Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3P7aqWSxdoTbXZv5rwelEGVO838.roa
File: 3P7aqWSxdoTbXZv5rwelEGVO838.roa (raw, json)
Hash identifier: TL0ALnB0KvhpB9eE8ghk/Vu7HmX2V36P7gQCBN2fWnA=
Subject key identifier: DC:FE:DA:A9:64:B1:76:84:DB:5D:9B:F9:AF:07:A5:10:65:4E:F3:7F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01883AFFD54FAE48C83DA215BCDD16841DB2
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3P7aqWSxdoTbXZv5rwelEGVO838.roa
Signing time: Sat 20 May 2023 21:10:24 +0000
ROA not before: Sat 20 May 2023 21:10:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:3a:ff:d5:4f:ae:48:c8:3d:a2:15:bc:dd:16:84:1d:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 20 21:10:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dcfedaa964b17684db5d9bf9af07a510654ef37f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:3d:b5:96:fc:69:3a:ea:bd:99:a4:50:b6:dd:
27:df:e9:8e:ca:ec:d9:0f:28:73:a3:28:3c:6c:1c:
8e:fb:2a:8b:f0:9b:bd:ae:fb:0f:ad:ad:12:66:de:
62:48:ce:e8:95:79:09:54:4d:6b:c8:97:69:af:3a:
de:f4:d6:fd:4c:8e:0f:85:87:c0:b0:de:f0:54:2a:
10:8d:d7:58:93:a6:ef:a9:8a:4c:cc:92:89:55:f2:
ae:10:7d:6b:e0:e3:1d:64:41:5d:6d:ba:d4:b5:29:
bd:53:55:f3:83:7d:26:de:ca:bd:4c:e0:aa:7e:a7:
39:65:c2:18:a1:bb:7b:8e:b5:51:92:ea:11:42:f0:
a2:00:e7:ba:16:62:04:5a:1c:82:f5:7c:65:7a:4f:
51:f8:99:91:aa:ad:ab:a0:d0:49:e4:00:03:20:4b:
2b:31:ea:e1:1c:0a:db:04:10:c0:36:70:58:34:42:
e5:d7:48:da:5f:30:3e:17:c1:45:58:9e:2d:8e:72:
ab:7b:aa:0a:37:e4:69:86:41:6a:11:91:39:42:67:
50:d8:72:93:85:e7:07:4e:21:c8:1f:58:56:65:00:
f9:92:4e:57:14:ff:b7:45:6f:b0:bb:ef:ca:42:9a:
93:bc:e7:e7:d4:20:04:31:8e:e8:21:75:ec:41:f7:
98:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:FE:DA:A9:64:B1:76:84:DB:5D:9B:F9:AF:07:A5:10:65:4E:F3:7F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3P7aqWSxdoTbXZv5rwelEGVO838.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
24:67:3c:0d:f0:18:fa:93:89:04:81:c4:ed:bd:cc:cc:52:2a:
b0:c6:f1:17:f4:2d:40:9b:28:5a:45:09:06:81:e7:45:c3:f3:
ad:a6:00:61:89:ab:22:43:c9:1f:82:fc:5f:61:49:fe:68:bf:
b4:92:96:eb:4a:1e:a9:e9:7c:f4:f5:d7:88:7a:be:52:c2:34:
12:b4:f4:21:2a:51:4f:a9:f0:9d:26:85:49:5d:8f:e3:8c:3d:
7b:76:20:b5:db:d4:75:2c:95:49:a7:55:13:ac:8f:37:93:96:
4f:1f:09:cd:dc:f3:20:07:f8:f5:0d:31:f1:57:0b:3a:8d:a1:
c8:87:28:d6:71:6c:b8:8f:cd:80:37:19:09:2f:26:74:b9:62:
01:5a:37:68:e8:03:cf:1c:47:2a:37:9e:09:b7:df:4c:ef:79:
a8:b1:cd:a3:98:66:34:ca:07:65:0a:17:43:be:57:2b:26:79:
38:5c:f9:96:d2:5a:3b:64:81:52:5e:f6:aa:ec:6a:76:ec:6a:
1e:e6:6c:68:6f:54:1c:b0:ba:1c:d4:57:cf:a5:e3:d4:48:a2:
6c:61:f4:12:bd:cf:09:02:bc:89:7e:56:71:c6:7a:75:1d:ed:
27:7b:45:95:fd:3b:d4:60:3e:8e:09:ab:3e:56:11:4c:44:eb:
1a:f1:cf:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 03:46:00 2025 by rpki-client