Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3W4ZRH9-ux9hmBKcIZ1VbZQRx6E.roa
File: 3W4ZRH9-ux9hmBKcIZ1VbZQRx6E.roa (raw, json)
Hash identifier: 4DlddaQrLqu3YFyl/ut0ahsIie/anv21e9WMcA050EA=
Subject key identifier: DD:6E:19:44:7F:7E:BB:1F:61:98:12:9C:21:9D:55:6D:94:11:C7:A1
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 827B07FE
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3W4ZRH9-ux9hmBKcIZ1VbZQRx6E.roa
Signing time: Mon 09 May 2022 12:11:38 +0000
ROA not before: Mon 09 May 2022 12:11:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:180:a810:6542/128 maxlen: 128
2001:67c:64:ffff:0:180:466e:42dd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:8961:505f/128 maxlen: 128
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2189101054 (0x827b07fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 9 12:11:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dd6e19447f7ebb1f6198129c219d556d9411c7a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:21:48:c4:fb:a2:66:92:01:30:18:9a:01:31:
62:1d:58:cd:e7:fd:d4:2d:69:45:da:53:84:be:fe:
74:ae:2b:7a:a3:67:13:f8:1b:fe:b2:8c:19:2f:d0:
50:28:b8:47:b5:c8:c5:76:9d:d6:0e:d3:be:8f:61:
62:2c:fe:03:1d:69:98:a9:ca:3c:45:d4:36:1f:e1:
56:d8:f4:2b:c0:fa:a3:3e:b7:d1:19:87:6c:23:11:
ed:e0:29:42:c5:6e:10:ee:53:9d:da:ec:cf:f8:2d:
23:81:e1:55:e6:e8:35:54:24:c6:11:64:73:50:4f:
b7:29:dd:79:fb:d2:e5:69:64:1f:4c:a0:eb:43:0b:
fd:b6:00:67:94:8b:4b:e8:ff:20:e4:76:b5:05:2e:
b6:12:ae:0d:68:87:d1:6c:88:dd:d1:c9:6d:5c:48:
66:f7:a6:ee:2a:f3:c5:04:e4:ca:33:cf:f3:55:8c:
8a:2b:5f:40:46:e0:a2:67:68:05:4e:0c:20:0e:6d:
69:46:1d:0a:01:ee:5a:e0:97:f9:e1:62:51:f4:24:
5c:1f:68:0e:2b:7d:94:7d:ff:1c:2a:55:15:a8:76:
81:a7:bd:43:48:3a:c3:45:56:b4:da:45:42:05:6e:
de:ad:63:b4:9f:16:e4:56:6b:5b:b3:60:62:2a:e3:
0a:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:6E:19:44:7F:7E:BB:1F:61:98:12:9C:21:9D:55:6D:94:11:C7:A1
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3W4ZRH9-ux9hmBKcIZ1VbZQRx6E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5d:7d:df:f9:82:71:a8:a7:43:a9:5e:7e:4d:b7:85:a4:00:26:
55:7a:57:dd:69:55:6a:fc:a4:e5:72:53:42:3a:fd:a2:9e:bd:
27:b9:8e:4d:4b:d1:c3:c9:61:69:61:9c:77:de:dc:3c:0a:70:
32:52:84:9a:1c:d5:7f:d7:66:cb:dd:01:45:7e:90:1f:cf:26:
96:1f:b8:30:b9:11:db:42:dd:8e:b8:4f:eb:43:fe:8a:73:4d:
2d:29:25:f4:d2:c8:38:cb:e5:c0:62:d1:bd:7b:6c:89:79:ab:
bc:81:1d:b7:6d:1f:86:e1:92:05:b2:bb:89:95:2f:2c:1e:95:
5f:bc:0e:de:e0:f7:fa:b0:7a:b3:64:2a:46:fb:6a:13:60:14:
c1:c8:d7:15:67:7c:0d:d1:d9:95:84:c1:da:7b:9b:a1:fe:5b:
9f:90:0c:bb:84:c6:27:d4:0c:19:c5:27:ed:e0:62:30:d8:66:
1b:0f:79:59:f9:94:7f:f5:ab:e3:0c:82:96:65:c4:2b:41:15:
e0:56:f0:c4:a4:16:f0:6d:06:9b:e9:ca:f3:d1:ea:4b:d3:ea:
07:2f:1f:32:0b:5e:21:ad:5b:7c:b5:6c:08:ef:29:9b:a8:a2:
66:ce:0a:89:3d:d8:1d:66:22:cc:70:b9:78:46:a1:12:ad:ae:
bb:10:bc:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 05:14:50 2025 by rpki-client