Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3IC33BzovvR6AC0IItGfoiFLed0.roa
File: 3IC33BzovvR6AC0IItGfoiFLed0.roa (raw, json)
Hash identifier: OGIosvixqzisynkvYXs7w2o9pOw+Mys7BE4JCBtOBkA=
Subject key identifier: DC:80:B7:DC:1C:E8:BE:F4:7A:00:2D:08:22:D1:9F:A2:21:4B:79:DD
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01856026035F952FA499FA61DED119A05230
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3IC33BzovvR6AC0IItGfoiFLed0.roa
Signing time: Thu 29 Dec 2022 23:09:41 +0000
ROA not before: Thu 29 Dec 2022 23:09:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:60:26:03:5f:95:2f:a4:99:fa:61:de:d1:19:a0:52:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 29 23:09:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dc80b7dc1ce8bef47a002d0822d19fa2214b79dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:3a:60:21:45:c9:eb:16:2e:76:8e:0e:94:79:
9b:76:fd:bb:b2:0b:46:cf:90:30:07:06:77:a3:3e:
68:f5:c3:94:e9:38:85:47:84:cc:4b:5b:8c:a6:22:
dc:c2:e2:c7:42:de:74:96:91:02:fd:87:e2:96:55:
06:de:1f:6b:ba:37:e9:d4:ad:ff:32:c1:b6:77:eb:
00:ba:47:0a:53:fb:c6:4d:ca:20:e1:02:10:e3:0c:
da:10:52:1e:28:9d:46:c0:a0:79:3b:5a:fd:82:e2:
f3:f7:12:4e:50:19:74:a0:d2:39:3d:1f:75:7d:6d:
a1:50:bc:62:0c:a5:98:b6:82:11:8b:2f:9a:39:22:
78:38:36:04:e9:dc:5d:cb:c8:ed:63:ac:fa:18:24:
88:eb:82:b1:61:19:5d:e3:85:8a:8b:e0:d4:e0:a7:
f8:0a:d8:d1:01:9b:c4:e9:a2:09:64:6a:ee:33:3a:
b1:4f:3f:34:fb:ad:b2:00:db:ad:7e:69:f5:3d:40:
6f:f4:25:1b:4c:ac:d5:37:f3:62:d0:96:d6:a2:ea:
5e:6c:98:ff:6d:eb:71:f3:02:70:20:eb:84:2a:87:
fa:f2:36:5b:a9:41:fd:93:4f:52:f4:d3:b7:72:bc:
a2:f1:92:b7:21:90:b0:a9:da:5b:4c:54:af:c8:b3:
05:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:80:B7:DC:1C:E8:BE:F4:7A:00:2D:08:22:D1:9F:A2:21:4B:79:DD
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3IC33BzovvR6AC0IItGfoiFLed0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8c:f5:74:5b:9a:4b:ef:04:bd:76:6f:3e:b9:39:fa:58:06:dd:
80:8e:8c:8c:db:a8:04:7c:d7:cd:0f:de:af:c2:9b:66:60:60:
fb:e3:c6:ec:3d:b7:fa:0c:9f:6a:d0:cf:71:81:6e:62:e9:06:
b7:28:5a:37:cb:3e:c2:46:f1:2b:73:4b:2e:63:c3:01:dd:86:
3e:cc:80:6a:e5:92:01:75:67:58:ad:5e:94:b5:aa:27:96:07:
a1:be:db:87:76:c1:b8:a0:be:3e:01:c3:12:c2:ad:fe:94:7f:
ba:3b:00:38:3f:b4:79:87:dd:72:c7:f9:69:05:1c:29:99:59:
4e:1a:4a:61:88:f5:99:70:e4:d5:62:00:5e:85:35:c1:10:ed:
75:0e:74:e9:06:0d:16:84:9f:11:e7:c9:90:8c:0d:c0:fa:18:
b3:d2:dc:fc:b1:8b:dd:69:91:b1:e3:2b:d7:b9:70:d4:dd:cf:
37:41:95:73:b9:63:1f:d3:13:82:32:6c:88:40:1e:23:ab:7f:
4e:8e:08:a0:fc:f2:6a:bf:f9:37:3e:79:ec:08:f2:ac:9b:da:
14:47:38:22:21:4e:e5:2d:fc:34:5b:d6:05:e5:48:f5:2c:04:
47:58:db:14:2f:8f:06:7e:c4:24:a5:95:14:6c:72:f7:bc:6a:
2d:df:fc:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 01:28:09 2025 by rpki-client