Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3W7fwif3C4DvAWHXf1xvAWjhCNY.roa
File: 3W7fwif3C4DvAWHXf1xvAWjhCNY.roa (raw, json)
Hash identifier: 69/qQw9JxSJmuBuYkNQ/JYcecGE0VTUACxEqhBoKFDo=
Subject key identifier: DD:6E:DF:C2:27:F7:0B:80:EF:01:61:D7:7F:5C:6F:01:68:E1:08:D6
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01873A60CB885C0F67D15BAD1CCAB794B019
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3W7fwif3C4DvAWHXf1xvAWjhCNY.roa
Signing time: Sat 01 Apr 2023 01:13:54 +0000
ROA not before: Sat 01 Apr 2023 01:13:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:3a:60:cb:88:5c:0f:67:d1:5b:ad:1c:ca:b7:94:b0:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 1 01:13:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dd6edfc227f70b80ef0161d77f5c6f0168e108d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:22:2f:e9:3d:7b:fd:ed:55:d9:c9:25:e2:52:
da:56:22:5b:91:fc:9e:94:98:b8:46:72:03:da:ae:
e9:36:81:48:5e:ed:e5:d2:ce:31:5f:31:9a:f4:07:
b3:94:28:fc:e7:03:73:05:80:94:68:1b:09:1a:fc:
74:7e:95:71:a9:30:a8:a6:8a:cc:c5:6a:8d:91:02:
e2:cf:8c:c4:49:45:e4:71:32:89:5b:97:f7:d1:26:
5a:10:b9:05:51:11:e1:7c:e8:ff:fa:f0:c2:3a:a1:
69:9f:3e:e9:7e:59:e0:62:62:d3:37:45:f2:29:01:
e7:88:1d:71:68:a6:e3:6b:f9:6c:16:d7:1e:0c:ca:
40:70:54:d9:6d:bc:e9:7f:ca:5e:cf:79:3a:be:09:
e6:1d:c2:88:40:02:f1:e0:b2:79:20:12:0b:08:b2:
a8:3a:6a:25:49:fb:b1:68:36:70:f4:bc:1d:61:87:
51:d5:dc:b0:2a:47:4a:98:e8:c2:2e:ed:4c:8b:c6:
2f:6f:79:82:86:87:08:20:cc:09:0c:9e:31:23:da:
11:44:3d:89:9d:13:cf:b4:09:04:21:b1:0e:5c:75:
24:11:b1:cb:da:2a:9d:04:7c:56:79:67:32:ae:89:
ab:04:da:bf:13:5d:22:94:ef:24:7b:4b:cc:19:3b:
76:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:6E:DF:C2:27:F7:0B:80:EF:01:61:D7:7F:5C:6F:01:68:E1:08:D6
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3W7fwif3C4DvAWHXf1xvAWjhCNY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
11:70:d4:90:a2:63:a9:26:2b:3a:cf:14:d5:cb:82:e4:b1:1f:
26:ca:72:cd:81:8a:eb:a2:98:8f:1e:f5:99:6b:14:e0:46:a6:
f1:76:48:5a:51:f9:04:fa:ef:bf:6e:92:19:cf:dd:f6:d7:9f:
3b:b2:75:a1:2f:c0:44:c0:c0:83:60:43:a7:3f:9d:b1:47:98:
68:ea:8a:2b:3a:8b:75:b7:ca:43:3d:3b:bb:1d:9d:fc:e6:44:
64:e9:63:2b:00:3c:0e:a5:fd:69:dd:8b:9a:fb:a4:14:5b:72:
cd:da:aa:db:98:68:20:a0:71:70:f1:32:bb:db:04:88:de:ea:
22:ae:89:16:99:af:d8:bf:e2:32:47:7a:b7:5c:aa:0a:e6:8a:
f9:c3:cd:20:c6:96:06:10:c5:99:cd:50:30:4b:d0:f3:fc:87:
6f:dc:0e:14:05:b9:2d:1f:73:22:a5:b8:a4:50:6e:72:bc:e3:
56:40:dc:a6:ff:93:28:72:63:fe:49:6d:90:e1:f9:df:69:58:
c0:69:ea:74:ff:89:3d:f0:4f:f1:12:a3:86:ea:96:2b:7b:cb:
0b:ef:94:13:32:d5:bd:c5:8d:86:01:69:c6:32:dc:f0:9e:44:
65:48:db:ab:1a:8d:f6:07:0b:32:1f:1e:46:20:8b:58:5b:ca:
dd:10:ca:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 10:03:54 2025 by rpki-client