Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/X3ZK7NQ8Wua4KsDx_hNfbCITt20.roa
File: X3ZK7NQ8Wua4KsDx_hNfbCITt20.roa (raw, json)
Hash identifier: 9CmEbaSggmwkXRsCTuCOcXs9v7Twah4QtHIKkRtU9JU=
Subject key identifier: 5F:76:4A:EC:D4:3C:5A:E6:B8:2A:C0:F1:FE:13:5F:6C:22:13:B7:6D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184E9102580B1209F0C04F64F458D8D5479
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/X3ZK7NQ8Wua4KsDx_hNfbCITt20.roa
Signing time: Tue 06 Dec 2022 20:11:00 +0000
ROA not before: Tue 06 Dec 2022 20:11:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:e9:10:25:80:b1:20:9f:0c:04:f6:4f:45:8d:8d:54:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 6 20:11:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5f764aecd43c5ae6b82ac0f1fe135f6c2213b76d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:b5:e4:1d:c7:73:a0:5a:d9:f9:b7:38:0a:0d:
39:40:bd:cc:bf:8e:41:8b:c3:41:3e:da:b2:81:15:
7b:50:b0:1a:7d:2d:4d:ca:7c:a8:7c:d9:a4:ac:2d:
e0:e3:91:68:b4:4a:99:c3:26:3a:11:18:1e:17:ef:
af:00:e0:c2:5f:63:9b:db:ce:ee:b8:59:15:a3:7a:
36:4a:9a:b1:0e:b3:00:2f:95:59:71:da:bc:63:ac:
a7:06:31:23:00:e3:cc:57:2e:e9:4e:52:9f:d7:6a:
6b:1b:0d:60:53:7f:ce:d5:99:2f:25:59:7f:78:f3:
e9:3f:d3:d7:a4:e2:b3:16:82:a0:fe:42:7d:3c:1e:
31:a8:36:45:58:65:80:59:9f:74:f5:e4:67:3c:89:
1d:00:7a:d6:67:f3:d9:78:09:d9:d5:de:e3:e6:bb:
6f:13:dc:f4:24:4b:cb:10:25:79:44:6c:90:15:45:
8e:d7:f8:be:0d:8d:7b:c3:63:27:9b:88:68:2f:91:
f3:28:78:af:14:cb:12:02:81:2f:cc:39:7e:45:8d:
1c:2c:d2:b9:ca:cb:1f:08:50:1f:c3:79:4c:6a:24:
dd:fd:b4:58:da:e9:79:96:16:32:25:3c:eb:06:e5:
01:ef:c2:fe:cf:15:f9:39:bf:f6:64:6b:0b:a7:47:
95:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:76:4A:EC:D4:3C:5A:E6:B8:2A:C0:F1:FE:13:5F:6C:22:13:B7:6D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/X3ZK7NQ8Wua4KsDx_hNfbCITt20.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9d:1d:c2:22:6f:42:2c:79:96:13:07:21:ac:f8:c2:68:8c:97:
53:a9:82:0d:3d:47:08:1d:7b:c8:0d:45:1a:c1:c9:16:d7:bf:
1b:0f:b6:44:55:e6:f8:48:bd:83:cb:02:3a:5d:8f:a1:3f:80:
d6:ac:a8:dc:5a:93:29:3a:02:e4:45:4d:15:12:1b:70:3f:e6:
5b:ff:a2:c7:8b:38:0d:ab:0e:97:4a:a7:b9:98:fa:c7:a3:40:
d4:9b:0c:72:5e:c0:75:f5:e1:f2:a4:b6:96:53:b0:c7:6c:a2:
fc:1e:9a:4e:96:57:51:ec:eb:31:e3:c3:32:cf:3c:65:2b:af:
05:c9:0c:57:54:bd:89:bb:02:b3:3e:1f:71:70:2b:e1:67:9d:
7e:08:99:d3:95:e2:57:29:96:84:c0:1e:72:30:03:d0:c7:27:
95:40:6f:75:73:87:c3:af:b3:51:ed:fb:81:e1:48:85:81:dc:
7e:97:f3:4d:b0:1e:04:52:1e:c3:aa:01:f6:21:83:f2:8e:29:
9e:06:dc:9d:89:73:74:4c:ba:1b:52:a8:bd:02:80:52:4f:dc:
9a:4a:d7:18:ab:4a:ae:1c:cb:fc:d3:9a:ae:3f:d4:37:98:74:
fd:e4:02:51:59:72:b5:69:fd:c8:89:e8:94:68:4f:c4:5a:e3:
95:0e:ce:50
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYTpECWAsSCfDAT2T0WNjVR5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIxMjA2MjAxMTAwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1Zjc2NGFlY2Q0M2M1YWU2YjgyYWMwZjFmZTEzNWY2YzIyMTNiNzZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiLXkHcdzoFrZ+bc4Cg05QL3Mv45B
i8NBPtqygRV7ULAafS1NynyofNmkrC3g45FotEqZwyY6ERgeF++vAODCX2Ob287u
uFkVo3o2SpqxDrMAL5VZcdq8Y6ynBjEjAOPMVy7pTlKf12prGw1gU3/O1ZkvJVl/
ePPpP9PXpOKzFoKg/kJ9PB4xqDZFWGWAWZ909eRnPIkdAHrWZ/PZeAnZ1d7j5rtv
E9z0JEvLECV5RGyQFUWO1/i+DY17w2Mnm4hoL5HzKHivFMsSAoEvzDl+RY0cLNK5
yssfCFAfw3lMaiTd/bRY2ul5lhYyJTzrBuUB78L+zxX5Ob/2ZGsLp0eVXQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFF92SuzUPFrmuCrA8f4TX2wiE7dtMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvWDNaSzdOUThXdWE0S3NEeF9oTmZiQ0lUdDIwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAJ0dwiJvQix5lhMHIaz4
wmiMl1Opgg09Rwgde8gNRRrByRbXvxsPtkRV5vhIvYPLAjpdj6E/gNasqNxakyk6
AuRFTRUSG3A/5lv/oseLOA2rDpdKp7mY+sejQNSbDHJewHX14fKktpZTsMdsovwe
mk6WV1Hs6zHjwzLPPGUrrwXJDFdUvYm7ArM+H3FwK+FnnX4ImdOV4lcploTAHnIw
A9DHJ5VAb3Vzh8Ovs1Ht+4HhSIWB3H6X802wHgRSHsOqAfYhg/KOKZ4G3J2Jc3RM
uhtSqL0CgFJP3JpK1xirSq4cy/zTmq4/1DeYdP3kAlFZcrVp/ciJ6JRoT8Ra45UO
zlA=
-----END CERTIFICATE-----
Generated at Thu May 1 09:36:34 2025 by rpki-client