Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3F-lhsc3Xp_dqrZPKBc5Ncdbl1M.roa
File: 3F-lhsc3Xp_dqrZPKBc5Ncdbl1M.roa (raw, json)
Hash identifier: hyfKk3cOtQj/APXae1chSy1hrOFLfYYoYiq39gWNAUc=
Subject key identifier: DC:5F:A5:86:C7:37:5E:9F:DD:AA:B6:4F:28:17:39:35:C7:5B:97:53
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188747CBEACC478D8B338668686B8A2910C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3F-lhsc3Xp_dqrZPKBc5Ncdbl1M.roa
Signing time: Thu 01 Jun 2023 01:05:12 +0000
ROA not before: Thu 01 Jun 2023 01:05:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:188:747b:dfef/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:74:7c:be:ac:c4:78:d8:b3:38:66:86:86:b8:a2:91:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 1 01:05:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dc5fa586c7375e9fddaab64f28173935c75b9753
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:d2:91:9b:f0:2a:cd:28:54:14:0b:c8:e4:4a:
0d:59:23:55:b7:f1:5d:b5:fa:2d:f6:98:e9:39:e2:
43:a4:91:55:43:72:55:22:b4:d1:15:c4:f0:10:51:
21:da:72:68:f3:fa:c6:3d:6a:a3:cf:49:be:91:bc:
b3:a1:c5:1e:8e:3d:85:c1:62:48:f6:8e:7d:3a:30:
41:6b:bd:65:6d:6b:c5:bd:30:20:d2:2a:ef:58:56:
9b:16:97:02:53:72:e3:48:0b:10:e5:f2:e6:8c:26:
d8:52:c2:2f:0b:a0:f5:81:71:e2:82:da:d3:7e:95:
a9:26:70:47:b9:e0:8a:23:8f:21:a7:75:62:43:84:
9c:8e:9f:8b:b5:f5:2a:b6:ff:b7:af:2b:17:3b:e8:
cb:75:0a:fb:89:2e:a3:c4:0b:6b:f0:86:5f:f0:02:
e5:4a:dc:d7:f0:1c:64:79:9a:40:1a:f0:6a:9a:78:
45:e2:05:50:90:3b:d2:a4:65:aa:d4:15:2e:62:cb:
8d:1d:60:76:02:55:59:58:bc:8e:e1:0f:5a:99:73:
43:3a:99:f4:8e:96:f2:eb:4b:1b:f9:f5:bb:7a:f4:
c2:a5:76:5b:5b:0d:74:63:72:ec:07:86:9f:a9:1e:
3d:fd:2c:66:99:64:24:d1:40:51:0a:b2:a5:ae:07:
4a:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:5F:A5:86:C7:37:5E:9F:DD:AA:B6:4F:28:17:39:35:C7:5B:97:53
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3F-lhsc3Xp_dqrZPKBc5Ncdbl1M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3a:83:c6:e0:a4:fb:53:57:63:f1:f7:26:5a:65:80:58:e4:04:
51:71:53:ef:f2:40:18:94:b7:51:ba:c9:f4:01:06:91:1d:81:
41:70:69:f9:e0:9c:50:31:81:7c:a3:31:fe:13:75:22:6d:51:
44:25:bf:89:c0:d9:99:22:88:52:9d:2b:b5:7b:e8:47:3a:36:
ac:d2:ec:2c:6e:b0:1e:72:0a:9e:dd:44:3e:cb:6c:5f:d5:86:
5e:23:d1:63:ad:27:bd:e5:69:3d:61:3f:07:bc:53:c1:3c:5e:
f1:17:ae:df:11:d1:01:8f:2e:bd:f6:61:5c:00:64:c7:12:90:
9c:6c:e8:15:b0:fa:94:9a:96:af:1c:fc:72:c1:cf:a8:ab:eb:
8e:ba:1c:3d:f5:63:bc:80:b0:3b:dd:a4:ab:5b:01:b8:55:8d:
53:95:3c:98:0e:ed:3b:14:93:3c:8a:c7:9d:f1:8f:a9:ef:bc:
dc:0e:e0:f6:6b:c6:d8:f8:42:a3:1c:8b:d0:78:b3:f7:95:e8:
64:86:80:63:3e:e0:26:93:de:4b:d3:45:ba:1d:19:3f:35:c1:
b7:84:82:41:bc:8c:1c:d4:4a:61:17:6a:08:dc:c2:c8:31:5d:
11:01:7f:28:56:48:80:1f:18:d8:e6:e2:27:76:78:ea:60:37:
ac:b1:27:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 22:58:06 2025 by rpki-client