0FIRXjSCS
0doKpteqTlswP18cTlPLXdifHlchWDBQBSr/Uj/1+q2GA6/y7JZrvPfid7lrBesa
pCFw5cGQApTBAbYZ4FL7/Iynv1COBC0tqsBvD5QoM5UC/qxs0ckV3b0yJzNZIMyw
QQhkFIzCtnL6bGByqE9iZu7ruKDKYqEhwnLvf/qjonrldE/cnwXAN3ZNKNgZXhMH
srk9o3A2CtTnxsSn3gW1ltTtgQE72w0tuUbA4ikWF+pAqtWj9cNuP3UrMwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFD51AVH6ij8xFudBbz1CNwWclxA3MB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvUG5VQlVmcUtQekVXNTBGdlBVSTNCWnlYRURjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAALwh+scFnyu1cpvwn/+
YdtP2hpcLS0iTvpJSZJb4IZ/2xHUcArcjEGDwRQtImAANmIlXemmWSGKjtHk+66U
/yxUjyhE42p0L7A3v+Nm73Nz8UF9ZfiZMbv/KMbHm7fUtfxmMNiUkqvOIjubL9e9
B75ZRKoZ8P2Q2MlOmTFXq7Yg3S3JWrJv1Ksgjjlxh92Orvp3FaFYS3AiMD1XAr9E
/Zl2jV782Gi/vb45x0LdRuj7z7aywRUhKR9gncJB1DYj32kCE+XbbVEhT1IamipE
/gBruKNUe2N4P5MeLdk3wLcEGr8iFM4Buzmb1HZMDjjyDwjZuuq8aa4fPaVZJiVg
Vp0=
-----END CERTIFICATE-----
Generated at Thu May 1 05:34:21 2025 by rpki-client