Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3RE9waMz0UAJDO9vGHKkeW2BUOo.roa
File: 3RE9waMz0UAJDO9vGHKkeW2BUOo.roa (raw, json)
Hash identifier: 0i+GICjCLlIczpnj9NSsYioW96X6V9ENhbaoXRs5UaE=
Subject key identifier: DD:11:3D:C1:A3:33:D1:40:09:0C:EF:6F:18:72:A4:79:6D:81:50:EA
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 86F26CEA
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3RE9waMz0UAJDO9vGHKkeW2BUOo.roa
Signing time: Tue 24 May 2022 23:10:13 +0000
ROA not before: Tue 24 May 2022 23:10:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:180:a810:6542/128 maxlen: 128
2001:67c:64:ffff:0:180:ddb5:bc5/128 maxlen: 128
2001:67c:64:ffff:0:180:466e:42dd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:e0ec:efe1/128 maxlen: 128
2001:67c:64:ffff:0:180:8961:505f/128 maxlen: 128
2001:67c:64:ffff:0:180:f73d:bab5/128 maxlen: 128
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2264034538 (0x86f26cea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 24 23:10:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dd113dc1a333d140090cef6f1872a4796d8150ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:31:c9:e5:12:23:0f:e4:4d:b3:92:c8:a4:af:
fd:27:fa:d1:a2:b1:a1:61:05:cd:54:90:3d:8a:0c:
b4:9d:97:58:2e:3d:0b:95:2a:44:21:5a:5f:70:f5:
0f:0b:5a:17:c8:67:37:d0:84:64:5c:6e:d4:53:d1:
f1:38:98:6e:f7:2c:e1:f4:17:cd:57:07:cf:e1:31:
a2:30:98:82:95:d1:f0:98:03:c2:c8:fa:0e:4f:a7:
87:94:e0:fc:22:84:a9:a2:f5:14:76:69:37:26:a6:
b3:2d:5e:4a:07:eb:39:eb:1e:03:13:7c:b1:54:42:
96:f4:a5:00:bb:f4:7c:a2:6f:51:57:20:c5:b5:4d:
ad:e2:81:75:37:7c:68:de:86:46:fc:15:f0:b6:60:
58:41:d0:74:35:4b:b1:2b:41:08:5f:12:30:59:53:
00:53:3b:22:ba:66:bf:a3:8e:2c:31:08:70:a3:54:
54:2c:23:92:8f:8e:31:b4:13:98:c4:80:37:1f:30:
ce:f1:a3:eb:e8:0c:32:e1:76:e4:33:3f:d3:d4:ef:
0b:e1:79:91:6c:a0:db:4c:43:18:58:ab:2d:5e:4a:
3a:61:ad:ef:3d:ff:7c:af:f1:b0:7a:8b:cf:98:cb:
b6:2c:4d:b9:07:9e:28:43:6c:d7:0d:f4:8c:a3:ee:
fb:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:11:3D:C1:A3:33:D1:40:09:0C:EF:6F:18:72:A4:79:6D:81:50:EA
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3RE9waMz0UAJDO9vGHKkeW2BUOo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
42:11:1c:2b:d1:2e:20:10:1d:5e:84:b9:d5:15:10:86:ac:3d:
af:fd:21:58:42:ac:05:b2:eb:b8:b5:e4:0d:bc:39:e3:a2:e6:
6d:2b:9b:30:a7:a3:c8:4d:d8:37:b1:f4:aa:67:f8:d8:35:06:
4c:9a:8b:30:70:10:86:ac:1f:b7:eb:d8:28:87:9a:a7:4d:b2:
f0:b3:c9:bb:75:f7:6f:63:f7:16:4c:25:bf:f5:da:4b:4d:2f:
87:dc:1f:e9:f3:73:5c:3f:3f:b1:ab:25:06:d5:d9:a5:c2:1b:
c3:40:e3:8d:8b:cb:8c:ad:fc:eb:28:d1:a0:8b:8e:54:45:1b:
af:79:93:7b:f3:93:1f:a9:52:3f:d2:28:97:26:9d:49:2b:ac:
55:73:42:87:7f:4d:11:e8:82:eb:68:2d:2b:a1:03:ca:d8:c7:
6e:4b:01:17:78:52:ad:43:9f:7f:f4:34:36:ea:e7:d6:0a:1f:
cc:3b:8e:95:a6:62:06:c6:bc:b7:86:0b:42:6b:b8:9b:63:53:
12:22:5c:56:4a:a3:fe:7a:be:83:af:00:ab:81:39:ef:7e:a1:
37:d7:c7:c7:c4:94:a2:bd:31:6b:98:9b:c0:b8:9b:d3:38:ee:
1c:04:c1:9f:43:51:81:f0:eb:da:ef:1c:c0:23:a4:cb:a0:ec:
50:29:68:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:23:32 2025 by rpki-client