Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3pg_iymR3FkF9yAiEI06BlefQbo.roa
File: 3pg_iymR3FkF9yAiEI06BlefQbo.roa (raw, json)
Hash identifier: g4mC5otU452EIfMZutOcZY/oTA3nsVUPzbCuKVLAFUM=
Subject key identifier: DE:98:3F:8B:29:91:DC:59:05:F7:20:22:10:8D:3A:06:57:9F:41:BA
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185F4A2CD6B32782E1F67582C5E7017D435
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3pg_iymR3FkF9yAiEI06BlefQbo.roa
Signing time: Fri 27 Jan 2023 19:09:48 +0000
ROA not before: Fri 27 Jan 2023 19:09:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:f4:a2:cd:6b:32:78:2e:1f:67:58:2c:5e:70:17:d4:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 27 19:09:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=de983f8b2991dc5905f72022108d3a06579f41ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:ef:df:a7:8f:f7:d9:a5:af:cb:1c:60:d5:cc:
9d:02:b8:79:15:60:bd:9b:ad:0f:20:5b:9f:ba:f4:
ba:d9:c4:eb:27:35:57:6c:ae:38:15:9e:95:38:f4:
a5:1f:74:76:e5:e8:ca:cd:51:49:f2:aa:fe:95:09:
87:58:50:7c:15:99:af:da:d9:31:d2:02:84:9c:dd:
19:00:9d:84:fd:53:ef:9a:12:44:66:28:52:3b:df:
47:cb:6d:69:1e:92:ae:fb:9a:ea:1b:2d:55:73:0a:
59:fb:ef:38:50:f2:88:c8:13:1e:9d:e1:8c:0b:88:
ca:53:7c:35:7e:06:a5:6c:5b:54:4a:de:d1:a4:37:
28:6c:de:04:fd:ee:66:07:f9:9a:7d:9b:ff:bf:11:
69:3e:85:22:27:da:37:b2:20:9a:94:ee:a0:d1:5a:
47:f1:e7:c6:7d:a8:a5:39:9a:be:0e:53:0f:a7:ce:
6a:55:8c:28:2c:95:83:62:d2:ee:01:34:88:0e:90:
fb:bb:aa:4c:4f:0a:b5:e0:3b:57:f2:6c:1e:1c:8c:
e6:41:c1:79:df:b7:39:fe:9d:0d:8e:1d:e0:b3:d4:
72:34:45:f6:3a:09:41:77:e5:22:b2:a7:68:cb:66:
82:82:60:6f:c5:bc:24:d9:f3:8d:b4:19:18:9e:06:
3b:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:98:3F:8B:29:91:DC:59:05:F7:20:22:10:8D:3A:06:57:9F:41:BA
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3pg_iymR3FkF9yAiEI06BlefQbo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3e:50:b0:2e:04:c6:d4:6b:6a:83:44:ad:ff:8a:62:40:ed:d9:
eb:c0:61:ce:fc:ce:74:59:4e:ef:dd:8b:a6:0b:be:85:d6:28:
fb:c0:b0:6e:f3:d1:fc:ae:1f:6f:61:a2:0b:88:63:55:03:9d:
cc:d4:06:84:8d:44:86:af:fd:21:d1:d9:ad:89:00:13:02:26:
85:7f:29:a6:c5:4b:d4:f6:ac:c7:bb:12:cf:fe:23:6b:ae:03:
66:53:e5:2f:08:ff:59:d5:ba:32:59:fd:67:6d:91:be:41:b8:
5c:c9:c4:00:9f:cd:d1:43:4e:db:ce:7e:87:2f:1f:72:2a:6e:
07:b5:62:de:d0:16:d7:f5:e1:e5:7f:f0:45:2b:25:cb:94:5e:
dc:e6:7e:83:3d:27:cc:59:9a:95:22:cd:ab:58:dc:94:f0:44:
d0:fa:31:7e:eb:95:2e:24:8e:67:83:73:0d:6f:44:92:d1:6b:
8e:66:d7:f8:5d:b1:85:35:df:d6:d2:69:af:10:3a:0f:6d:b3:
4c:bf:f1:6c:4d:41:79:3b:c9:94:4c:6c:5d:0f:8a:00:33:dd:
ff:61:6f:c5:36:62:98:c0:25:82:ec:a6:51:d0:32:88:51:b3:
60:6c:6d:f0:34:f8:5a:ea:b1:33:84:9d:6a:cd:6b:57:0e:6f:
7c:8e:06:2c
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYX0os1rMnguH2dYLF5wF9Q1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMTI3MTkwOTQ4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZTk4M2Y4YjI5OTFkYzU5MDVmNzIwMjIxMDhkM2EwNjU3OWY0MWJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhO/fp4/32aWvyxxg1cydArh5FWC9
m60PIFufuvS62cTrJzVXbK44FZ6VOPSlH3R25ejKzVFJ8qr+lQmHWFB8FZmv2tkx
0gKEnN0ZAJ2E/VPvmhJEZihSO99Hy21pHpKu+5rqGy1VcwpZ++84UPKIyBMeneGM
C4jKU3w1fgalbFtUSt7RpDcobN4E/e5mB/mafZv/vxFpPoUiJ9o3siCalO6g0VpH
8efGfailOZq+DlMPp85qVYwoLJWDYtLuATSIDpD7u6pMTwq14DtX8mweHIzmQcF5
37c5/p0Njh3gs9RyNEX2OglBd+Uisqdoy2aCgmBvxbwk2fONtBkYngY7UQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFN6YP4spkdxZBfcgIhCNOgZXn0G6MB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvM3BnX2l5bVIzRmtGOXlBaUVJMDZCbGVmUWJvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAD5QsC4ExtRraoNErf+K
YkDt2evAYc78znRZTu/di6YLvoXWKPvAsG7z0fyuH29hoguIY1UDnczUBoSNRIav
/SHR2a2JABMCJoV/KabFS9T2rMe7Es/+I2uuA2ZT5S8I/1nVujJZ/Wdtkb5BuFzJ
xACfzdFDTtvOfocvH3Iqbge1Yt7QFtf14eV/8EUrJcuUXtzmfoM9J8xZmpUizatY
3JTwRND6MX7rlS4kjmeDcw1vRJLRa45m1/hdsYU139bSaa8QOg9ts0y/8WxNQXk7
yZRMbF0PigAz3f9hb8U2YpjAJYLsplHQMohRs2BsbfA0+FrqsTOEnWrNa1cOb3yO
Biw=
-----END CERTIFICATE-----
Generated at Sun Jun 8 23:29:22 2025 by rpki-client