Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3LQD_CWBIF-8Qs2Q-cIcIeXiVnU.roa
File: 3LQD_CWBIF-8Qs2Q-cIcIeXiVnU.roa (raw, json)
Hash identifier: NhRAoiF3HwBkHXUY/BN4d6RA/WJ+Ki4GTvYtU1r7224=
Subject key identifier: DC:B4:03:FC:25:81:20:5F:BC:42:CD:90:F9:C2:1C:21:E5:E2:56:75
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189C7FC777CC1DFFB2E3683A500313CC4B4
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3LQD_CWBIF-8Qs2Q-cIcIeXiVnU.roa
Signing time: Sat 05 Aug 2023 23:15:58 +0000
ROA not before: Sat 05 Aug 2023 23:15:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:c7:fc:77:7c:c1:df:fb:2e:36:83:a5:00:31:3c:c4:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 5 23:15:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dcb403fc2581205fbc42cd90f9c21c21e5e25675
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:70:43:52:36:75:49:0b:d7:00:44:52:c4:d1:
7e:45:bd:00:8a:6e:45:70:58:7f:a1:61:63:22:65:
37:6e:44:25:da:9b:c6:4a:55:46:de:2a:27:61:7e:
98:35:ba:ff:87:6d:1f:a9:1f:d9:fe:3f:58:cd:ec:
60:0e:42:c7:77:74:1e:d1:37:e8:43:8d:12:c9:c0:
ba:f7:8b:1e:10:59:30:a6:ff:a7:95:2a:ee:c6:12:
87:94:b3:a7:50:2f:d4:22:92:ba:26:e4:d0:47:09:
71:8a:4a:55:7c:44:5e:88:35:5c:92:c0:55:20:d0:
8d:05:01:b0:78:e3:98:a8:57:20:1f:f4:4c:89:73:
b6:ed:de:7c:c5:45:d9:bf:e8:cb:65:90:5f:90:04:
fb:c1:26:90:05:75:53:41:a7:41:6e:9e:c4:6e:5d:
b2:e6:3b:7b:b8:95:d4:cd:50:59:16:53:05:2b:ac:
86:27:ed:e6:58:c5:08:fe:d8:b4:f1:a5:ed:0b:9e:
b2:e9:d1:51:c5:fa:17:f0:87:9e:40:82:6e:82:5a:
77:cd:af:a2:ff:35:a2:fa:a3:10:33:ae:03:44:17:
7e:9d:23:eb:71:f7:25:48:1f:de:6f:f7:67:83:a2:
2e:da:65:57:54:c8:9a:a2:96:20:93:23:ca:8d:6d:
45:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:B4:03:FC:25:81:20:5F:BC:42:CD:90:F9:C2:1C:21:E5:E2:56:75
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3LQD_CWBIF-8Qs2Q-cIcIeXiVnU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
28:bd:69:5a:45:19:9a:bc:9d:01:8c:1f:5f:7b:15:9f:04:ba:
15:28:06:8b:d0:db:f9:d2:3c:12:9d:66:53:3a:27:ec:76:a2:
aa:60:71:8f:eb:4d:dc:30:52:b4:0e:f6:f3:00:c1:0d:2a:c4:
a1:99:46:f4:8c:9e:e6:79:9c:06:15:19:68:14:64:bf:34:cd:
c0:94:8c:9b:2b:f2:a4:d9:1f:b8:2d:16:c4:71:35:24:4a:e4:
5d:38:7f:91:2e:88:f0:99:4b:19:9e:e7:cf:14:aa:4c:cb:6d:
6f:eb:80:00:12:68:76:74:ff:78:28:47:0d:9d:07:ec:d3:88:
94:52:7a:39:60:c2:6b:e1:91:4e:5c:76:77:9b:ac:88:40:ff:
e1:20:4c:b6:5a:a5:63:37:0c:bf:b6:bd:cc:dc:5a:39:f2:e2:
49:28:40:b7:18:fa:3e:e8:04:18:d9:65:93:2e:94:3a:4d:22:
85:1d:14:14:02:de:e2:0d:de:9d:60:07:09:65:41:03:5c:85:
ba:d8:30:25:93:8f:51:fd:e0:3a:27:a1:cc:fc:43:35:a5:f2:
c7:84:74:45:f1:57:11:72:07:56:a8:bd:2b:14:3d:87:e7:76:
36:ce:b5:47:5e:dc:78:1d:9b:eb:b7:12:5c:a0:f0:ca:fa:c1:
8a:7d:31:bb
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYnH/Hd8wd/7LjaDpQAxPMS0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwODA1MjMxNTU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkY2I0MDNmYzI1ODEyMDVmYmM0MmNkOTBmOWMyMWMyMWU1ZTI1Njc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnHBDUjZ1SQvXAERSxNF+Rb0Aim5F
cFh/oWFjImU3bkQl2pvGSlVG3ionYX6YNbr/h20fqR/Z/j9YzexgDkLHd3Qe0Tfo
Q40SycC694seEFkwpv+nlSruxhKHlLOnUC/UIpK6JuTQRwlxikpVfEReiDVcksBV
INCNBQGweOOYqFcgH/RMiXO27d58xUXZv+jLZZBfkAT7wSaQBXVTQadBbp7Ebl2y
5jt7uJXUzVBZFlMFK6yGJ+3mWMUI/ti08aXtC56y6dFRxfoX8IeeQIJuglp3za+i
/zWi+qMQM64DRBd+nSPrcfclSB/eb/dng6Iu2mVXVMiaopYgkyPKjW1FqQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFNy0A/wlgSBfvELNkPnCHCHl4lZ1MB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvM0xRRF9DV0JJRi04UXMyUS1jSWNJZVhpVm5VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBACi9aVpFGZq8nQGMH197
FZ8EuhUoBovQ2/nSPBKdZlM6J+x2oqpgcY/rTdwwUrQO9vMAwQ0qxKGZRvSMnuZ5
nAYVGWgUZL80zcCUjJsr8qTZH7gtFsRxNSRK5F04f5EuiPCZSxme588UqkzLbW/r
gAASaHZ0/3goRw2dB+zTiJRSejlgwmvhkU5cdnebrIhA/+EgTLZapWM3DL+2vczc
Wjny4kkoQLcY+j7oBBjZZZMulDpNIoUdFBQC3uIN3p1gBwllQQNchbrYMCWTj1H9
4Donocz8QzWl8seEdEXxVxFyB1aovSsUPYfndjbOtUde3Hgdm+u3Elyg8Mr6wYp9
Mbs=
-----END CERTIFICATE-----
Generated at Wed Apr 30 19:49:43 2025 by rpki-client