Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3H9XKVdgod37Dryhltj_rhI7TGY.roa
File: 3H9XKVdgod37Dryhltj_rhI7TGY.roa (raw, json)
Hash identifier: tjgujftz0u6QxN5dctS49lRH1J3vzzrlllto5Iuxg5Y=
Subject key identifier: DC:7F:57:29:57:60:A1:DD:FB:0E:BC:A1:96:D8:FF:AE:12:3B:4C:66
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 717C8C86
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3H9XKVdgod37Dryhltj_rhI7TGY.roa
Signing time: Fri 11 Mar 2022 02:09:50 +0000
ROA not before: Fri 11 Mar 2022 02:09:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1903987846 (0x717c8c86)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 11 02:09:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dc7f57295760a1ddfb0ebca196d8ffae123b4c66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:7e:d1:cb:7c:89:d8:e7:af:55:a9:24:84:e9:
b3:bc:da:71:b3:d9:97:fe:30:af:06:47:fd:09:af:
90:f2:a5:f8:5c:ae:ab:4e:a9:4a:ab:06:19:41:f0:
0b:6c:25:fe:4b:e2:93:00:ff:50:2f:aa:8c:31:2c:
25:19:83:a3:c5:28:5a:67:4a:1d:01:87:aa:1b:a0:
63:b8:b5:50:0a:8a:72:eb:04:a7:65:a7:16:23:9f:
53:b5:f9:a8:d5:29:36:c9:52:66:f2:e3:0b:57:d5:
df:ee:2e:07:34:72:ec:59:6a:f7:fa:e2:d8:33:1d:
d9:06:39:b8:8a:37:bd:be:76:5a:cc:14:b7:c0:e7:
9a:94:0d:3d:71:41:9b:31:f2:9d:aa:8a:ef:b6:f0:
48:33:b9:46:4d:d3:96:0d:e8:12:8a:7d:38:ab:f5:
29:ce:8a:c8:b9:7d:27:e7:f3:1f:27:e1:5e:00:ef:
71:2f:3b:24:ad:f5:de:ca:6a:27:23:6d:dd:54:4d:
07:41:9a:ee:81:c5:9a:ea:2a:9f:c6:6c:48:eb:4c:
41:3a:f4:2a:40:8e:0b:b7:c1:bd:3a:f8:96:c0:6f:
ac:7d:f7:04:1c:ea:84:8f:23:44:2e:2e:ae:e8:c1:
af:f3:38:34:e7:89:7b:28:ef:33:8c:cc:9a:d7:62:
07:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:7F:57:29:57:60:A1:DD:FB:0E:BC:A1:96:D8:FF:AE:12:3B:4C:66
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3H9XKVdgod37Dryhltj_rhI7TGY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
69:5a:2f:35:f4:b6:77:a7:8a:31:f8:c2:55:14:ab:df:3f:59:
12:1c:ea:ca:74:b3:95:eb:60:62:26:e4:b2:29:f4:83:19:63:
21:88:0f:16:e8:c5:37:3f:14:b6:8d:c8:a5:25:6b:2f:d7:ba:
2b:63:2c:b2:f7:5a:2b:91:69:b3:36:15:38:99:30:4a:39:cf:
02:3a:b8:82:a1:d3:0b:51:df:81:f2:66:80:48:fa:f1:1b:69:
64:3f:e9:77:69:6b:5a:e4:ba:f8:f4:cf:62:fb:96:27:c1:e4:
2e:aa:38:be:29:cf:ae:e1:81:01:a3:cd:5b:91:3c:68:fd:30:
66:be:b6:0d:d8:69:2c:eb:9d:73:c2:0d:90:b2:d0:7d:90:1e:
54:41:35:22:84:6e:66:c6:ce:24:d2:7c:10:ae:df:23:22:b4:
eb:3a:eb:8b:ee:2f:f8:c2:03:89:98:bd:f6:0e:9f:a7:80:7c:
be:45:01:69:d8:f0:9e:a0:05:e7:95:a5:9f:60:21:0a:3a:20:
c7:e6:94:b1:51:27:33:c8:71:a4:aa:31:04:2a:50:26:28:70:
c5:3a:92:c6:b1:10:d4:9b:e8:2a:d5:e4:20:19:e8:b4:00:79:
d9:7b:04:1b:10:80:6a:15:84:c1:eb:69:0e:9a:77:d9:2d:e1:
82:c0:32:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 06:09:51 2025 by rpki-client