Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3BUZAU-nAE3fyW7YdcxWgEO_UjE.roa
File: 3BUZAU-nAE3fyW7YdcxWgEO_UjE.roa (raw, json)
Hash identifier: XHjCG2ODRPoNwHxGFEbrMbTllPX6UDqUBGPHmhULv1U=
Subject key identifier: DC:15:19:01:4F:A7:00:4D:DF:C9:6E:D8:75:CC:56:80:43:BF:52:31
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A2A7C3BD7221C784B20250A8DC8036203
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3BUZAU-nAE3fyW7YdcxWgEO_UjE.roa
Signing time: Fri 25 Aug 2023 02:18:19 +0000
ROA not before: Fri 25 Aug 2023 02:18:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:2a:7c:3b:d7:22:1c:78:4b:20:25:0a:8d:c8:03:62:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 25 02:18:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dc1519014fa7004ddfc96ed875cc568043bf5231
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e1:a8:87:84:55:62:93:4e:82:1e:8b:86:0c:
88:4f:7c:a8:a5:65:7f:ff:6f:c8:b8:1d:69:01:cb:
5e:04:a7:b3:be:f0:67:d6:06:a8:aa:dc:5f:13:0e:
e2:5e:c6:c7:27:56:fc:f3:24:79:c7:8b:d7:3d:d9:
5f:1f:64:d1:6a:d7:cf:74:5c:58:31:b5:5c:e3:79:
b0:35:38:e5:37:2d:a9:e6:fc:c8:cc:7f:d6:c6:f1:
63:dd:ff:ba:b3:79:20:80:b0:09:0b:f2:46:c7:a7:
f9:22:c9:3c:e0:b8:09:97:9b:b6:be:3c:89:6e:42:
38:8c:63:c0:0b:f1:d9:2c:73:a1:77:c3:79:cc:37:
ee:53:26:88:46:3b:10:87:a3:8a:72:49:3b:25:be:
bf:9f:01:40:cf:3b:b8:83:94:17:17:32:28:7e:15:
06:d2:8e:2b:6c:29:06:17:5a:5f:25:52:82:7b:e2:
06:0d:df:33:4f:d4:61:05:34:9d:fc:69:54:58:2e:
cb:84:ae:85:f5:9e:fd:e4:fe:4b:78:4c:a3:72:be:
92:ad:b0:ff:d9:ab:a3:6b:15:93:d6:12:10:e6:1a:
d7:e7:5c:5f:a9:87:e6:0c:a5:3a:da:f1:75:13:e4:
29:69:a5:b4:65:50:8f:fe:1e:e6:da:ca:93:59:5c:
56:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:15:19:01:4F:A7:00:4D:DF:C9:6E:D8:75:CC:56:80:43:BF:52:31
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3BUZAU-nAE3fyW7YdcxWgEO_UjE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
ae:9a:13:d3:2f:03:55:d5:bb:fc:7c:9f:38:f8:19:16:ff:c1:
f9:ca:2d:49:f8:48:20:7a:83:82:3d:83:92:ab:c1:01:38:11:
c9:58:cc:a3:b5:66:86:df:47:4f:f4:a7:c5:9c:b6:3b:5e:aa:
7a:65:c4:74:1a:e7:68:b6:33:c3:f7:7c:40:7f:fa:04:6d:30:
be:4e:0a:20:22:32:01:85:70:7f:81:c7:ff:c2:1c:e8:b0:12:
de:6b:e5:b3:2e:43:11:d1:2c:d5:67:84:b2:ff:89:77:96:a8:
ec:00:51:8d:c1:c9:07:c4:5d:f1:e0:9d:83:39:03:92:ee:03:
e8:4b:cc:50:7f:bb:44:5b:07:46:a9:63:09:8e:67:eb:5a:48:
0a:fc:a3:80:fa:9d:f1:5e:e0:8a:7d:14:e5:aa:5f:38:2e:e0:
09:e3:b4:1f:5e:0d:c8:01:9d:c4:31:7f:bc:26:78:1e:da:2f:
b7:b2:95:d4:9a:af:8e:a4:e1:59:0a:7d:f2:f4:bd:72:1c:f3:
93:20:fa:1a:3a:8e:17:9b:39:e6:ca:47:5b:43:bb:85:b3:f7:
c0:77:4d:22:b9:0c:82:df:33:6c:26:ce:df:2d:ee:a8:2b:b8:
3b:20:05:2c:f4:29:58:a6:4d:c6:86:f4:27:43:bc:44:2e:58:
77:72:6a:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 23:18:21 2025 by rpki-client