Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3Fx34T1cWIupBDm7HOlDCojTnQI.roa
File: 3Fx34T1cWIupBDm7HOlDCojTnQI.roa (raw, json)
Hash identifier: oTCJhyLZvXPYuUlaKzcC2Kys/ZwsRCrx47MEuahZJtU=
Subject key identifier: DC:5C:77:E1:3D:5C:58:8B:A9:04:39:BB:1C:E9:43:0A:88:D3:9D:02
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018359BE0B9F86E9E7C44F361F6712EFD124
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3Fx34T1cWIupBDm7HOlDCojTnQI.roa
Signing time: Tue 20 Sep 2022 07:12:50 +0000
ROA not before: Tue 20 Sep 2022 07:12:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:183:50b3:5643/128 maxlen: 128
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:183:1279:659d/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:59:be:0b:9f:86:e9:e7:c4:4f:36:1f:67:12:ef:d1:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Sep 20 07:12:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dc5c77e13d5c588ba90439bb1ce9430a88d39d02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:26:a3:b5:5e:4d:2f:5c:bd:b8:c0:ef:6d:6a:
d3:f9:d6:dd:64:83:8c:f5:41:e6:5c:71:14:e9:5c:
ff:53:3e:a5:2c:65:9d:42:8b:d7:8a:25:76:59:6d:
65:34:ea:3a:17:38:0c:45:af:61:1d:c6:d1:f9:6b:
15:c9:17:79:d4:44:0c:0b:73:41:38:e1:f3:77:2e:
de:a9:92:0c:a5:6f:56:88:0d:ec:9b:03:7d:c8:3e:
62:b6:71:13:8c:73:96:c0:ac:9e:22:20:ac:a9:63:
c8:cf:f8:6a:c5:11:32:40:4e:bc:c8:58:ba:b3:13:
40:a7:b8:51:8b:86:22:05:04:14:66:ff:7a:c4:db:
25:e4:97:b1:ad:6a:a2:a2:b5:4e:4f:93:ee:b3:3f:
37:31:1d:0b:00:2d:0c:e3:6d:7b:69:03:fb:17:16:
1a:22:c8:0b:a3:f6:fb:86:07:4c:b0:a1:68:c3:37:
a6:e6:11:fd:36:d6:f8:5b:56:90:00:9b:99:8c:54:
22:4f:ca:e6:90:4e:e3:23:0d:d5:88:b6:2c:a4:6f:
ba:92:c4:29:51:04:9b:af:69:12:1a:96:7a:85:08:
7c:a7:37:0f:4a:63:2b:22:5f:50:a7:b0:9d:8d:f6:
d7:02:f5:62:5a:9f:36:a1:75:4e:ed:e2:75:c1:2b:
c0:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:5C:77:E1:3D:5C:58:8B:A9:04:39:BB:1C:E9:43:0A:88:D3:9D:02
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3Fx34T1cWIupBDm7HOlDCojTnQI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
53:0c:6d:50:5e:8c:08:9c:8b:6a:b1:7d:18:aa:ef:a4:ad:24:
95:7a:20:f1:f6:6f:b8:73:6d:5b:29:10:e2:65:a4:9c:98:f9:
58:58:66:cc:2b:b2:36:c3:48:86:41:cb:59:1b:dc:52:7e:d0:
13:a5:21:cd:54:71:60:18:78:bc:8d:71:d4:d8:7a:ca:05:5f:
8b:5b:07:b2:be:2a:a0:4a:ed:90:0e:b4:9f:6a:a2:15:9b:8b:
23:69:84:8a:19:3d:97:40:92:68:ac:d6:a9:4c:ea:c5:97:25:
c6:c9:26:ec:d9:26:68:4a:1d:6a:f4:bb:2f:30:5f:84:2b:ce:
03:e4:89:7e:48:fa:29:7b:88:51:99:01:3c:c3:e8:68:73:30:
6b:8b:15:3a:90:48:e8:14:4d:f8:9e:1d:2a:49:cd:bd:6f:b0:
70:0d:8a:08:5d:2f:2b:45:22:f2:a7:36:3d:81:d4:10:3c:ce:
13:ae:d0:28:21:f3:17:b3:56:06:24:14:c1:89:39:b0:7f:95:
e9:6f:65:6a:21:60:5f:c2:de:0d:62:22:5a:42:96:71:da:0a:
a6:d9:1a:b5:be:b3:66:64:f6:42:4c:c6:90:8e:87:b5:6c:eb:
00:d3:cd:20:e1:43:bc:cf:f7:f2:a7:8b:53:d6:0e:e8:8f:d1:
98:cf:60:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 20:20:41 2025 by rpki-client