Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3VvdCiie0AFbnSEXgsy3xBhw4zI.roa
File: 3VvdCiie0AFbnSEXgsy3xBhw4zI.roa (raw, json)
Hash identifier: ULHI/3vEuQolijdB/WsxYiDIxtumnMnyqdFH03+3siA=
Subject key identifier: DD:5B:DD:0A:28:9E:D0:01:5B:9D:21:17:82:CC:B7:C4:18:70:E3:32
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01898BAAAFAD3871732577772EA350BBC87A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3VvdCiie0AFbnSEXgsy3xBhw4zI.roa
Signing time: Tue 25 Jul 2023 06:09:26 +0000
ROA not before: Tue 25 Jul 2023 06:09:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:8b:aa:af:ad:38:71:73:25:77:77:2e:a3:50:bb:c8:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 25 06:09:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dd5bdd0a289ed0015b9d211782ccb7c41870e332
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:52:aa:5b:27:59:35:a6:c0:a1:61:95:41:40:
53:89:ae:07:10:0a:a4:d3:cc:ea:27:87:51:30:0c:
ba:cc:73:27:1f:d4:4d:f5:6c:c6:dc:58:9f:95:91:
40:16:7e:91:ec:91:40:ed:16:4c:94:29:58:8a:1c:
fc:a0:b0:94:c1:f5:76:de:7c:20:4b:de:d5:da:09:
06:90:6f:ea:b8:44:b0:21:a2:93:e1:e5:50:07:2c:
93:0a:68:76:4a:04:28:60:28:6c:05:46:13:31:29:
28:ee:19:7f:aa:77:3d:a3:5a:3d:fe:15:be:76:f0:
cb:93:d2:d1:43:c7:b6:07:60:41:72:48:6c:21:9b:
02:08:c4:0f:d6:b2:d9:17:c6:c4:f1:0b:5e:ee:03:
80:5e:39:9c:58:68:8e:a4:fc:9c:35:1c:e4:fe:a3:
8b:92:f3:70:c5:9a:5e:04:25:8f:f9:80:1e:80:b6:
64:76:43:cf:ff:5e:da:a5:51:ce:7e:a6:c9:4b:fb:
0e:d3:f1:7b:a1:e4:62:61:28:43:34:8d:26:33:75:
64:8f:1b:80:92:e4:9d:0b:5c:75:57:0d:66:5e:23:
41:52:62:82:95:7b:19:f1:e3:bb:f4:ae:3c:94:af:
43:fd:59:1a:fb:58:b7:c1:1a:27:a5:98:2f:48:72:
ca:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:5B:DD:0A:28:9E:D0:01:5B:9D:21:17:82:CC:B7:C4:18:70:E3:32
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3VvdCiie0AFbnSEXgsy3xBhw4zI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
75:3e:8d:d5:41:81:ab:72:6b:ce:1e:2f:21:06:7e:4e:98:c8:
a0:6b:2c:52:e3:c7:fb:63:f9:fa:97:71:1b:57:ca:e0:43:55:
fe:30:43:9f:6f:3f:e9:a9:42:57:19:7a:93:08:fc:ce:56:ad:
44:8c:4b:ae:3f:b7:79:cb:22:46:39:6f:71:da:ac:6b:79:c9:
11:2d:fa:22:51:3f:ea:84:2d:84:7b:64:f1:f5:06:89:51:2c:
6b:94:e0:6e:c4:a6:3e:a2:0b:31:8f:a4:a1:89:64:a5:39:a2:
8a:cb:0c:15:99:3c:da:87:a0:6a:4d:5e:0e:18:93:c2:7b:a3:
88:2b:2f:aa:63:b2:26:58:d3:cc:45:e9:c2:80:61:c3:56:59:
db:38:53:33:dd:7f:48:d3:a1:a7:b5:0c:f6:a5:39:26:ba:0d:
d6:d6:78:85:80:78:9d:8a:53:30:46:0e:14:92:03:8b:aa:5e:
6e:46:a9:ab:d6:2d:6b:a7:08:1e:62:65:a8:ba:a4:2a:b8:d3:
3f:63:2b:d4:1e:13:44:8e:6c:4d:a2:0f:0a:78:9d:9b:0e:e4:
56:27:52:ff:0b:71:ff:6c:01:2f:fb:ab:74:f2:2b:03:e2:c3:
a4:1b:cd:fb:49:87:8b:02:c3:eb:bf:1d:ac:d6:79:53:51:17:
e9:a4:54:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 00:08:32 2025 by rpki-client