Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3DbeRgqMs4lcaGaIsU3mCTa0USU.roa
File: 3DbeRgqMs4lcaGaIsU3mCTa0USU.roa (raw, json)
Hash identifier: mf2bi+ikaWzz7+F/7o3geSePBsTNf14aO618MMifFlk=
Subject key identifier: DC:36:DE:46:0A:8C:B3:89:5C:68:66:88:B1:4D:E6:09:36:B4:51:25
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189A3B5CE671F389F255E85A34720F6BAE9
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3DbeRgqMs4lcaGaIsU3mCTa0USU.roa
Signing time: Sat 29 Jul 2023 22:12:28 +0000
ROA not before: Sat 29 Jul 2023 22:12:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:a3:b5:ce:67:1f:38:9f:25:5e:85:a3:47:20:f6:ba:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 29 22:12:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dc36de460a8cb3895c686688b14de60936b45125
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:3a:79:fe:4b:70:92:1d:91:69:e6:79:73:b5:
83:79:7c:1f:39:cb:70:ac:bb:2a:63:c8:76:1f:61:
64:14:62:fa:97:27:f3:1c:6d:6d:88:3b:36:b8:2c:
c0:04:99:25:51:0b:df:74:41:dd:f5:5a:d6:76:c5:
c1:4d:35:2c:ba:2b:29:24:c1:04:4a:c1:1b:2a:d4:
a6:d5:d4:ce:fc:f0:29:28:f4:a7:20:6a:90:72:c0:
2d:d9:dc:62:12:a5:1b:7d:01:8c:bb:7b:89:db:8a:
e3:86:40:09:e9:ab:b0:93:4e:d8:7e:75:10:03:62:
2e:07:9b:0f:38:9c:ea:8a:2e:98:d4:27:31:c3:ab:
a6:e6:42:19:c1:42:d5:4d:7e:ac:c8:1e:97:92:6a:
00:7a:45:76:8b:32:e1:33:ee:b4:05:c0:81:9c:14:
d8:dc:cf:33:ba:3d:68:73:a6:42:35:30:ea:70:5b:
a9:c9:1c:89:e1:60:0f:49:33:5e:ff:a6:08:48:e8:
65:e7:cb:e3:03:9a:99:29:4a:19:81:3c:3c:d0:82:
93:4c:d4:30:22:22:c2:19:fc:d9:88:95:c8:bc:bf:
8f:5d:90:d1:7e:f4:a2:a8:9d:c7:61:18:1b:30:74:
fc:09:f0:ba:a6:71:a4:e4:50:ab:66:78:5c:a8:06:
10:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:36:DE:46:0A:8C:B3:89:5C:68:66:88:B1:4D:E6:09:36:B4:51:25
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3DbeRgqMs4lcaGaIsU3mCTa0USU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7e:61:8b:70:a0:d9:51:b9:cb:f2:43:be:14:cb:ed:e1:03:43:
0a:f9:8d:b8:15:21:4a:6c:6c:80:6b:82:26:39:8b:20:8f:9c:
13:46:2a:7d:29:d8:16:09:c9:5f:b9:bf:b1:9b:90:50:cd:8f:
ab:49:d4:41:24:7c:f4:ef:f0:c1:c4:3c:58:e4:dd:89:6a:bf:
1f:e2:bf:04:59:a4:1e:9c:ca:15:eb:64:e3:fe:7e:b4:95:dd:
e1:da:53:eb:07:8c:0a:ef:9e:19:40:1c:98:7d:44:e1:55:7d:
3b:dc:90:1e:b3:02:e1:75:e4:c9:02:df:8f:72:bb:7d:98:1e:
04:92:07:cb:70:46:d7:ea:b5:82:27:bc:bd:33:ec:0c:06:78:
27:6b:55:00:ab:cf:8b:a2:7d:59:7b:95:a0:f5:1e:cb:c0:98:
20:c9:2b:5c:fb:cc:b7:33:0c:47:b9:98:60:07:ac:90:cf:87:
be:a1:58:5c:56:02:e1:e1:c5:31:78:27:29:da:d9:c8:97:70:
7e:59:f9:b9:82:2e:0d:04:78:2a:2e:b1:07:10:2e:b3:71:11:
aa:b6:68:79:81:ca:0d:55:a0:bc:66:6d:36:9e:2d:2f:d7:50:
d6:a2:ca:03:a1:f0:f4:a5:bd:f0:cf:a6:90:97:57:b5:6a:6d:
e2:a0:7f:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:18:38 2025 by rpki-client