Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3COXCXAMDAuuzfAP5eIMHFvlY7M.roa
File: 3COXCXAMDAuuzfAP5eIMHFvlY7M.roa (raw, json)
Hash identifier: TYElRjjC3pSEmqC2ZNo9USy2FCBgFzAGH5li9Nzfbig=
Subject key identifier: DC:23:97:09:70:0C:0C:0B:AE:CD:F0:0F:E5:E2:0C:1C:5B:E5:63:B3
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187AF508267F02864BFE30D56581E0FE04E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3COXCXAMDAuuzfAP5eIMHFvlY7M.roa
Signing time: Sun 23 Apr 2023 18:11:41 +0000
ROA not before: Sun 23 Apr 2023 18:11:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:af:50:82:67:f0:28:64:bf:e3:0d:56:58:1e:0f:e0:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 23 18:11:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dc239709700c0c0baecdf00fe5e20c1c5be563b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:0a:92:59:0c:01:5f:d7:79:38:0d:9c:27:62:
1f:0d:8d:7f:6f:0b:7e:91:d4:23:4c:a5:6b:fb:36:
75:24:5d:1b:a1:70:a5:11:4b:a2:a4:97:06:93:84:
54:94:89:a7:43:1d:7e:9b:12:80:40:3c:1d:47:bf:
59:f8:79:59:f3:69:e3:df:70:c6:a6:ad:7f:44:f4:
04:15:61:9d:28:41:db:9c:a1:c9:5d:22:dd:5e:8c:
b8:84:91:e3:62:37:b4:dd:9c:2b:83:22:99:a8:91:
ca:63:a2:32:e1:95:be:2c:2a:95:ab:44:5c:57:71:
22:e1:0e:bc:fb:2b:72:3e:9b:b3:32:99:be:73:66:
b4:10:67:4a:22:d1:88:dc:d8:1e:ab:4a:70:8c:45:
7a:4d:8c:50:6b:dd:3f:b3:2d:84:8f:bd:99:e4:03:
97:a5:e3:b4:ae:d2:f4:2a:98:24:a1:00:36:b5:34:
9d:87:25:f3:af:b6:1e:d7:00:66:e5:c2:85:d2:32:
a1:e2:82:67:d0:77:d3:0c:d8:db:e9:0f:07:cb:6f:
28:51:35:a0:6d:41:f7:ca:a1:a1:a8:67:99:e6:66:
fa:c2:6c:4f:86:5b:84:c2:2e:41:18:99:1d:6e:5e:
01:ce:58:35:9e:53:69:22:6e:2d:c1:b9:bd:e8:f8:
48:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:23:97:09:70:0C:0C:0B:AE:CD:F0:0F:E5:E2:0C:1C:5B:E5:63:B3
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3COXCXAMDAuuzfAP5eIMHFvlY7M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
28:37:ea:6a:5d:bc:85:c1:75:39:a5:2a:f7:1d:f2:b1:8c:5d:
d9:e5:1c:86:54:d0:96:9f:9e:d5:68:6c:9f:8c:eb:e9:80:97:
bb:66:09:6f:f9:33:d5:eb:b3:8b:e1:df:bb:03:b5:37:53:13:
a5:47:54:20:9d:66:bd:0e:5b:0d:c6:b9:a5:f5:33:d0:fa:da:
f4:07:61:29:41:2a:e1:96:e0:de:a1:7d:16:e4:88:4e:83:c0:
a8:91:2f:32:c5:72:70:f4:06:21:86:ae:4c:22:af:21:13:68:
69:d1:a7:6b:cb:e5:df:aa:f7:b5:5d:77:04:33:85:8c:36:db:
43:b0:23:4e:c0:93:55:d8:25:78:8a:16:f1:59:b0:67:fc:ef:
cd:80:e7:71:69:9b:1d:f0:99:85:db:18:a1:fd:4d:6d:3c:f4:
5d:74:d4:2b:0f:70:0e:62:40:ad:eb:bf:8a:b8:cd:80:c8:f4:
82:b1:29:3b:eb:8e:f9:2b:eb:de:a5:72:b8:95:45:6a:b9:8b:
d2:de:4a:b7:93:bc:9f:2c:9c:4a:b2:56:f4:63:f9:c2:18:06:
a1:16:13:75:11:15:e4:0e:d5:3a:4e:62:d0:ee:d1:89:fe:b7:
8e:2b:c9:91:86:d6:69:17:98:08:c2:97:31:a8:d4:88:5f:9e:
98:0b:49:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 05:38:40 2025 by rpki-client