Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3Cd2e0zGT5gGJIyHgUoh0e6UqTE.roa
File: 3Cd2e0zGT5gGJIyHgUoh0e6UqTE.roa (raw, json)
Hash identifier: PAG2YZPI5hStBfu4mrQfBHnoIEgAA6mA1NGn+A2nptQ=
Subject key identifier: DC:27:76:7B:4C:C6:4F:98:06:24:8C:87:81:4A:21:D1:EE:94:A9:31
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01854853ADCC1A6D1E950CA7749E5818FCCA
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3Cd2e0zGT5gGJIyHgUoh0e6UqTE.roa
Signing time: Sun 25 Dec 2022 08:08:41 +0000
ROA not before: Sun 25 Dec 2022 08:08:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:48:53:ad:cc:1a:6d:1e:95:0c:a7:74:9e:58:18:fc:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 25 08:08:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dc27767b4cc64f9806248c87814a21d1ee94a931
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:37:c8:f4:31:e6:7d:9f:73:6f:b3:9c:cf:b9:
0d:fa:3d:58:9c:ec:0d:c9:0c:81:c1:33:b1:90:f1:
73:88:a5:22:d7:53:58:55:72:bc:60:33:73:e6:a4:
a2:06:18:93:8c:5f:06:41:11:6b:49:bb:63:fa:31:
39:1d:8c:db:e7:70:89:9c:8b:05:8c:b7:bd:64:75:
7a:cb:e7:e0:22:02:d6:7c:1c:83:3e:0d:90:b7:ee:
41:54:a3:e8:1f:84:74:ee:ef:cb:08:48:62:c8:a6:
8b:1f:34:51:fe:c6:9b:fb:f9:cc:15:10:0a:61:6d:
c0:02:f7:5b:b0:35:18:b0:dd:a6:05:3b:d6:b4:6e:
48:fe:36:4d:b8:2b:49:69:dc:67:47:fc:39:89:28:
b4:af:84:92:3e:37:02:47:12:3b:23:28:06:ea:73:
7b:6d:b2:f8:fa:b9:dc:e1:8e:02:68:6e:01:e7:26:
e7:f8:bc:2a:80:f6:c0:59:5a:de:53:a4:4f:88:1d:
4f:6a:b6:52:13:d6:1a:82:79:20:a1:32:2d:be:0c:
eb:d2:21:ae:6c:17:5e:f1:15:7c:cd:e7:c8:e4:82:
80:af:98:51:b8:2c:27:69:f6:85:8e:de:43:d7:40:
e1:62:7b:5c:38:01:76:95:c6:b4:53:6e:59:cf:05:
99:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:27:76:7B:4C:C6:4F:98:06:24:8C:87:81:4A:21:D1:EE:94:A9:31
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3Cd2e0zGT5gGJIyHgUoh0e6UqTE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
27:e6:1f:27:49:68:51:3c:86:1e:24:aa:cb:6c:56:ad:a1:0d:
f6:82:e1:a7:33:2e:ef:bb:a7:7e:8b:6d:a4:62:09:52:c2:93:
9d:4f:17:ea:2f:06:8d:33:b5:c1:47:0a:7a:94:f1:bf:45:62:
45:84:f7:ff:e1:de:a2:8f:24:a1:7d:b6:ff:11:c5:14:2e:12:
fe:1c:b9:2f:5e:23:db:6d:34:68:3f:af:4a:18:fe:af:b1:13:
c5:f5:c1:35:28:e8:6e:40:e9:16:35:95:1e:46:7d:bd:5c:7d:
bf:be:5c:65:d5:4f:76:f2:eb:9c:f0:8c:1a:2f:04:c7:99:c0:
27:1a:64:7a:e2:cd:35:40:a2:58:82:a4:31:bf:5b:36:be:3b:
91:d7:d3:b2:65:10:89:89:cf:c7:01:e6:ef:9a:34:5d:82:3a:
4c:17:b7:ad:41:be:de:b4:aa:b1:cb:41:d6:4a:ae:c1:70:cc:
ce:0c:86:cf:79:d2:fc:ab:e0:01:42:29:1b:58:51:12:1e:0b:
10:8f:aa:bf:bd:91:69:0b:4b:0e:d3:a6:c1:61:58:d9:f6:a6:
f6:b5:4c:74:b3:df:43:99:1f:3c:b6:ad:7d:3e:55:2e:9a:a4:
95:b9:cf:7c:78:2b:dc:54:6a:6b:87:e1:e5:88:1d:15:e6:97:
05:7d:06:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 15:45:28 2025 by rpki-client