Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/c3yufPwpoJVdi9B7toRA1Bfw0Hg.roa
File: c3yufPwpoJVdi9B7toRA1Bfw0Hg.roa (raw, json)
Hash identifier: mP04S1iy+sJLbEC36dvZH53swhMTl7xLvimM5ou8nJY=
Subject key identifier: 73:7C:AE:7C:FC:29:A0:95:5D:8B:D0:7B:B6:84:40:D4:17:F0:D0:78
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187706BD84DCE0417709E4482E308BE6546
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/c3yufPwpoJVdi9B7toRA1Bfw0Hg.roa
Signing time: Tue 11 Apr 2023 13:05:28 +0000
ROA not before: Tue 11 Apr 2023 13:05:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:706b:1d3d/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:70:6b:d8:4d:ce:04:17:70:9e:44:82:e3:08:be:65:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 11 13:05:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=737cae7cfc29a0955d8bd07bb68440d417f0d078
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:c4:65:59:41:80:60:f6:9d:1f:c6:96:97:2e:
2d:ab:6d:1f:84:f0:aa:ef:8f:8e:d7:63:b8:61:83:
7a:40:f1:da:d4:7b:f2:bc:e5:1f:f7:d0:70:83:a9:
93:d2:41:dd:0f:bb:58:7a:e8:7a:cc:2b:61:f1:1b:
52:48:04:e2:4a:d9:65:5d:5d:f4:07:4b:2f:35:86:
a1:2e:17:5e:64:0b:16:ea:50:4e:78:0c:6f:2f:14:
16:e7:d8:b7:94:2f:29:04:71:21:52:0a:37:79:18:
3f:33:27:75:db:63:c5:70:ba:89:35:88:2a:b3:23:
0b:ee:0f:24:50:4f:b0:fe:7c:c3:4e:f4:ad:92:e2:
0f:e6:90:d0:c9:b8:15:7b:20:01:43:1f:c4:07:81:
0e:54:29:3c:3b:4a:be:31:76:f4:a9:9a:59:49:f2:
c1:cf:04:4d:14:92:e3:b3:60:2a:69:7e:15:08:99:
a3:d8:76:79:63:8c:76:7c:2a:65:53:a6:a1:9c:9f:
e3:f8:ba:0d:04:74:39:b0:64:38:c2:d2:f5:bb:f6:
57:e8:1f:70:9c:fd:17:d5:e3:de:52:a4:17:48:72:
9d:22:13:99:01:45:ae:e1:f9:bc:56:d1:e7:86:20:
8b:4f:ac:87:4c:7d:58:f1:7c:5a:18:02:9d:1e:bc:
fa:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:7C:AE:7C:FC:29:A0:95:5D:8B:D0:7B:B6:84:40:D4:17:F0:D0:78
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/c3yufPwpoJVdi9B7toRA1Bfw0Hg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
ae:77:e9:79:c9:fc:2c:79:69:3d:02:77:94:9d:a3:f0:8a:8d:
a4:37:1f:68:0d:79:26:65:d1:df:40:41:10:48:8a:a4:42:33:
b0:09:41:b3:34:c4:08:92:58:d2:f6:36:20:c4:b7:08:22:06:
40:3e:4a:bf:d4:cd:bd:da:61:a6:e7:2e:29:f1:8a:a3:e2:9f:
4f:d6:01:28:cc:39:47:c2:78:36:3e:9e:d2:e9:c8:b4:68:c4:
b4:f6:e4:b7:db:84:2e:95:eb:e8:89:75:c3:16:cd:97:55:98:
0c:ed:2f:8f:13:2b:25:9f:24:6e:f6:29:27:fb:ed:f7:5b:c5:
9c:d9:d8:70:75:16:da:cb:cc:f0:3c:4a:11:d9:63:96:76:1e:
f5:51:07:cd:bc:c2:88:e0:67:e5:68:3c:59:69:07:bc:e9:a0:
e8:c7:24:21:d4:4a:5d:b5:a1:80:b5:67:64:16:e8:9d:b8:71:
93:07:38:dd:9c:e1:33:ac:17:29:58:28:7b:98:8b:73:43:f4:
eb:77:42:c1:a5:36:ad:13:d7:60:43:6e:1a:9f:33:3a:75:ca:
f0:99:3b:e8:90:03:89:51:74:c5:de:c1:c3:e0:6b:77:1b:fd:
2d:7a:7a:27:fd:68:6e:d9:68:fa:6d:e1:a3:66:b7:f5:b8:b4:
02:8d:28:04
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYdwa9hNzgQXcJ5EguMIvmVGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNDExMTMwNTI4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MzdjYWU3Y2ZjMjlhMDk1NWQ4YmQwN2JiNjg0NDBkNDE3ZjBkMDc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmsRlWUGAYPadH8aWly4tq20fhPCq
74+O12O4YYN6QPHa1HvyvOUf99Bwg6mT0kHdD7tYeuh6zCth8RtSSATiStllXV30
B0svNYahLhdeZAsW6lBOeAxvLxQW59i3lC8pBHEhUgo3eRg/Myd122PFcLqJNYgq
syML7g8kUE+w/nzDTvStkuIP5pDQybgVeyABQx/EB4EOVCk8O0q+MXb0qZpZSfLB
zwRNFJLjs2AqaX4VCJmj2HZ5Y4x2fCplU6ahnJ/j+LoNBHQ5sGQ4wtL1u/ZX6B9w
nP0X1ePeUqQXSHKdIhOZAUWu4fm8VtHnhiCLT6yHTH1Y8XxaGAKdHrz6VQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFHN8rnz8KaCVXYvQe7aEQNQX8NB4MB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvYzN5dWZQd3BvSlZkaTlCN3RvUkExQmZ3MEhnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAK536XnJ/Cx5aT0Cd5Sd
o/CKjaQ3H2gNeSZl0d9AQRBIiqRCM7AJQbM0xAiSWNL2NiDEtwgiBkA+Sr/Uzb3a
YabnLinxiqPin0/WASjMOUfCeDY+ntLpyLRoxLT25LfbhC6V6+iJdcMWzZdVmAzt
L48TKyWfJG72KSf77fdbxZzZ2HB1FtrLzPA8ShHZY5Z2HvVRB828wojgZ+VoPFlp
B7zpoOjHJCHUSl21oYC1Z2QW6J24cZMHON2c4TOsFylYKHuYi3ND9Ot3QsGlNq0T
12BDbhqfMzp1yvCZO+iQA4lRdMXewcPga3cb/S16eif9aG7ZaPpt4aNmt/W4tAKN
KAQ=
-----END CERTIFICATE-----
Generated at Fri May 2 12:45:42 2025 by rpki-client