Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3OO5i6MnzFVx2eeW6Za20SleXtY.roa
File: 3OO5i6MnzFVx2eeW6Za20SleXtY.roa (raw, json)
Hash identifier: +zutDfuNfwVLjPbb/cgJWObGk6Rx3ZZ6vzQMW/Q9bVg=
Subject key identifier: DC:E3:B9:8B:A3:27:CC:55:71:D9:E7:96:E9:96:B6:D1:29:5E:5E:D6
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A08C77AF6DBD2C99FCDC60F9D17028623
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3OO5i6MnzFVx2eeW6Za20SleXtY.roa
Signing time: Fri 18 Aug 2023 13:13:25 +0000
ROA not before: Fri 18 Aug 2023 13:13:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:08:c7:7a:f6:db:d2:c9:9f:cd:c6:0f:9d:17:02:86:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 18 13:13:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dce3b98ba327cc5571d9e796e996b6d1295e5ed6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:81:5f:a4:b2:e0:6e:7d:f8:08:e9:9e:7a:2c:
d5:a8:bf:7e:c5:c2:d7:24:23:1f:c0:93:50:48:2e:
b6:03:f9:69:8a:54:8e:ce:c1:50:66:1e:ef:bb:a7:
93:72:d2:11:e3:1c:52:04:7f:ca:c6:d2:1a:4a:12:
d6:76:5b:5b:4a:5d:55:13:92:75:39:93:3a:dc:ac:
78:b6:5d:76:76:75:d6:04:e0:76:e8:81:20:3c:de:
27:e7:08:82:9a:ff:6e:19:51:a9:8d:52:9d:4d:f9:
68:6a:48:29:74:eb:4e:5d:11:a2:bf:0d:d9:5a:d5:
4e:8d:30:0c:ae:d8:6c:fe:78:0c:7b:d2:3c:72:9e:
55:97:13:8a:b7:ca:70:f5:59:5a:8d:7e:37:70:87:
fb:20:8c:ed:d0:c0:67:1d:64:11:61:fd:f0:5f:9c:
f1:18:89:6c:18:5a:ef:d7:84:af:46:2c:bf:50:1a:
50:93:ea:a4:50:9f:71:82:be:d7:6a:84:96:46:f6:
44:21:d8:d4:9d:fa:a3:e6:23:d1:05:5a:4f:b6:ab:
3a:37:90:e2:ac:fa:62:37:9c:55:0d:fa:43:98:21:
d2:f2:48:81:5c:59:ad:6d:7f:b8:83:00:b0:19:20:
f0:c3:c4:1c:1f:55:80:cf:4c:be:f0:2c:5f:9b:05:
b7:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:E3:B9:8B:A3:27:CC:55:71:D9:E7:96:E9:96:B6:D1:29:5E:5E:D6
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3OO5i6MnzFVx2eeW6Za20SleXtY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
88:e6:bf:15:78:d9:80:4f:08:27:75:21:de:cb:9a:50:2f:3f:
47:c8:05:80:e0:78:16:4b:60:ed:56:26:b8:85:fe:20:c0:e2:
cd:4e:94:72:3b:7b:c2:bc:5b:ec:3f:c7:57:0b:79:a1:84:d8:
48:32:13:08:a0:b5:e7:09:ed:17:b5:13:99:c9:7a:9d:e4:13:
7e:20:54:f1:90:dc:e0:3a:3c:be:7b:c7:42:e3:64:80:28:aa:
2e:24:33:b9:7b:cd:87:8a:03:ce:18:8f:8f:9f:6a:95:5a:73:
ce:ea:dc:5d:9c:fb:e4:08:7e:dc:06:21:ec:a1:95:01:e6:8d:
84:8b:9f:46:b0:4c:54:73:e1:d9:fb:e7:a6:67:bd:bf:4d:54:
ad:64:d6:df:d7:26:09:6c:89:c4:ef:2d:36:ed:2d:1b:12:10:
f4:01:0e:1d:6a:97:d2:dd:66:94:6c:22:62:d4:23:94:5e:1b:
98:58:5b:7e:86:ee:a5:5c:25:1f:6e:ea:1c:38:c2:53:e5:56:
c5:8e:37:ae:78:05:d8:a7:80:51:86:83:5f:5a:cd:6e:6a:0d:
81:26:26:71:a1:a1:6a:0b:6c:df:e2:da:af:9a:74:23:49:3d:
24:41:b9:09:bc:a8:ae:02:0a:f9:c4:9c:ee:b2:fe:5c:47:b3:
28:04:01:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 06:36:17 2025 by rpki-client