Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3EIBEfZpQQPMjic2jxJBKteMAuw.roa
File: 3EIBEfZpQQPMjic2jxJBKteMAuw.roa (raw, json)
Hash identifier: D6sHuRj+dwWA0TpGMRB+J2pHCbIYLu0SYJEoILwuZ4Q=
Subject key identifier: DC:42:01:11:F6:69:41:03:CC:8E:27:36:8F:12:41:2A:D7:8C:02:EC
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0181DC3842818F11F81537A79FA91B53B0BE
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3EIBEfZpQQPMjic2jxJBKteMAuw.roa
Signing time: Fri 08 Jul 2022 05:11:23 +0000
ROA not before: Fri 08 Jul 2022 05:11:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:dc:38:42:81:8f:11:f8:15:37:a7:9f:a9:1b:53:b0:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 8 05:11:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dc420111f6694103cc8e27368f12412ad78c02ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:0a:d5:29:17:67:f4:ff:dc:60:36:33:6c:4a:
76:54:8b:1e:4e:2a:84:f2:e1:af:e3:f4:0f:71:26:
9d:72:8a:30:05:3e:52:87:ed:dc:24:21:01:39:fb:
56:42:f8:28:50:ab:f4:ce:8a:40:16:c9:7a:90:cf:
ef:4e:3f:d2:a7:21:3b:0e:e8:bf:c8:6a:3c:c9:56:
b3:15:68:44:34:74:49:35:b5:12:a5:75:e2:cb:70:
28:66:47:02:17:8e:a5:32:38:27:82:93:10:73:af:
df:ae:49:0a:d3:22:68:c8:42:7f:e4:ba:81:40:c8:
fa:68:ca:b7:b1:07:79:8e:0d:05:66:42:ba:d1:e4:
07:91:97:ab:05:c7:29:79:e6:d0:03:45:ba:b0:62:
ee:a1:c7:80:2e:91:7b:35:5a:8a:37:00:52:72:e6:
8d:d4:4a:97:e1:0c:be:62:cd:39:97:c4:a2:72:8e:
de:cb:53:76:9e:4d:db:d8:50:09:3f:86:37:8c:1d:
21:a5:62:a8:58:df:2f:a0:6d:f5:fd:a3:8b:87:c0:
25:4d:be:09:e5:82:07:43:ed:08:ae:0b:52:90:02:
3b:88:5e:b8:05:d0:12:e3:01:a8:71:b9:02:2a:46:
c6:f8:b5:e4:2d:17:5c:1f:dd:42:d8:6c:e1:e5:2e:
fa:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:42:01:11:F6:69:41:03:CC:8E:27:36:8F:12:41:2A:D7:8C:02:EC
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3EIBEfZpQQPMjic2jxJBKteMAuw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
71:59:01:ae:50:83:4c:b8:d3:e5:55:2f:e4:ce:4c:4b:55:d8:
51:00:17:77:ac:8d:4b:71:ec:5e:3a:96:e2:b0:61:4e:08:cb:
f5:95:69:86:6c:e2:e2:85:5f:3b:93:48:d1:8d:e2:41:7e:c0:
d1:a8:fe:67:ea:39:2a:f2:4d:9c:fe:9e:1c:b3:f1:39:c1:97:
1c:d8:67:46:53:27:a7:75:11:d3:f0:9d:69:1d:d6:9c:15:8e:
72:60:bb:63:c6:23:35:5c:e2:41:bc:ef:26:2c:0f:15:eb:04:
d7:3c:8a:4b:4f:07:ae:f1:df:bc:08:4a:2f:6d:c6:db:5e:1d:
ab:5f:4c:81:7f:b2:24:c7:f6:32:87:5d:43:97:61:ba:ee:9f:
3f:7d:a8:9a:22:78:76:15:4f:1e:4e:22:9f:6e:2c:ed:48:a4:
3a:ca:9c:91:ef:6e:93:2a:4e:bd:1a:01:1e:2e:65:bc:7c:e4:
9d:f3:50:f1:0c:eb:86:d3:be:1c:ba:ca:c5:b8:b2:48:33:f0:
98:fc:75:70:b7:ef:64:a7:7a:28:87:8f:7f:f9:44:60:9d:1c:
9b:32:e1:2b:31:b6:9b:44:39:24:1f:f0:76:cd:25:72:23:2c:
85:95:c2:ea:a6:37:d7:1e:d1:5e:fe:ec:f6:3f:45:03:48:c9:
92:44:88:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:53:40 2025 by rpki-client