Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3VrS4UctrXqsyX1xbeznA4eWG8E.roa
File: 3VrS4UctrXqsyX1xbeznA4eWG8E.roa (raw, json)
Hash identifier: GSH95o0s/pKxcNT8uLSMNOFxD5k7tFQ38qQ8SvqqjVE=
Subject key identifier: DD:5A:D2:E1:47:2D:AD:7A:AC:C9:7D:71:6D:EC:E7:03:87:96:1B:C1
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 7B504518
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3VrS4UctrXqsyX1xbeznA4eWG8E.roa
Signing time: Thu 14 Apr 2022 20:09:33 +0000
ROA not before: Thu 14 Apr 2022 20:09:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2068858136 (0x7b504518)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 14 20:09:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dd5ad2e1472dad7aacc97d716dece70387961bc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:4b:16:0d:e2:21:68:47:78:10:0b:c8:e0:45:
a2:4d:a5:25:f7:c5:e6:ee:8d:1f:fc:57:2a:66:dd:
e3:41:db:39:d6:84:72:06:78:b7:04:9b:25:30:95:
85:62:f1:ce:66:5c:7c:cd:12:43:6f:bf:41:35:58:
3e:59:4e:a4:51:fa:73:1a:55:8b:b6:fc:44:e4:55:
22:da:d9:ef:cc:a1:30:de:36:32:2e:7b:ec:8e:d6:
8e:bf:1e:5e:9a:58:2f:40:b8:33:19:67:f2:d3:5b:
ec:a9:89:fb:58:ff:e2:53:6b:b2:54:1e:bc:78:64:
14:19:60:a4:95:f2:7f:13:c5:bf:d1:3d:d9:b4:d4:
d4:7d:b1:13:c0:85:ed:9a:67:80:4e:af:89:54:eb:
f3:65:94:2c:eb:eb:42:e6:dc:67:b6:6c:32:7d:24:
bf:83:c4:8b:7f:c3:8e:46:10:5f:78:c1:29:9b:9e:
4a:8b:a2:34:5c:04:44:41:59:92:c6:22:2a:7b:4d:
b2:bf:66:c6:7f:3a:fe:5a:fa:a0:41:64:5f:dc:1d:
77:55:1e:0a:82:4f:a9:57:1b:d6:95:5a:db:34:1d:
d5:98:3f:ec:05:7f:72:39:e2:3b:13:f7:ff:16:54:
59:71:ee:66:92:b8:6a:28:56:e2:a9:8a:33:38:e2:
15:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:5A:D2:E1:47:2D:AD:7A:AC:C9:7D:71:6D:EC:E7:03:87:96:1B:C1
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3VrS4UctrXqsyX1xbeznA4eWG8E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a9:8c:73:93:15:98:e9:97:94:65:1b:e7:b1:09:da:20:fe:3d:
e3:78:68:9a:02:95:a7:8f:41:1d:6f:87:9b:88:8b:e1:83:71:
7a:37:79:2f:78:b9:14:5f:84:8f:9d:e0:49:b9:54:7f:40:ea:
22:b4:1f:aa:89:3e:3b:4b:d7:4f:c1:d8:70:01:22:77:75:80:
f7:58:d7:21:ab:90:01:3f:86:a5:7c:1f:4c:ee:d0:d8:0f:3a:
ca:87:68:7a:73:2a:10:9c:08:d5:7b:c2:38:c1:c5:8e:14:a9:
16:6e:7b:09:f7:79:5c:b2:19:4f:88:9b:8d:1e:7a:45:b2:d2:
94:5d:6f:c6:fb:59:0e:31:8e:29:b7:b8:82:df:a0:69:3c:33:
68:f7:09:74:4c:83:51:97:0f:06:ca:24:8e:ed:4b:52:25:44:
79:96:7c:cf:65:bd:2f:41:aa:9d:c1:0c:a0:34:0a:51:03:ef:
89:9d:af:0e:14:c9:f3:df:ac:bf:04:44:2b:2c:d2:03:a9:95:
1e:7d:bf:fa:5b:b5:0b:3f:c9:e7:06:7a:b9:eb:83:4b:98:8d:
ab:57:28:16:9e:f8:bc:4a:07:9c:77:d7:17:9e:c7:5a:18:bd:
f7:9a:51:b1:f1:b2:bd:81:5c:58:6d:53:30:8c:5c:0e:82:d2:
f1:0d:cd:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 07:22:24 2025 by rpki-client