Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3GmaeCwGEbuKrXv7mffeR58sU9A.roa
File: 3GmaeCwGEbuKrXv7mffeR58sU9A.roa (raw, json)
Hash identifier: N9iC6lC3d6FOKGrIzlsmlrGBLgmx5HaowNyEaIsiQU8=
Subject key identifier: DC:69:9A:78:2C:06:11:BB:8A:AD:7B:FB:99:F7:DE:47:9F:2C:53:D0
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 6FB5F872
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3GmaeCwGEbuKrXv7mffeR58sU9A.roa
Signing time: Fri 04 Mar 2022 22:09:35 +0000
ROA not before: Fri 04 Mar 2022 22:09:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1874196594 (0x6fb5f872)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 4 22:09:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dc699a782c0611bb8aad7bfb99f7de479f2c53d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:d5:bb:30:b7:37:26:2d:7e:0c:bf:19:79:f0:
ff:5a:90:ab:4d:48:e0:d0:42:0c:ca:0d:f7:82:fb:
53:bc:7b:48:65:31:bc:a8:ad:9f:45:d5:83:09:c7:
bc:ca:e1:0d:05:5e:56:b2:21:d4:6a:92:d4:31:af:
d3:d7:c5:62:f4:36:a2:1d:5d:f5:cd:5c:26:78:56:
81:a2:4a:df:d4:10:ee:8c:0d:b9:d7:c3:1e:02:9b:
86:8a:6b:f2:9c:90:72:7c:68:01:24:5f:f4:86:6a:
00:a6:f4:c2:74:9d:04:d7:b1:fe:7d:2a:91:94:aa:
8d:fb:a1:47:be:c7:b9:f2:18:c7:18:72:04:ea:64:
49:aa:1f:28:27:e2:7d:48:c9:53:07:0d:be:16:e0:
8e:2b:11:8e:38:dc:67:9d:61:6e:9c:bb:bc:64:5d:
51:5c:c6:23:56:24:8d:03:28:b4:cc:59:3a:b4:10:
93:02:a7:40:30:10:c3:33:1d:b8:e8:1e:e5:77:1d:
32:23:2f:f4:09:b0:a2:11:22:85:98:8e:3b:9c:0f:
95:f6:db:82:f6:18:7f:14:31:57:1a:aa:55:39:4f:
22:97:1b:25:40:38:4d:7e:d0:b3:91:ef:74:79:ea:
87:63:ce:4a:19:58:ba:d5:89:80:54:c3:10:b1:d6:
23:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:69:9A:78:2C:06:11:BB:8A:AD:7B:FB:99:F7:DE:47:9F:2C:53:D0
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3GmaeCwGEbuKrXv7mffeR58sU9A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
18:05:0e:e6:fb:07:6a:94:0e:c3:b4:4f:43:31:7e:55:93:b2:
72:e8:3f:f5:05:cc:7b:55:52:87:fd:e5:ee:d3:23:09:e4:56:
1a:6c:23:25:0b:76:ca:ac:5d:f3:74:cc:ce:57:7a:4c:10:7e:
22:c8:8e:68:31:59:27:af:66:77:75:f7:ff:d3:6c:4a:60:9f:
0a:a0:b9:15:91:ab:f9:7f:a5:f7:83:9a:0c:86:fb:c8:5c:a7:
b9:83:3b:29:86:0a:3c:53:26:13:a9:4f:79:1c:ba:c1:83:55:
74:85:c4:44:78:27:d8:51:9b:66:ef:c7:20:ad:d0:f6:7a:35:
7f:9e:be:27:a7:49:3c:23:41:80:c7:e8:e0:15:a6:38:ca:53:
e1:61:19:f3:90:69:ef:ca:e0:3d:1c:a2:6e:db:db:11:a8:90:
a8:40:03:22:74:c1:7a:d5:ce:7a:c0:50:c4:f6:66:1d:f9:dd:
01:a3:ba:67:8b:6e:ee:43:28:f7:e3:56:a8:13:2f:1b:c8:84:
c3:99:6d:e8:42:f7:59:e2:ee:c2:d5:d2:4f:a5:74:34:5e:d1:
37:0d:e3:b0:d6:6c:25:c1:d8:ef:ef:d1:1b:77:4f:91:15:43:
c5:60:c9:92:a8:0f:84:51:49:cf:ff:2c:d4:a6:ef:34:92:48:
96:1a:92:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:28:46 2025 by rpki-client