Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3Q_f15lmiV6LYP46aAHhNPKCE3Y.roa
File: 3Q_f15lmiV6LYP46aAHhNPKCE3Y.roa (raw, json)
Hash identifier: zBB5EYKIsV9aTrfChpfee3dfpTfjeQeUJQl1wFX8AP0=
Subject key identifier: DD:0F:DF:D7:99:66:89:5E:8B:60:FE:3A:68:01:E1:34:F2:82:13:76
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01835CBF16629E9350EEFB4717E65B9317E8
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3Q_f15lmiV6LYP46aAHhNPKCE3Y.roa
Signing time: Tue 20 Sep 2022 21:12:50 +0000
ROA not before: Tue 20 Sep 2022 21:12:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:183:50b3:5643/128 maxlen: 128
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:183:1279:659d/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:5c:bf:16:62:9e:93:50:ee:fb:47:17:e6:5b:93:17:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Sep 20 21:12:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dd0fdfd79966895e8b60fe3a6801e134f2821376
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:49:f5:04:4e:8c:d8:bb:43:da:50:af:da:69:
ff:d9:bc:77:bf:54:65:3e:c6:97:37:62:f8:6f:95:
26:2f:f3:f1:dd:30:c3:bc:73:6a:7b:47:32:ed:04:
94:06:aa:3b:08:a8:c0:5e:af:fb:88:67:f9:c1:29:
54:cd:85:1c:10:13:b1:9b:30:a0:9e:3b:2e:b5:bc:
91:b5:72:4b:3c:45:53:7f:0b:84:24:0a:b4:c5:25:
13:b7:a8:bc:a0:20:b6:97:32:0f:f5:76:cb:4f:9b:
5d:12:4c:7b:9a:ac:a5:fc:5d:49:6d:8c:e4:e3:fd:
45:bb:ca:09:a6:71:d3:91:b6:bd:2c:44:26:08:42:
65:90:6d:73:fb:74:f0:bd:68:fa:7a:ea:17:d2:63:
16:c8:fa:db:61:af:69:1f:44:4e:dd:6d:d5:ad:39:
86:ee:4c:c2:e2:6f:a3:2d:76:6c:6d:84:91:0e:61:
7c:21:52:06:63:72:d3:0e:f5:8e:46:de:35:5a:7c:
97:5f:80:70:53:af:0d:6e:7f:22:e1:c6:24:54:1d:
90:48:10:1d:7b:97:27:b4:ce:42:05:22:cf:1c:3f:
d2:14:52:fd:f1:f5:53:96:39:f8:95:82:c2:ff:98:
70:8a:fe:76:86:8c:38:7d:a3:64:75:2b:76:24:d5:
44:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:0F:DF:D7:99:66:89:5E:8B:60:FE:3A:68:01:E1:34:F2:82:13:76
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3Q_f15lmiV6LYP46aAHhNPKCE3Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
aa:86:e6:06:b3:73:5a:85:85:fc:77:f8:21:0b:12:60:16:a8:
60:ad:4a:b4:d8:c2:33:b6:62:84:42:7b:78:ca:82:6a:71:7b:
47:5d:ae:7a:3f:00:ad:16:05:d7:64:b2:bd:74:3e:f8:56:dd:
17:e3:5c:95:4a:30:f5:d1:e9:6e:66:42:9f:ed:70:0d:5d:8a:
e1:ec:f6:c1:a2:50:15:37:c0:85:e6:85:13:e8:df:2f:a3:b6:
36:90:c4:5c:02:fe:d5:61:97:f2:54:25:c4:6a:5f:69:8e:a8:
21:88:1e:b8:87:ca:8e:b1:b9:41:4b:34:5a:f1:cd:fd:40:5f:
b8:7e:eb:14:38:20:57:6b:88:b1:04:4d:06:84:08:c1:4f:c8:
11:41:48:35:99:8f:ae:cc:8c:ff:05:e6:ed:32:13:12:b9:2e:
57:99:ea:5c:9c:db:fb:5c:49:a7:53:fb:3f:3d:67:f4:29:b9:
e6:4f:3d:02:e4:d6:0c:6d:11:5b:39:7f:70:a9:e3:2c:dc:74:
81:f3:14:51:b2:03:f1:cf:ff:e0:f1:55:3a:06:0a:36:fc:70:
84:92:5d:ee:e0:95:5c:0b:d8:6c:4a:08:fd:12:a7:01:c3:63:
28:5b:1e:89:11:78:06:05:e9:c0:7b:03:b0:18:3f:1b:9f:c3:
60:1f:b0:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 00:41:16 2025 by rpki-client