Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3MEFJOy8UzqV9N5DdzunYjxGK28.roa
File: 3MEFJOy8UzqV9N5DdzunYjxGK28.roa (raw, json)
Hash identifier: db2QVW306JyPQfUkGWWczvu9SRSdR+kP3hrVNmFBhhg=
Subject key identifier: DC:C1:05:24:EC:BC:53:3A:95:F4:DE:43:77:3B:A7:62:3C:46:2B:6F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186D40883F6BD2A319DF3D977FC37315B8B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3MEFJOy8UzqV9N5DdzunYjxGK28.roa
Signing time: Sun 12 Mar 2023 04:16:13 +0000
ROA not before: Sun 12 Mar 2023 04:16:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:d4:08:83:f6:bd:2a:31:9d:f3:d9:77:fc:37:31:5b:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 12 04:16:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dcc10524ecbc533a95f4de43773ba7623c462b6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:26:14:aa:2c:67:20:db:41:22:12:bb:aa:fc:
23:72:54:1e:5b:50:9c:a8:e7:50:3f:4e:49:db:af:
01:15:53:17:be:8d:b2:94:6e:97:87:02:6b:59:49:
00:a5:ae:16:cf:86:7d:a8:1b:b5:33:3f:5b:1f:fc:
b8:9c:a4:ce:70:37:83:56:30:a9:23:ce:1b:44:1d:
40:ca:58:db:36:91:18:bb:34:16:31:57:e0:7d:b7:
d2:21:52:92:83:6c:ad:f7:2c:61:61:ac:e3:db:32:
f1:17:2b:3a:6c:c0:69:d8:10:d8:46:15:5a:1c:1d:
11:d0:9e:31:13:42:21:bf:2a:a4:34:0f:f1:85:35:
a1:84:f2:50:14:44:c3:ee:3e:a5:00:0f:fe:14:e7:
85:eb:fb:7f:3b:76:c3:d3:64:46:90:5a:9c:e8:33:
a1:64:8d:43:00:61:b6:6a:af:49:5e:49:22:bf:83:
19:88:63:87:7c:5d:8c:d1:3e:e6:c8:5f:83:1c:0b:
8a:d6:7f:27:f9:9b:c1:15:c3:7f:c8:5b:d8:c9:8b:
10:11:61:86:de:ca:5d:58:42:a5:84:b6:f8:d4:fd:
a5:e6:0f:0c:69:07:ae:a0:c1:c9:8e:fc:44:50:8e:
68:07:86:b8:95:58:dc:da:13:f6:ed:79:06:9d:47:
39:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:C1:05:24:EC:BC:53:3A:95:F4:DE:43:77:3B:A7:62:3C:46:2B:6F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3MEFJOy8UzqV9N5DdzunYjxGK28.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3c:95:19:c7:0a:41:8c:bd:4a:a3:a6:ac:48:54:38:fc:f2:c7:
45:44:4a:5c:23:44:1f:b5:fe:95:5e:6e:4b:ef:0e:1f:d9:13:
ce:88:93:1c:cb:52:5e:56:f5:45:73:c5:8a:07:eb:50:a0:e8:
14:ed:14:40:5f:7e:44:21:f8:29:5c:00:74:de:63:33:44:94:
0d:d8:af:41:ff:76:26:06:80:0a:5f:9f:76:23:bd:22:6b:05:
f8:e0:6d:d6:f8:b7:2e:c1:21:13:80:bc:13:25:ec:3c:06:0b:
06:ee:69:bb:66:63:37:c6:80:0a:8c:15:99:54:37:3a:98:36:
43:9d:7c:2e:cf:d5:8a:89:6e:54:2e:62:63:f9:df:b9:47:23:
ca:e5:97:1d:c0:56:6f:18:b1:50:ec:50:c9:44:03:63:cb:bb:
22:0f:03:eb:2e:bf:9d:a0:f0:0d:b2:b4:f0:69:2d:2a:02:9d:
8d:0a:df:62:72:72:3d:43:2c:fd:45:67:33:fd:bb:bc:cc:d5:
13:07:33:78:37:23:7b:60:b2:27:ff:e9:c8:aa:b4:3f:df:4f:
36:33:85:18:da:31:34:13:7d:a1:ff:f7:82:b1:f0:ac:12:99:
06:e7:be:cd:3f:fa:d3:0a:bf:f8:18:4b:aa:74:d3:ee:f0:c4:
7a:51:1a:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 03:21:30 2025 by rpki-client