Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3LjQo-o33SXozR8ZnDSG2D5uIjE.roa
File: 3LjQo-o33SXozR8ZnDSG2D5uIjE.roa (raw, json)
Hash identifier: dVXzVSeTtA0FUoJXysTpMTKl8c+uV+OcUdCz/nEiBK0=
Subject key identifier: DC:B8:D0:A3:EA:37:DD:25:E8:CD:1F:19:9C:34:86:D8:3E:6E:22:31
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186C2DC277BE26E6B3F3282B73699A85B8F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3LjQo-o33SXozR8ZnDSG2D5uIjE.roa
Signing time: Wed 08 Mar 2023 20:14:13 +0000
ROA not before: Wed 08 Mar 2023 20:14:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:c2:dc:27:7b:e2:6e:6b:3f:32:82:b7:36:99:a8:5b:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 8 20:14:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dcb8d0a3ea37dd25e8cd1f199c3486d83e6e2231
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:a1:a4:96:70:c1:68:71:6e:c2:a0:1a:d4:99:
5d:a3:5e:8c:63:77:18:3b:30:a1:be:be:a9:48:4a:
74:1f:75:7d:9a:9c:7f:76:b6:09:8a:6c:de:05:d5:
aa:32:60:aa:d2:a6:56:72:a6:b2:9e:8d:ba:9f:1f:
9b:2c:3f:a3:b9:2f:75:a3:83:1c:90:cc:ec:cc:86:
d9:78:89:54:bf:a1:65:77:7e:e8:28:eb:7b:36:b4:
35:97:58:3d:8a:ef:ac:83:eb:31:dc:64:c0:d3:10:
46:8e:69:9f:9f:25:be:d8:14:14:67:44:1b:58:96:
50:e0:0d:84:6e:e9:5f:ee:78:42:87:0a:09:df:dc:
c1:46:45:4c:d2:af:12:ce:ca:6f:d8:e9:7c:7b:39:
7d:b1:40:9c:29:e6:07:dc:aa:e3:6b:82:10:7e:bf:
a7:e2:de:9a:5b:59:62:b3:da:c7:12:11:bd:89:d2:
33:75:f4:59:bb:0c:a5:6f:ea:e2:19:c1:ed:9b:f1:
9f:3f:1b:02:8c:c5:9e:1e:29:97:2c:05:a0:3b:07:
d3:8d:59:c0:06:83:4c:8a:dd:cb:7e:6d:3a:36:90:
15:c7:9f:e0:0d:61:76:fa:1f:16:d9:15:49:c4:42:
63:a9:8a:6b:bb:90:5c:03:8c:0a:3d:b2:df:d9:e4:
81:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:B8:D0:A3:EA:37:DD:25:E8:CD:1F:19:9C:34:86:D8:3E:6E:22:31
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3LjQo-o33SXozR8ZnDSG2D5uIjE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2b:bf:8f:8f:52:3b:af:92:cf:50:8f:05:89:8c:fb:94:14:a2:
b5:1b:04:ac:85:35:5b:97:9b:19:59:b1:ff:2c:1e:ed:42:05:
42:ea:ed:6f:c0:64:6b:e2:88:8b:59:66:1a:1b:59:42:f7:a1:
c5:27:c0:b2:9a:e1:b2:53:a5:cd:77:da:6d:ae:78:30:02:57:
cb:e1:e4:8c:5b:30:45:d5:82:19:ad:4d:d2:fd:75:d6:9e:31:
23:62:dc:76:1f:80:51:3c:a0:93:96:76:de:99:7c:73:1e:ad:
48:97:6c:5b:6a:a4:fd:06:72:3f:de:c7:61:27:94:d8:01:a7:
e9:f9:f1:85:bc:21:41:64:06:62:05:80:14:bd:12:4b:3c:73:
81:ac:80:23:47:c3:13:7d:44:e6:eb:57:d7:c3:3c:db:15:eb:
ef:4a:af:9b:c3:70:4f:ee:1b:2e:82:92:4c:48:0a:9c:ca:93:
a9:4f:2a:23:e4:be:8f:61:01:35:b2:9f:87:72:82:0a:b3:a1:
59:05:ad:d9:88:75:42:b0:40:7d:e4:bd:f0:58:19:94:02:ae:
96:8b:a7:ef:be:0b:fb:d4:37:f4:b8:03:be:18:ab:92:99:e7:
a4:ce:b2:2a:a7:8c:39:b4:1b:25:e5:f9:6a:db:51:e9:f9:75:
53:1a:81:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 01:16:23 2025 by rpki-client