Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3VnKn3Ia58PKRTslOgEScuUFyo4.roa
File: 3VnKn3Ia58PKRTslOgEScuUFyo4.roa (raw, json)
Hash identifier: Wr3ATWUOArtBaLKrMV42C+fHFjfzUpmU+GiDblasF9Q=
Subject key identifier: DD:59:CA:9F:72:1A:E7:C3:CA:45:3B:25:3A:01:12:72:E5:05:CA:8E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 755F78CD
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3VnKn3Ia58PKRTslOgEScuUFyo4.roa
Signing time: Thu 24 Mar 2022 19:10:25 +0000
ROA not before: Thu 24 Mar 2022 19:10:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:17f:87e3:2531/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1969191117 (0x755f78cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 24 19:10:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dd59ca9f721ae7c3ca453b253a011272e505ca8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:9d:34:83:55:c9:76:e3:40:4a:e3:89:3d:9d:
76:c1:06:ae:57:3d:5f:3a:e1:b3:46:2f:c4:ce:f8:
de:26:39:d4:46:80:f0:1b:ea:41:30:49:1f:68:21:
14:fb:64:be:97:ec:56:02:0b:17:2d:68:96:3d:db:
b2:e2:3d:6e:b4:e3:47:30:5f:54:31:71:69:0e:32:
7e:bd:7f:59:d8:19:b6:c5:99:13:a7:d2:0c:66:bd:
9d:cc:ca:3d:16:ac:5a:bf:4c:da:47:86:4c:a3:1f:
c0:0a:b4:75:64:4a:31:83:08:b4:5f:c1:a6:5d:4c:
ea:4c:32:d7:b2:92:31:9c:59:fb:20:14:04:bc:9c:
81:a4:d2:b1:fa:47:af:05:b6:05:db:e3:c3:53:14:
a2:8f:01:13:da:f1:23:3c:50:7c:a3:51:de:e6:b1:
a1:3b:15:4d:cf:d4:0f:03:1e:41:b2:5c:93:05:80:
26:07:ac:96:75:fd:8f:65:fc:82:ad:1d:63:5b:49:
a3:cf:bf:bf:44:ba:fa:82:2b:44:8d:c6:09:fe:94:
a5:b4:91:a5:75:e7:a8:ed:e2:a4:07:32:d8:65:b5:
39:db:fc:0d:d4:0d:94:e3:25:cb:c7:08:db:6a:6e:
2d:ea:ed:4d:ba:61:b1:9d:60:a6:b7:54:f6:5b:bb:
d4:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:59:CA:9F:72:1A:E7:C3:CA:45:3B:25:3A:01:12:72:E5:05:CA:8E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3VnKn3Ia58PKRTslOgEScuUFyo4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8d:af:bc:ce:6c:b1:2d:71:57:91:b4:aa:5e:e3:12:5d:7b:57:
6b:4d:48:c6:c7:ea:37:62:d8:36:fa:18:67:fc:4e:49:95:f9:
b6:1d:ad:e5:ec:94:3b:f4:b4:71:03:be:ca:bf:2c:f7:23:88:
8c:38:36:2f:56:f2:46:af:23:d2:57:07:2a:e4:f5:b3:89:cb:
a4:6a:a3:10:25:7a:49:17:0c:38:2e:13:97:e9:c9:57:6f:cb:
31:08:87:04:14:ac:cb:0b:44:c7:ab:1a:79:fe:74:65:2a:41:
ae:62:69:08:9a:f8:87:b1:f7:0f:79:84:91:ca:5a:d7:f2:f3:
2a:f8:82:0c:52:ed:dc:97:3f:0a:27:ef:5f:95:8e:95:69:38:
57:ce:a2:2b:3f:05:b2:47:31:44:54:8e:f0:42:de:d8:c8:a8:
3f:13:cf:19:a9:98:51:2e:d6:5f:a2:23:c9:71:4c:39:5b:3a:
0f:10:1a:6a:a0:05:74:f8:a9:35:b7:a5:fa:dd:8c:cc:89:6b:
02:3a:2c:4b:23:da:5e:f6:36:e3:6e:78:e6:39:aa:db:fb:f8:
65:c4:3d:75:60:93:34:3d:14:c1:c8:eb:e2:99:f3:97:bb:dd:
0c:13:d3:62:f5:95:62:92:fd:cf:e1:ed:00:48:42:b3:12:b2:
49:39:63:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 18:44:48 2025 by rpki-client