Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PuKVYaLEcp990zXr4ZNW0C56Ay8.roa
File: PuKVYaLEcp990zXr4ZNW0C56Ay8.roa (raw, json)
Hash identifier: 8701FaxB5PSSZfQtcr0UzZDE/safofL8bnUFFSbgwTU=
Subject key identifier: 3E:E2:95:61:A2:C4:72:9F:7D:D3:35:EB:E1:93:56:D0:2E:7A:03:2F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01885751E4B95018882BF12496140BB159F6
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PuKVYaLEcp990zXr4ZNW0C56Ay8.roa
Signing time: Fri 26 May 2023 09:09:24 +0000
ROA not before: Fri 26 May 2023 09:09:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:57:51:e4:b9:50:18:88:2b:f1:24:96:14:0b:b1:59:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 26 09:09:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3ee29561a2c4729f7dd335ebe19356d02e7a032f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:be:a1:12:21:ef:bd:72:eb:ab:7a:d9:fc:84:
18:08:a3:b7:fe:bd:d6:2d:5a:b3:6c:a7:82:b1:7f:
80:02:bf:52:73:c4:35:c2:51:26:15:1a:33:8f:c3:
ba:c0:68:6d:0a:6b:46:d5:65:35:d8:d0:7c:a8:6a:
0e:e8:0f:0f:4e:54:83:23:cb:b9:33:18:3e:7f:17:
ce:28:d8:5d:9a:06:d7:94:e8:ce:fb:6e:ea:3f:b0:
25:43:3a:95:b0:6b:00:a9:93:8b:2d:df:bf:b0:57:
e4:c4:83:2b:96:2d:d1:8e:73:7e:7c:cf:75:19:80:
d4:52:9b:dc:e0:7f:e4:22:7a:ea:ec:dd:8d:c2:d6:
0b:33:a0:67:67:23:4e:55:20:03:92:a6:5a:d5:f3:
b0:83:2e:14:31:16:44:1b:31:c2:39:96:2e:37:df:
ac:5d:8f:c6:db:7c:da:58:c7:76:47:df:7a:87:4c:
13:e1:48:8d:ce:40:c8:ca:de:99:34:2d:8c:06:60:
f2:86:a7:26:8d:49:22:0e:47:e7:03:c8:f0:12:f5:
4e:ef:60:e2:51:f5:27:c9:18:6e:4c:8b:0b:58:f1:
56:c6:11:65:04:47:e2:11:b4:f5:e9:e8:12:0a:09:
25:10:74:22:e6:77:55:93:ba:a1:53:4e:93:e1:bf:
fe:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:E2:95:61:A2:C4:72:9F:7D:D3:35:EB:E1:93:56:D0:2E:7A:03:2F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PuKVYaLEcp990zXr4ZNW0C56Ay8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
11:d7:9a:50:ef:b9:ca:57:f2:76:18:01:24:fd:d9:6d:2f:d0:
14:92:12:f9:0a:d5:82:e2:4c:02:21:10:3f:64:72:ce:e2:ab:
25:54:c4:a4:9d:72:95:60:ed:5c:0a:07:cd:d7:89:6d:20:fc:
bf:fc:9b:ff:8a:b1:f3:a6:04:38:db:51:8a:3f:8d:ab:55:d9:
65:9f:21:47:cc:91:f4:66:45:e3:cf:ff:ba:05:60:cc:70:cc:
2f:3f:eb:8b:eb:72:dc:95:1c:24:32:fb:6d:0e:9b:83:b1:19:
3b:4c:22:c5:38:ca:10:d3:79:34:08:43:4f:f6:b3:e1:69:31:
1e:a8:0d:e9:aa:2d:28:02:3a:dd:1f:73:11:1f:a7:ee:a3:7a:
ca:b3:fa:c7:30:84:cf:4e:58:08:2a:27:73:93:2f:99:6f:59:
82:93:c6:24:2d:3f:26:f9:59:db:b5:89:d0:15:f2:4e:6a:fb:
58:bf:8a:5a:98:0e:0d:48:cf:e2:a1:79:34:b8:21:06:39:bf:
11:c6:7f:99:a0:4c:be:fa:86:46:32:f8:45:34:90:2c:57:9e:
ff:46:09:75:98:d4:77:90:79:05:90:ef:17:b0:f2:24:3e:80:
6a:c6:60:bf:30:97:dc:3c:56:51:97:b8:b9:1a:61:7e:39:1e:
da:41:3e:da
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYhXUeS5UBiIK/EklhQLsVn2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNTI2MDkwOTI0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZWUyOTU2MWEyYzQ3MjlmN2RkMzM1ZWJlMTkzNTZkMDJlN2EwMzJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx76hEiHvvXLrq3rZ/IQYCKO3/r3W
LVqzbKeCsX+AAr9Sc8Q1wlEmFRozj8O6wGhtCmtG1WU12NB8qGoO6A8PTlSDI8u5
Mxg+fxfOKNhdmgbXlOjO+27qP7AlQzqVsGsAqZOLLd+/sFfkxIMrli3RjnN+fM91
GYDUUpvc4H/kInrq7N2NwtYLM6BnZyNOVSADkqZa1fOwgy4UMRZEGzHCOZYuN9+s
XY/G23zaWMd2R996h0wT4UiNzkDIyt6ZNC2MBmDyhqcmjUkiDkfnA8jwEvVO72Di
UfUnyRhuTIsLWPFWxhFlBEfiEbT16egSCgklEHQi5ndVk7qhU06T4b/+qwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFD7ilWGixHKffdM16+GTVtAuegMvMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvUHVLVllhTEVjcDk5MHpYcjRaTlcwQzU2QXk4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBABHXmlDvucpX8nYYAST9
2W0v0BSSEvkK1YLiTAIhED9kcs7iqyVUxKSdcpVg7VwKB83XiW0g/L/8m/+KsfOm
BDjbUYo/jatV2WWfIUfMkfRmRePP/7oFYMxwzC8/64vrctyVHCQy+20Om4OxGTtM
IsU4yhDTeTQIQ0/2s+FpMR6oDemqLSgCOt0fcxEfp+6jesqz+scwhM9OWAgqJ3OT
L5lvWYKTxiQtPyb5Wdu1idAV8k5q+1i/ilqYDg1Iz+KheTS4IQY5vxHGf5mgTL76
hkYy+EU0kCxXnv9GCXWY1HeQeQWQ7xew8iQ+gGrGYL8wl9w8VlGXuLkaYX45HtpB
Pto=
-----END CERTIFICATE-----
Generated at Thu May 1 03:57:19 2025 by rpki-client