Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PdHu1zt7rxZwvizClveuS69FOgw.roa
File: PdHu1zt7rxZwvizClveuS69FOgw.roa (raw, json)
Hash identifier: VeChoSLb4Vh1mMGqjK7w3HCYLqLZ/IKtD94SN3yYZ9w=
Subject key identifier: 3D:D1:EE:D7:3B:7B:AF:16:70:BE:2C:C2:96:F7:AE:4B:AF:45:3A:0C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A43F8F8E7087BC67433B87FDF01763408
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PdHu1zt7rxZwvizClveuS69FOgw.roa
Signing time: Wed 30 Aug 2023 01:05:04 +0000
ROA not before: Wed 30 Aug 2023 01:05:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18a:43f8:667c/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:43:f8:f8:e7:08:7b:c6:74:33:b8:7f:df:01:76:34:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 30 01:05:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3dd1eed73b7baf1670be2cc296f7ae4baf453a0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:fb:f5:bf:19:5e:f5:60:89:47:42:ef:22:7a:
38:00:2b:cf:75:c0:db:13:86:76:9c:20:2f:67:e1:
a8:e1:1d:de:d8:93:44:2a:3c:69:ac:22:af:5e:14:
eb:54:58:08:7d:28:78:63:21:23:4f:4c:07:c7:96:
8d:76:53:d2:92:f9:4c:f1:98:22:e4:92:e7:07:52:
2a:a5:ad:23:eb:e4:50:4b:98:6b:9e:3e:db:fc:82:
78:24:1a:1e:61:a7:5d:6a:b9:43:a4:70:b3:70:fb:
22:f8:cd:a9:04:0c:64:d4:3a:80:7e:56:1a:4c:00:
31:5c:52:e9:1d:24:20:a2:ce:09:26:d2:45:c3:69:
7d:91:bc:0e:08:43:b3:80:74:23:2b:ea:e4:4f:26:
a8:ea:0c:c1:f5:f9:34:e9:0a:e7:c6:0f:f0:b0:5a:
58:51:81:0f:3d:2f:40:08:7f:4d:e4:ae:47:01:d9:
4c:47:04:97:67:ba:35:a6:aa:85:33:9c:37:68:58:
6e:bf:21:eb:3d:1b:56:f4:1e:4a:e5:35:f4:68:a4:
aa:2e:84:91:fa:c1:c8:23:33:d5:0e:cb:f4:64:f5:
a4:0a:01:3b:43:de:61:65:86:0b:3a:ce:34:86:c5:
4d:ea:5b:41:08:5e:56:02:db:06:81:43:7a:c0:df:
16:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:D1:EE:D7:3B:7B:AF:16:70:BE:2C:C2:96:F7:AE:4B:AF:45:3A:0C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PdHu1zt7rxZwvizClveuS69FOgw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
73:73:54:20:49:68:1b:39:01:31:00:f3:c2:ec:dd:5a:eb:a2:
85:1d:f9:c7:cd:e3:34:8a:e3:71:64:47:e4:5e:29:18:af:fe:
f9:8c:11:53:3c:d3:91:ac:23:60:f8:ad:a7:a3:c2:98:f3:55:
d2:79:ec:b7:21:66:f6:fd:50:b5:d2:2d:b2:4f:73:5a:b6:d0:
76:8f:eb:ca:6d:32:cb:db:ce:da:ff:d9:e3:e9:cd:24:79:f0:
76:9f:f0:bd:f4:86:f3:3e:fa:28:30:d7:72:1f:32:e6:6a:64:
f2:38:db:34:b4:96:f8:be:65:ee:94:bc:b7:63:34:27:35:3d:
ca:5f:db:b2:70:3e:f6:c8:ec:04:d0:a3:e5:c5:e1:ba:97:92:
3b:7d:ac:e0:5f:31:22:05:aa:d2:de:f7:e9:58:46:54:a7:4e:
11:e7:b0:6c:37:16:f6:d6:9b:7b:1d:15:03:83:39:2d:d0:b9:
47:36:76:42:c9:0f:f5:dd:bb:14:ba:5c:9a:c1:2e:89:c4:f3:
ab:2d:a0:ed:41:ee:53:99:84:8c:83:75:18:32:d3:59:93:1e:
f3:a7:86:06:6e:f7:bf:ad:74:19:57:3d:1f:f2:11:b1:73:df:
4b:78:81:b5:60:31:2f:06:ef:19:4f:d4:10:d8:ba:45:35:f8:
25:f2:04:84
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYpD+PjnCHvGdDO4f98BdjQIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwODMwMDEwNTA0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZGQxZWVkNzNiN2JhZjE2NzBiZTJjYzI5NmY3YWU0YmFmNDUzYTBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmfv1vxle9WCJR0LvIno4ACvPdcDb
E4Z2nCAvZ+Go4R3e2JNEKjxprCKvXhTrVFgIfSh4YyEjT0wHx5aNdlPSkvlM8Zgi
5JLnB1Iqpa0j6+RQS5hrnj7b/IJ4JBoeYaddarlDpHCzcPsi+M2pBAxk1DqAflYa
TAAxXFLpHSQgos4JJtJFw2l9kbwOCEOzgHQjK+rkTyao6gzB9fk06Qrnxg/wsFpY
UYEPPS9ACH9N5K5HAdlMRwSXZ7o1pqqFM5w3aFhuvyHrPRtW9B5K5TX0aKSqLoSR
+sHIIzPVDsv0ZPWkCgE7Q95hZYYLOs40hsVN6ltBCF5WAtsGgUN6wN8WpwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFD3R7tc7e68WcL4swpb3rkuvRToMMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvUGRIdTF6dDdyeFp3dml6Q2x2ZXVTNjlGT2d3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAHNzVCBJaBs5ATEA88Ls
3VrrooUd+cfN4zSK43FkR+ReKRiv/vmMEVM805GsI2D4raejwpjzVdJ57LchZvb9
ULXSLbJPc1q20HaP68ptMsvbztr/2ePpzSR58Haf8L30hvM++igw13IfMuZqZPI4
2zS0lvi+Ze6UvLdjNCc1Pcpf27JwPvbI7ATQo+XF4bqXkjt9rOBfMSIFqtLe9+lY
RlSnThHnsGw3FvbWm3sdFQODOS3QuUc2dkLJD/XduxS6XJrBLonE86stoO1B7lOZ
hIyDdRgy01mTHvOnhgZu97+tdBlXPR/yEbFz30t4gbVgMS8G7xlP1BDYukU1+CXy
BIQ=
-----END CERTIFICATE-----
Generated at Wed Jun 11 00:05:32 2025 by rpki-client