Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3HosVfZlapdMSNXueufFcG3Z_Rc.roa
File: 3HosVfZlapdMSNXueufFcG3Z_Rc.roa (raw, json)
Hash identifier: 7bpXQp/1TjxcCYKn2i1vPhLkiGeR5W/LAfTMPUyTnO8=
Subject key identifier: DC:7A:2C:55:F6:65:6A:97:4C:48:D5:EE:7A:E7:C5:70:6D:D9:FD:17
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018948B3D301DE5E69B5E01E6C32064CCEBC
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3HosVfZlapdMSNXueufFcG3Z_Rc.roa
Signing time: Wed 12 Jul 2023 06:04:51 +0000
ROA not before: Wed 12 Jul 2023 06:04:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:189:48b3:7e0d/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:48:b3:d3:01:de:5e:69:b5:e0:1e:6c:32:06:4c:ce:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 12 06:04:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dc7a2c55f6656a974c48d5ee7ae7c5706dd9fd17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:f7:64:7a:99:ce:b4:41:ca:d2:ce:51:90:f4:
4e:10:32:ef:f6:1a:95:fd:16:7c:74:fc:e7:e4:37:
4b:f5:f8:24:2a:49:1c:ea:b5:ad:76:9a:7a:5a:2b:
ce:1e:47:23:b5:28:cc:09:a3:1f:98:45:55:dd:b9:
98:c5:68:8d:80:4c:ce:12:02:56:c6:a4:f0:4a:80:
74:eb:98:7b:4f:7f:5d:97:11:ab:ca:2c:92:b2:cf:
c0:23:09:a0:92:49:99:1a:6b:6b:07:9f:d0:cb:33:
63:c7:d7:86:5e:f9:4c:16:dc:61:08:79:ef:5e:86:
89:44:af:2a:e9:13:bd:30:f9:00:ce:aa:e5:b2:e1:
8a:52:d6:33:a9:53:a2:e8:43:77:33:e1:3e:4a:bd:
92:38:26:09:5f:f9:eb:1e:8b:4a:81:56:42:7b:08:
6b:d3:a4:64:3b:18:0c:db:f5:dd:97:62:4b:20:f4:
f0:16:af:74:17:f5:06:6c:9c:64:6a:a6:95:31:e1:
95:5e:f7:86:ca:26:e3:87:55:73:e0:b4:b2:57:b2:
3b:38:d1:b7:f1:34:60:13:f8:e8:70:6c:25:27:a0:
61:56:94:bd:fc:a9:cb:60:87:bf:48:23:1a:51:79:
6c:94:1b:50:7f:6c:60:e8:84:5a:47:97:2e:35:8f:
a2:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:7A:2C:55:F6:65:6A:97:4C:48:D5:EE:7A:E7:C5:70:6D:D9:FD:17
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3HosVfZlapdMSNXueufFcG3Z_Rc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
84:87:6b:65:da:1e:ed:f8:bd:d9:b7:37:5b:f6:e5:1d:27:f8:
3f:98:a1:8f:b3:44:a7:6f:52:48:1f:7d:9e:ea:aa:e7:4d:99:
eb:d2:4f:8e:8b:31:34:25:14:f2:44:bb:3f:2d:fb:2c:7b:b3:
27:e9:09:0f:2d:89:10:c2:5b:c4:03:78:01:ac:a8:c1:0f:bb:
3a:41:d5:4e:f3:8d:6a:c9:0b:91:bc:26:fe:18:96:1a:44:29:
c7:67:30:4e:34:85:9a:d0:dc:1a:81:3f:c5:23:8a:ad:d6:ce:
6d:94:6f:20:6a:b8:f3:6e:76:86:1f:e2:b9:a3:ca:4c:2f:57:
c1:75:f2:e8:2d:ec:97:41:5b:2c:d9:03:53:b0:9c:d4:d5:87:
5f:00:36:6f:00:06:ab:7d:4c:08:db:53:41:e2:3e:3b:61:6d:
c4:3c:b7:c8:ce:16:52:69:45:b1:26:26:30:c2:62:bf:c4:6a:
54:b3:26:75:46:a0:49:c1:60:0a:b2:43:b7:90:6d:67:41:a7:
d1:77:8a:8b:4f:86:c8:5f:aa:1d:e0:3e:de:cf:ab:a7:e4:93:
51:91:2b:b4:de:67:af:9a:12:53:6e:e1:58:4f:bf:90:07:9f:
5e:9e:e2:7f:92:78:18:ff:8f:27:57:a1:82:b8:fb:a7:61:93:
1e:be:70:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:35:42 2025 by rpki-client