Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3M43dclrUBR5xZzGyaQaRpXB-Gk.roa
File: 3M43dclrUBR5xZzGyaQaRpXB-Gk.roa (raw, json)
Hash identifier: 6yWc3rRKq8nHUE0HVS0hJTSCByddAOFVIdTsiFcXeJA=
Subject key identifier: DC:CE:37:75:C9:6B:50:14:79:C5:9C:C6:C9:A4:1A:46:95:C1:F8:69
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189FD9F06BD6C2B325ECB7C06CBF02AD89D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3M43dclrUBR5xZzGyaQaRpXB-Gk.roa
Signing time: Wed 16 Aug 2023 09:13:24 +0000
ROA not before: Wed 16 Aug 2023 09:13:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:fd:9f:06:bd:6c:2b:32:5e:cb:7c:06:cb:f0:2a:d8:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 16 09:13:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dcce3775c96b501479c59cc6c9a41a4695c1f869
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:25:70:79:7e:cd:92:00:87:bb:42:79:4c:99:
fc:8c:05:25:28:da:e5:0e:8f:11:5e:fa:9b:80:31:
97:ae:28:f3:7d:5f:0c:be:d6:2e:f4:19:ab:0d:ac:
04:c7:eb:1c:37:22:38:b5:f9:ab:1d:02:4a:26:6b:
7a:f3:d1:1b:5c:63:f0:f3:0f:b4:21:ec:60:cb:c5:
3d:35:54:c1:b6:51:78:12:f4:10:a9:0d:7a:7e:96:
3c:58:94:b7:40:63:15:70:46:7d:82:bf:9b:32:13:
f6:71:5e:f7:ec:db:2f:48:3e:5f:88:40:24:f4:1a:
a4:11:ad:c0:da:11:89:a1:2d:69:1c:2e:57:60:9d:
5a:11:f8:52:5f:fb:fb:e4:70:68:d2:92:45:0a:b6:
43:36:56:f3:8d:fd:8b:5a:bd:27:c8:b5:f0:3a:3d:
e2:a0:22:28:07:55:cc:65:7f:8a:78:de:e3:13:df:
49:c7:e5:39:e0:38:e7:da:b4:36:2f:f8:b3:7b:ee:
9e:c6:3e:ed:48:94:71:d7:ed:6b:e7:e3:2a:05:e4:
7a:34:60:23:19:6e:2a:d1:6b:50:58:49:32:a0:98:
86:29:f9:20:f8:72:8c:af:06:0e:58:47:bd:d8:c5:
ca:6a:86:7e:a5:d9:9b:f0:28:b4:fa:f5:91:43:6c:
30:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:CE:37:75:C9:6B:50:14:79:C5:9C:C6:C9:A4:1A:46:95:C1:F8:69
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3M43dclrUBR5xZzGyaQaRpXB-Gk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
59:83:87:4a:3a:e6:93:1b:bf:01:ec:b0:b9:08:d2:24:c4:9b:
94:e9:3f:2f:b4:f6:c5:08:a9:a0:6a:0c:f9:fd:2b:d8:f2:76:
c4:bc:7f:4c:0a:41:5f:ea:00:25:3a:0b:42:6a:e5:72:17:b1:
4e:5d:74:a8:6f:f1:ed:a9:db:e8:5b:09:9b:26:e3:bd:74:58:
02:0c:58:88:ab:33:63:42:d5:5f:16:32:5f:63:d9:91:bb:87:
a2:be:f6:20:9a:26:0b:21:4d:93:c0:9c:89:0d:e3:3d:f4:51:
85:0f:d8:2b:49:09:0a:c6:ca:39:41:a9:22:d6:be:88:e8:7a:
06:1d:76:ee:2d:f9:62:1d:e2:36:26:0f:e0:f1:8c:ae:cf:3e:
88:d6:a4:8e:bc:fd:3a:de:7b:6e:a2:68:25:1d:53:9a:13:30:
63:45:e0:66:c3:57:d5:31:c3:fc:d7:fe:28:4d:32:6c:af:f5:
97:48:16:d3:41:8b:02:05:16:6a:20:c6:3b:0c:fc:b8:69:71:
d6:f1:cf:2b:31:ed:9b:99:45:95:3f:87:65:ae:00:f8:8b:84:
90:b2:0e:3a:35:2d:ca:90:c0:b2:7e:83:2c:ef:75:a1:a3:bc:
53:17:c9:c4:82:d1:22:f6:34:5c:45:51:a0:10:55:b4:d9:c0:
3a:df:54:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:39:42 2025 by rpki-client