Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3AeqzBj-JTb74mhSh96bAUMYKCU.roa
File: 3AeqzBj-JTb74mhSh96bAUMYKCU.roa (raw, json)
Hash identifier: wALqVH1GP7Pm2ZOj5oXMQRnpTpn4TK5frVPsOOzm2GE=
Subject key identifier: DC:07:AA:CC:18:FE:25:36:FB:E2:68:52:87:DE:9B:01:43:18:28:25
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01869CAB7C25723C25664A4EDB7EE11FB7BE
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3AeqzBj-JTb74mhSh96bAUMYKCU.roa
Signing time: Wed 01 Mar 2023 10:15:29 +0000
ROA not before: Wed 01 Mar 2023 10:15:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:9c:ab:7c:25:72:3c:25:66:4a:4e:db:7e:e1:1f:b7:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 1 10:15:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dc07aacc18fe2536fbe2685287de9b0143182825
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:dd:cf:2f:fb:ad:1a:19:e1:2f:a4:85:1f:06:
88:53:57:cd:a6:c7:91:62:c3:64:87:dd:29:08:59:
a8:89:e1:cc:ad:7d:35:bc:63:c5:24:ee:78:7a:d7:
e4:d1:9e:3f:71:0a:9e:cb:6e:1a:71:88:e0:2f:c0:
95:25:6d:4b:43:c3:f6:00:10:82:96:38:5a:8f:47:
c4:63:f7:1b:10:19:ff:2e:f0:f8:5b:75:da:02:47:
b9:ff:91:a8:cd:c2:dd:8a:ce:4d:d0:d7:ba:2a:3d:
e1:48:43:04:c8:7b:fb:98:b8:8f:06:39:b4:bf:e7:
46:4a:bc:ca:c0:44:74:e0:10:f3:ce:12:31:57:a6:
a5:3e:43:ce:f1:13:40:d8:d1:fb:4e:86:4d:f7:18:
50:20:3a:a3:57:3d:62:97:46:04:fa:a8:b4:78:f4:
ff:0f:12:0f:22:87:50:24:b7:8e:e8:c8:64:9c:53:
d0:e3:c7:d5:05:09:01:82:c6:f0:d6:85:bd:2d:36:
dc:9e:79:5d:93:69:f7:7d:29:b3:55:82:fb:f8:43:
fd:d0:46:e0:75:4e:db:cc:2b:31:17:99:ea:4e:d1:
b6:d0:ea:3a:3e:c2:37:01:62:e1:73:83:56:08:f6:
12:19:ce:f5:20:6a:c5:55:b3:9e:77:e9:a7:31:c9:
1a:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:07:AA:CC:18:FE:25:36:FB:E2:68:52:87:DE:9B:01:43:18:28:25
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3AeqzBj-JTb74mhSh96bAUMYKCU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
81:9e:77:f4:16:ee:36:7c:0a:8f:22:4c:37:c7:23:1e:e2:ad:
92:14:14:93:f0:ac:be:dd:c6:53:19:ae:59:c1:a1:1f:56:ca:
1c:3f:c3:d3:57:6f:71:0f:15:96:70:8a:f2:8b:11:73:0a:55:
94:73:83:d3:86:a9:3d:fd:57:7e:a3:1b:e9:e6:3d:45:d0:ac:
c8:96:d0:66:84:16:b3:84:07:31:82:82:1c:84:62:47:16:dd:
35:4f:8f:5c:5e:e7:c7:34:27:2e:68:ab:98:e1:79:31:7a:50:
ab:77:45:8a:11:fd:8e:5a:d8:4c:93:dc:86:aa:3d:10:56:6c:
a7:5d:61:5b:b5:33:92:71:61:5c:63:d7:60:fa:82:38:2b:f6:
4b:63:fc:4a:bf:78:03:f7:b3:06:f7:ca:38:67:58:26:ea:65:
c2:74:8e:6e:d0:be:07:f0:c2:55:e6:e6:96:7e:7f:54:a7:01:
a7:23:6b:97:61:5e:c1:29:a8:e5:be:56:51:d0:e0:78:e5:89:
02:d8:c3:1f:83:c1:86:78:3b:a9:a8:8c:22:e2:e0:69:b2:38:
3f:2b:ea:96:00:bb:ac:59:31:ae:41:c4:aa:9a:f0:ad:4a:39:
90:cd:92:39:89:a0:4f:8b:d7:87:d7:df:2e:60:15:6c:cd:a6:
c5:fb:ac:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:23:31 2025 by rpki-client