Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/prQ3haGek_DLrC4VhZpCzb92LZE.roa
File: prQ3haGek_DLrC4VhZpCzb92LZE.roa (raw, json)
Hash identifier: ysGDvVtfs0XAiVLrO55gKSprQczd81yqSuNTtOgjw1Q=
Subject key identifier: A6:B4:37:85:A1:9E:93:F0:CB:AC:2E:15:85:9A:42:CD:BF:76:2D:91
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01828966F38194EB84D575F9AC0764914BA5
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/prQ3haGek_DLrC4VhZpCzb92LZE.roa
Signing time: Wed 10 Aug 2022 20:16:41 +0000
ROA not before: Wed 10 Aug 2022 20:16:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:89:66:f3:81:94:eb:84:d5:75:f9:ac:07:64:91:4b:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 10 20:16:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a6b43785a19e93f0cbac2e15859a42cdbf762d91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:4a:37:ff:2d:9c:c3:e3:1f:d5:73:49:e4:01:
d3:91:04:6b:6c:38:92:c1:b1:dd:dd:16:88:fc:17:
2a:cc:db:67:77:aa:22:bc:c2:ec:a1:e4:b8:c7:27:
c5:5a:aa:5b:eb:87:2c:43:f9:55:72:df:86:7f:c1:
5e:24:a3:d5:1d:3d:f0:19:9c:33:d9:35:01:73:e2:
d9:84:2a:a5:4b:b9:9c:48:05:48:ff:71:7f:32:97:
df:cb:ce:07:f0:39:7f:2a:33:7a:b4:28:20:2b:5f:
b7:74:33:25:e9:7d:85:c6:3a:c4:72:ae:9b:36:a6:
9f:00:38:6e:a1:5c:cb:cf:ae:dc:24:5b:38:be:36:
7b:48:57:65:c6:ce:b1:be:90:f7:82:70:60:a1:50:
b8:6b:2c:d4:1e:e6:28:60:84:79:34:42:69:6e:fa:
5f:56:ba:24:d0:00:24:78:1b:8b:49:9d:c2:f7:41:
7e:3a:e6:f0:cd:ce:24:bf:69:7d:e4:03:04:af:27:
c6:b7:9f:ff:27:29:89:0c:fc:cc:7f:3d:44:bc:29:
6e:78:11:fb:15:a2:5c:a8:df:c5:30:97:83:3a:2b:
05:95:6d:66:91:a3:7c:46:8d:3f:69:c9:6e:b7:34:
0c:a9:1c:d7:88:76:6f:6c:58:4b:6c:95:25:e8:80:
e5:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:B4:37:85:A1:9E:93:F0:CB:AC:2E:15:85:9A:42:CD:BF:76:2D:91
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/prQ3haGek_DLrC4VhZpCzb92LZE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0e:80:cb:a3:7f:93:25:2b:b4:9e:69:b3:fd:83:1f:e4:4d:ba:
1c:a6:4b:c6:f6:da:e9:d5:23:80:d5:31:1f:d3:4b:17:0e:f3:
e3:1d:ba:06:27:2e:e2:76:44:ec:4f:8d:70:2b:ee:d1:58:55:
fd:ac:b0:cc:06:a4:aa:cc:94:d2:8d:76:fa:5d:0f:a4:4c:75:
86:b5:11:96:95:a7:39:4a:a2:ad:35:ed:0b:48:5d:70:bd:5b:
7f:2f:e2:8a:20:0e:37:18:8c:52:f0:ca:2c:d1:21:4d:c6:54:
e4:f2:05:6b:bc:2a:62:1b:df:d6:80:b0:43:45:fd:f7:b8:e6:
b1:de:af:36:55:01:b6:8f:0f:03:0f:b0:c1:ee:cb:ff:fe:50:
ba:66:ea:b6:04:dc:34:8f:59:4a:57:39:10:55:3a:1b:02:42:
a2:34:a3:11:c5:9a:0e:06:28:54:c0:fb:27:05:42:77:05:40:
55:63:34:7c:60:ab:5a:6c:2d:c0:b1:2a:88:93:e0:0d:52:73:
5f:40:d9:aa:89:af:74:99:bf:94:27:e2:8a:a1:9e:0e:00:2b:
45:43:34:97:3b:0a:90:a4:bf:38:ca:a8:61:dc:5c:a6:48:e3:
48:77:e1:05:20:c4:51:78:2f:6d:38:1d:3d:30:f0:17:86:86:
ed:0f:48:e2
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYKJZvOBlOuE1XX5rAdkkUulMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIwODEwMjAxNjQxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNmI0Mzc4NWExOWU5M2YwY2JhYzJlMTU4NTlhNDJjZGJmNzYyZDkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjEo3/y2cw+Mf1XNJ5AHTkQRrbDiS
wbHd3RaI/BcqzNtnd6oivMLsoeS4xyfFWqpb64csQ/lVct+Gf8FeJKPVHT3wGZwz
2TUBc+LZhCqlS7mcSAVI/3F/Mpffy84H8Dl/KjN6tCggK1+3dDMl6X2FxjrEcq6b
NqafADhuoVzLz67cJFs4vjZ7SFdlxs6xvpD3gnBgoVC4ayzUHuYoYIR5NEJpbvpf
Vrok0AAkeBuLSZ3C90F+Oubwzc4kv2l95AMEryfGt5//JymJDPzMfz1EvClueBH7
FaJcqN/FMJeDOisFlW1mkaN8Ro0/aclutzQMqRzXiHZvbFhLbJUl6IDl8wIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFKa0N4WhnpPwy6wuFYWaQs2/di2RMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvcHJRM2hhR2VrX0RMckM0VmhacEN6YjkyTFpFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAA6Ay6N/kyUrtJ5ps/2D
H+RNuhymS8b22unVI4DVMR/TSxcO8+MdugYnLuJ2ROxPjXAr7tFYVf2ssMwGpKrM
lNKNdvpdD6RMdYa1EZaVpzlKoq017QtIXXC9W38v4oogDjcYjFLwyizRIU3GVOTy
BWu8KmIb39aAsENF/fe45rHerzZVAbaPDwMPsMHuy//+ULpm6rYE3DSPWUpXORBV
OhsCQqI0oxHFmg4GKFTA+ycFQncFQFVjNHxgq1psLcCxKoiT4A1Sc19A2aqJr3SZ
v5Qn4oqhng4AK0VDNJc7CpCkvzjKqGHcXKZI40h34QUgxFF4L204HT0w8BeGhu0P
SOI=
-----END CERTIFICATE-----
Generated at Sun May 4 07:17:02 2025 by rpki-client