Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Pu3A3G9Z9l2LrqYFH8P84AwstB0.roa
File: Pu3A3G9Z9l2LrqYFH8P84AwstB0.roa (raw, json)
Hash identifier: LfS0UWVp9o6gUwjfXgite5VsIM78Fo2jyhgKl8HmPtc=
Subject key identifier: 3E:ED:C0:DC:6F:59:F6:5D:8B:AE:A6:05:1F:C3:FC:E0:0C:2C:B4:1D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185575ABB22DAFD5E399C6751595731951A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Pu3A3G9Z9l2LrqYFH8P84AwstB0.roa
Signing time: Wed 28 Dec 2022 06:10:41 +0000
ROA not before: Wed 28 Dec 2022 06:10:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:57:5a:bb:22:da:fd:5e:39:9c:67:51:59:57:31:95:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 28 06:10:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3eedc0dc6f59f65d8baea6051fc3fce00c2cb41d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c5:7b:d9:02:cf:e9:87:64:53:40:9d:90:d3:
ed:90:0c:31:c9:6d:8a:73:d8:07:1c:ff:e6:b6:40:
3d:d3:4e:91:b1:c6:e4:0b:9d:dc:7c:97:d6:73:a5:
f1:67:2b:0a:76:41:66:2f:89:ea:55:2c:12:a5:83:
81:e4:97:37:52:91:0a:31:d7:85:7d:fa:a6:63:2b:
e6:3b:1b:b9:92:ae:04:b7:8b:73:f2:1b:8a:6d:00:
d4:4e:c9:f9:1d:46:43:d3:c7:2c:4e:dc:0f:71:eb:
99:9e:c3:ad:73:ef:11:be:ab:cc:5a:86:10:5f:e0:
58:b3:4d:58:16:14:34:80:45:c2:3e:35:ce:32:e8:
6a:f0:d9:3a:da:fb:92:d0:be:93:10:98:c8:89:10:
6f:ab:5c:ac:f4:80:17:41:84:ff:fe:d9:cf:7f:46:
5e:19:28:83:ea:14:17:57:e2:46:9f:d5:b6:f2:a0:
8e:93:27:a3:63:f3:2c:0a:8f:ce:6d:dd:45:5c:03:
34:fe:c6:e0:1d:9f:bd:72:0f:a3:e4:71:24:94:3b:
16:7a:b4:86:8f:67:ba:45:f4:e9:e5:1a:b5:18:99:
14:f7:12:a0:aa:a9:fd:1f:91:7d:b9:9c:95:4f:3e:
cd:8b:cd:11:2f:21:ef:4b:4b:29:3f:f9:80:9d:eb:
f9:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:ED:C0:DC:6F:59:F6:5D:8B:AE:A6:05:1F:C3:FC:E0:0C:2C:B4:1D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Pu3A3G9Z9l2LrqYFH8P84AwstB0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
54:3e:64:aa:53:66:a9:e1:90:8a:91:ca:7e:e8:70:64:27:84:
ad:97:c8:1a:e6:de:38:af:5b:b9:54:f8:7f:4e:af:ad:6b:21:
90:7e:36:fc:90:6a:36:1d:ae:20:a3:5f:41:ee:37:84:8b:f1:
47:82:39:2f:a9:18:25:81:3e:b1:93:42:58:f8:10:d4:5d:41:
a0:dd:85:37:af:d1:95:7e:21:ff:1d:d3:3a:34:14:2b:74:32:
97:7f:22:90:b4:1c:d9:d3:79:a2:97:70:ff:fc:c9:27:3c:ee:
7c:c3:4e:f8:76:e4:3e:07:91:c6:37:4a:d4:0c:c8:84:e4:82:
0c:2f:79:0d:9b:65:36:16:98:ee:43:87:77:e9:e2:d6:51:d0:
4d:c2:21:1e:14:36:62:2d:3e:90:08:4c:6b:e2:3c:f7:25:c4:
bc:76:22:76:78:be:0a:40:83:db:c0:b3:ef:fc:5f:d9:b5:69:
a1:dd:9d:b7:cc:99:38:c0:e2:89:04:ef:28:56:ff:73:9e:0c:
0f:90:95:d2:09:dd:2a:fd:bc:d7:b2:ef:3b:ee:29:7f:52:d5:
bc:8f:0e:7e:ec:52:61:e2:23:fa:75:82:33:ec:c9:e1:9c:3c:
56:de:df:d9:c5:e7:e3:33:79:d3:b8:40:b6:1b:c9:b8:e3:84:
d7:80:ab:a3
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYVXWrsi2v1eOZxnUVlXMZUaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIxMjI4MDYxMDQxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZWVkYzBkYzZmNTlmNjVkOGJhZWE2MDUxZmMzZmNlMDBjMmNiNDFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAscV72QLP6YdkU0CdkNPtkAwxyW2K
c9gHHP/mtkA9006RscbkC53cfJfWc6XxZysKdkFmL4nqVSwSpYOB5Jc3UpEKMdeF
ffqmYyvmOxu5kq4Et4tz8huKbQDUTsn5HUZD08csTtwPceuZnsOtc+8RvqvMWoYQ
X+BYs01YFhQ0gEXCPjXOMuhq8Nk62vuS0L6TEJjIiRBvq1ys9IAXQYT//tnPf0Ze
GSiD6hQXV+JGn9W28qCOkyejY/MsCo/Obd1FXAM0/sbgHZ+9cg+j5HEklDsWerSG
j2e6RfTp5Rq1GJkU9xKgqqn9H5F9uZyVTz7Ni80RLyHvS0spP/mAnev5vwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFD7twNxvWfZdi66mBR/D/OAMLLQdMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvUHUzQTNHOVo5bDJMcnFZRkg4UDg0QXdzdEIwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAFQ+ZKpTZqnhkIqRyn7o
cGQnhK2XyBrm3jivW7lU+H9Or61rIZB+NvyQajYdriCjX0HuN4SL8UeCOS+pGCWB
PrGTQlj4ENRdQaDdhTev0ZV+If8d0zo0FCt0Mpd/IpC0HNnTeaKXcP/8ySc87nzD
Tvh25D4HkcY3StQMyITkggwveQ2bZTYWmO5Dh3fp4tZR0E3CIR4UNmItPpAITGvi
PPclxLx2InZ4vgpAg9vAs+/8X9m1aaHdnbfMmTjA4okE7yhW/3OeDA+QldIJ3Sr9
vNey7zvuKX9S1byPDn7sUmHiI/p1gjPsyeGcPFbe39nF5+MzedO4QLYbybjjhNeA
q6M=
-----END CERTIFICATE-----
Generated at Thu May 1 06:48:52 2025 by rpki-client