Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PoP8dB-dvR2_XvvahZL4K4H7K2A.roa
File: PoP8dB-dvR2_XvvahZL4K4H7K2A.roa (raw, json)
Hash identifier: vr7nP5Uc0tlVLsOSpHBEE+vYDSMcVJLc0MwDApzSOwI=
Subject key identifier: 3E:83:FC:74:1F:9D:BD:1D:BF:5E:FB:DA:85:92:F8:2B:81:FB:2B:60
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01898EACA9E05560A571444908C70081D1A2
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PoP8dB-dvR2_XvvahZL4K4H7K2A.roa
Signing time: Tue 25 Jul 2023 20:10:27 +0000
ROA not before: Tue 25 Jul 2023 20:10:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:8e:ac:a9:e0:55:60:a5:71:44:49:08:c7:00:81:d1:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 25 20:10:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3e83fc741f9dbd1dbf5efbda8592f82b81fb2b60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:0d:08:83:03:ec:35:f6:96:3a:93:be:9b:38:
bb:46:3d:82:d5:fc:38:af:87:de:73:87:85:f5:c8:
1f:89:50:94:f5:d1:1e:d0:aa:be:cc:35:a0:d4:2d:
0b:db:49:72:97:4a:0e:b9:a4:d9:b9:5c:66:07:16:
51:4c:f3:98:d0:84:63:19:85:37:a7:8f:de:88:3d:
2d:7b:be:47:20:e4:4f:aa:97:e0:1e:e1:3f:79:67:
cb:58:77:dc:53:d4:fa:d7:48:a5:5d:96:1b:bb:50:
64:cd:c6:dc:e0:1b:d6:4f:d1:e9:21:d0:92:15:df:
31:14:bb:34:58:0e:dd:ec:95:05:b0:c4:c3:46:23:
ac:76:6b:bd:d3:da:0c:c0:03:f6:6f:89:62:a0:72:
3d:0c:5e:26:ef:61:e1:f1:bd:e1:2e:9f:e3:c1:6a:
d3:ae:89:4f:1a:d6:2f:f5:a4:fe:0a:b8:f0:a8:ff:
7a:c1:f0:dd:4d:68:22:59:b3:42:e3:73:7f:cd:eb:
6b:8d:74:f7:15:75:eb:88:29:1f:20:5d:16:27:ad:
61:20:bd:23:15:4e:1d:95:8f:9f:09:45:cb:5a:eb:
ae:f3:9c:7a:c1:07:2b:97:af:2f:44:8f:e1:05:9c:
13:b4:8f:25:4c:86:6f:e6:65:0d:98:a3:58:1f:9b:
02:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:83:FC:74:1F:9D:BD:1D:BF:5E:FB:DA:85:92:F8:2B:81:FB:2B:60
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PoP8dB-dvR2_XvvahZL4K4H7K2A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8a:a3:ee:25:7f:e8:ab:2e:0c:ea:21:96:9a:83:50:e2:f2:5d:
46:06:19:73:2b:c7:7e:fa:36:0a:6a:0b:3a:18:a5:69:e6:f3:
51:4c:a8:b6:24:22:2b:17:4a:6f:ef:bb:1c:78:8c:01:5a:24:
89:16:fc:8b:f6:11:5b:9f:23:d2:02:35:f6:d6:af:90:5a:4f:
f7:be:9d:b9:99:dd:61:46:b7:f5:00:d7:fe:e2:d0:17:2b:6c:
72:2e:be:7a:89:d3:db:4e:45:22:5c:2a:84:68:51:0b:8a:91:
8a:f0:b8:62:67:cf:16:1f:75:0a:4b:78:50:82:01:5a:42:18:
10:15:a0:e3:be:61:a3:e8:a7:c1:87:84:88:26:f4:c0:dd:2a:
ce:16:78:12:72:5d:8e:eb:1d:e4:05:48:23:f7:52:ae:ba:14:
4c:4e:59:b1:9d:35:df:91:a6:57:06:ba:84:41:75:a3:ef:41:
ad:43:a6:60:34:eb:21:9c:90:cc:be:32:fc:49:97:ba:82:c6:
70:83:9b:ee:92:a6:ef:93:c8:55:d3:46:41:4e:8b:70:98:b4:
23:af:a8:0c:12:17:ab:c4:9f:ed:21:6d:ab:36:f4:29:3e:5b:
35:2f:96:2d:48:e2:9f:75:0f:ab:d9:f3:21:27:63:27:60:0f:
9a:8e:87:b2
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYmOrKngVWClcURJCMcAgdGiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNzI1MjAxMDI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZTgzZmM3NDFmOWRiZDFkYmY1ZWZiZGE4NTkyZjgyYjgxZmIyYjYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjA0IgwPsNfaWOpO+mzi7Rj2C1fw4
r4fec4eF9cgfiVCU9dEe0Kq+zDWg1C0L20lyl0oOuaTZuVxmBxZRTPOY0IRjGYU3
p4/eiD0te75HIORPqpfgHuE/eWfLWHfcU9T610ilXZYbu1Bkzcbc4BvWT9HpIdCS
Fd8xFLs0WA7d7JUFsMTDRiOsdmu909oMwAP2b4lioHI9DF4m72Hh8b3hLp/jwWrT
rolPGtYv9aT+CrjwqP96wfDdTWgiWbNC43N/zetrjXT3FXXriCkfIF0WJ61hIL0j
FU4dlY+fCUXLWuuu85x6wQcrl68vRI/hBZwTtI8lTIZv5mUNmKNYH5sCVQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFD6D/HQfnb0dv1772oWS+CuB+ytgMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvUG9QOGRCLWR2UjJfWHZ2YWhaTDRLNEg3SzJBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAIqj7iV/6KsuDOohlpqD
UOLyXUYGGXMrx376NgpqCzoYpWnm81FMqLYkIisXSm/vuxx4jAFaJIkW/Iv2EVuf
I9ICNfbWr5BaT/e+nbmZ3WFGt/UA1/7i0BcrbHIuvnqJ09tORSJcKoRoUQuKkYrw
uGJnzxYfdQpLeFCCAVpCGBAVoOO+YaPop8GHhIgm9MDdKs4WeBJyXY7rHeQFSCP3
Uq66FExOWbGdNd+RplcGuoRBdaPvQa1DpmA06yGckMy+MvxJl7qCxnCDm+6Spu+T
yFXTRkFOi3CYtCOvqAwSF6vEn+0hbas29Ck+WzUvli1I4p91D6vZ8yEnYydgD5qO
h7I=
-----END CERTIFICATE-----
Generated at Thu May 1 15:37:15 2025 by rpki-client