Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3IXKoICTs3AYVo05V1h9yfNCIQk.roa
File: 3IXKoICTs3AYVo05V1h9yfNCIQk.roa (raw, json)
Hash identifier: FihCxfjhBd4lvoxLRZxwdZGH+7HfvLtXevkaHu8r1v4=
Subject key identifier: DC:85:CA:A0:80:93:B3:70:18:56:8D:39:57:58:7D:C9:F3:42:21:09
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 88DD6F23
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3IXKoICTs3AYVo05V1h9yfNCIQk.roa
Signing time: Wed 01 Jun 2022 01:10:13 +0000
ROA not before: Wed 01 Jun 2022 01:10:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:181:22f:7a99/128 maxlen: 128
2001:67c:64:ffff:0:180:ff9c:1e7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2296213283 (0x88dd6f23)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 1 01:10:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dc85caa08093b37018568d3957587dc9f3422109
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:7e:14:f1:d7:6e:fa:bc:1e:ca:8c:97:28:e9:
c6:dd:45:53:18:79:b6:19:6f:9d:77:92:97:44:1d:
48:4e:95:9d:69:47:e6:b6:11:00:95:9b:4f:eb:2b:
d0:78:4a:18:23:e4:e3:e8:77:89:60:f8:ce:58:c3:
28:36:ac:0a:95:b5:cf:9a:d5:1a:97:6d:bd:d7:31:
2f:04:29:7b:88:91:b6:22:14:a0:9b:40:47:57:55:
08:35:6a:d3:e4:55:48:02:47:18:ca:a6:0d:94:aa:
f8:07:4c:b1:70:a5:a9:07:72:88:47:4f:93:b0:bd:
d7:c2:83:34:52:99:45:b9:0d:d4:2f:61:9b:fd:67:
b6:63:0d:04:c2:d0:54:62:8c:19:43:81:41:c8:f5:
4b:d7:1a:27:2a:bd:b1:16:38:70:e2:2a:91:dd:8d:
af:4f:91:8a:59:88:36:c4:8e:78:22:c7:c2:ac:a3:
48:c4:f6:30:97:fc:fe:9a:20:fc:d0:07:a8:d7:e7:
ee:e1:54:96:07:5f:d3:9d:2d:db:8a:60:8e:70:48:
7f:2f:af:c2:58:37:b6:99:31:33:c8:76:e3:61:f6:
5e:b2:db:4e:10:7e:a7:fd:42:82:42:10:80:58:55:
31:c4:d8:00:1f:74:67:23:ed:f7:54:35:97:87:10:
00:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:85:CA:A0:80:93:B3:70:18:56:8D:39:57:58:7D:C9:F3:42:21:09
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3IXKoICTs3AYVo05V1h9yfNCIQk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
ae:33:0f:3b:81:5e:e0:e3:a3:f8:41:78:0c:6a:d3:2a:08:79:
ea:76:0a:52:77:a4:0f:31:ac:74:e8:6a:83:b9:56:6a:52:00:
c5:90:c5:dd:d0:b5:17:ee:8c:e1:22:20:b6:92:65:1d:90:57:
e8:ab:99:55:a2:a0:4c:08:d6:a3:24:68:3c:96:18:4f:11:76:
4c:13:f1:d2:57:dd:92:cd:85:ad:d6:af:a1:30:29:8e:27:ad:
39:10:a2:22:41:66:c9:15:f8:59:d4:7f:e5:e7:91:11:6c:64:
0e:08:ad:33:e2:2b:1d:d8:f5:f0:b8:93:17:21:72:2e:28:ca:
f2:ee:19:66:12:ae:12:16:31:1c:39:5e:58:0d:52:66:de:21:
95:36:58:c4:5f:56:9c:e2:70:ca:17:61:2f:83:31:04:87:86:
7f:f1:1a:70:cb:c2:fb:a2:f7:15:89:b8:e3:d2:17:94:89:c1:
33:34:a0:cc:28:63:19:e5:58:74:bf:40:43:1c:d6:db:af:cb:
17:48:ae:cc:60:76:88:9d:6e:85:d8:b5:34:28:2b:15:76:be:
17:00:a0:23:9d:bb:a5:fc:56:c4:48:6e:f3:f3:8d:eb:10:7f:
3b:79:da:40:14:c7:52:a7:0b:a7:7b:05:ce:d4:0f:e4:ed:6e:
56:23:f2:04
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgIFAIjdbyMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMo
NzIwNDdiZTE1YjI3NTkwMmRjZjYxN2RjM2QwZTE2ZGMxZjMwODAyMjAeFw0yMjA2
MDEwMTEwMTNaFw0yMzA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKGRjODVjYWEwODA5
M2IzNzAxODU2OGQzOTU3NTg3ZGM5ZjM0MjIxMDkwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCafhTx1276vB7KjJco6cbdRVMYebYZb513kpdEHUhOlZ1p
R+a2EQCVm0/rK9B4Shgj5OPod4lg+M5Ywyg2rAqVtc+a1RqXbb3XMS8EKXuIkbYi
FKCbQEdXVQg1atPkVUgCRxjKpg2UqvgHTLFwpakHcohHT5OwvdfCgzRSmUW5DdQv
YZv9Z7ZjDQTC0FRijBlDgUHI9UvXGicqvbEWOHDiKpHdja9PkYpZiDbEjngix8Ks
o0jE9jCX/P6aIPzQB6jX5+7hVJYHX9OdLduKYI5wSH8vr8JYN7aZMTPIduNh9l6y
204Qfqf9QoJCEIBYVTHE2AAfdGcj7fdUNZeHEAClAgMBAAGjggIaMIICFjAdBgNV
HQ4EFgQU3IXKoICTs3AYVo05V1h9yfNCIQkwHwYDVR0jBBgwFoAUcgR74VsnWQLc
9hfcPQ4W3B8wgCIwDgYDVR0PAQH/BAQDAgeAMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVM
VC9jZ1I3NFZzbldRTGM5aGZjUFE0VzNCOHdnQ0kuY2VyMIGNBggrBgEFBQcBCwSB
gDB+MHwGCCsGAQUFBzALhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9ERUZBVUxULzVlLzc5ODQ0Ny0yMWY0LTQ1YWItOTlkYy0xYWJlM2FjMTBhYTYv
MS8zSVhLb0lDVHMzQVlWbzA1VjFoOXlmTkNJUWsucm9hMIGBBgNVHR8EejB4MHag
dKByhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVl
Lzc5ODQ0Ny0yMWY0LTQ1YWItOTlkYy0xYWJlM2FjMTBhYTYvMS9jZ1I3NFZzbldR
TGM5aGZjUFE0VzNCOHdnQ0kuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
MAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYDBAPBABgwDwQCAAIwCQMHACABBnwA
ZDANBgkqhkiG9w0BAQsFAAOCAQEArjMPO4Fe4OOj+EF4DGrTKgh56nYKUnekDzGs
dOhqg7lWalIAxZDF3dC1F+6M4SIgtpJlHZBX6KuZVaKgTAjWoyRoPJYYTxF2TBPx
0lfdks2FrdavoTApjietORCiIkFmyRX4WdR/5eeREWxkDgitM+IrHdj18LiTFyFy
LijK8u4ZZhKuEhYxHDleWA1SZt4hlTZYxF9WnOJwyhdhL4MxBIeGf/EacMvC+6L3
FYm449IXlInBMzSgzChjGeVYdL9AQxzW26/LF0iuzGB2iJ1uhdi1NCgrFXa+FwCg
I527pfxWxEhu8/ON6xB/O3naQBTHUqcLp3sFztQP5O1uViPyBA==
-----END CERTIFICATE-----
Generated at Thu May 1 11:10:26 2025 by rpki-client