Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3LZQ8fiNXuvWXxg6jHDRfD0Gb6Q.roa
File: 3LZQ8fiNXuvWXxg6jHDRfD0Gb6Q.roa (raw, json)
Hash identifier: 2BdolH25g30btyFGbqMU6C0yn2ECU1KGa0F49GGg60c=
Subject key identifier: DC:B6:50:F1:F8:8D:5E:EB:D6:5F:18:3A:8C:70:D1:7C:3D:06:6F:A4
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 66562A42
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3LZQ8fiNXuvWXxg6jHDRfD0Gb6Q.roa
Signing time: Sun 30 Jan 2022 11:09:42 +0000
ROA not before: Sun 30 Jan 2022 11:09:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17e:a0dd:2f5b/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1716922946 (0x66562a42)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 30 11:09:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dcb650f1f88d5eebd65f183a8c70d17c3d066fa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b2:9f:06:88:57:d3:2f:bb:28:17:b6:2a:de:
e5:5c:49:2b:7f:4c:f9:25:68:58:08:08:da:05:d9:
19:d2:51:40:64:d4:f7:31:74:0d:c0:c6:c7:df:dc:
76:29:c8:34:94:73:ee:63:61:0a:31:dc:6c:6a:0a:
dd:a3:c3:5c:81:46:40:8f:0c:87:83:14:8f:99:30:
ba:93:4e:e0:d8:17:95:e4:72:1b:ed:34:7e:b3:07:
50:31:9a:96:b3:59:78:72:46:00:07:a9:f1:fa:fb:
0b:ab:95:a7:15:5d:93:e6:ea:7f:93:03:eb:6c:d5:
b6:64:fa:9e:fa:c2:46:92:c8:05:0a:15:75:14:eb:
f6:5a:fe:9e:bb:2a:6e:19:87:dd:3e:a2:63:ab:e3:
01:72:69:2a:82:a6:0b:93:3e:0b:72:2a:fb:f5:14:
88:74:ce:fd:1a:b9:63:35:bf:e0:6c:d8:ed:54:9c:
15:12:a7:22:ab:f3:4a:aa:25:62:44:db:15:36:39:
42:bd:77:39:44:02:a9:08:a2:52:88:d4:bb:f3:20:
85:b7:16:8c:b6:a2:7d:09:35:b8:51:3c:f0:ca:4f:
f9:7b:39:98:0c:0f:dd:bc:d5:48:25:a1:59:54:2c:
bc:4b:4d:e6:82:67:df:b1:24:ed:3e:39:b3:2e:2b:
35:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:B6:50:F1:F8:8D:5E:EB:D6:5F:18:3A:8C:70:D1:7C:3D:06:6F:A4
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3LZQ8fiNXuvWXxg6jHDRfD0Gb6Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
03:f1:d8:1b:71:d5:78:4c:a0:5e:26:51:b0:e9:f3:51:42:70:
57:92:81:8b:01:5c:73:27:bf:f1:57:22:fd:9c:b5:b5:a2:43:
b9:41:82:fb:79:37:9e:75:63:1c:45:71:4e:ed:1d:7c:2a:e3:
38:73:15:d5:0f:06:33:36:c2:e9:e2:df:a1:f2:5a:94:95:67:
fa:0b:84:c6:10:1f:75:7f:55:cb:ea:a5:43:8c:09:55:1a:d6:
89:85:cc:33:3f:39:52:08:4d:59:19:cf:24:64:a4:82:0c:6f:
2b:16:63:19:d0:a8:86:40:f2:9b:aa:95:b8:5e:08:c1:23:86:
95:e8:27:f0:c8:71:a0:b5:38:8d:67:77:b1:24:d9:b6:26:d3:
d7:4e:e6:d2:60:aa:a8:ca:5d:79:5b:35:56:d4:57:57:79:86:
41:7a:7e:4e:62:00:e2:39:9c:f6:31:36:ff:41:a1:39:85:6b:
55:73:49:03:29:4f:e3:29:2e:3b:4b:f0:ca:1e:ed:fd:a5:e2:
c5:83:c1:0a:4b:c0:fe:82:5b:b6:9d:cb:07:40:6a:31:4c:d2:
63:8d:f3:f9:92:b0:c5:26:28:5f:74:57:e7:3b:f2:76:e4:3c:
a9:4d:0c:e3:e6:cb:8c:ad:b2:f8:6f:a8:43:a6:df:53:76:0b:
88:e7:06:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 19:49:06 2025 by rpki-client