Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3WF-oQokTxe1xrfQ2JaUT_XtzsE.roa
File: 3WF-oQokTxe1xrfQ2JaUT_XtzsE.roa (raw, json)
Hash identifier: 47NkZkAM3ud7j1NKeA5/8xbU0hPrxJaNdnAiZxQRn84=
Subject key identifier: DD:61:7E:A1:0A:24:4F:17:B5:C6:B7:D0:D8:96:94:4F:F5:ED:CE:C1
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01862DB9B1A38442B50CCF04E0051CDAEF2F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3WF-oQokTxe1xrfQ2JaUT_XtzsE.roa
Signing time: Tue 07 Feb 2023 21:13:09 +0000
ROA not before: Tue 07 Feb 2023 21:13:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:2d:b9:b1:a3:84:42:b5:0c:cf:04:e0:05:1c:da:ef:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 7 21:13:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dd617ea10a244f17b5c6b7d0d896944ff5edcec1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:7f:05:ab:da:b9:48:c1:a1:fa:4f:b1:2a:c5:
34:6b:4c:0e:f4:d3:b9:fd:02:c2:fe:c2:94:0c:ed:
96:50:af:ef:29:72:46:a5:ae:8f:67:03:a4:1e:02:
44:ed:e2:18:40:e5:1f:6b:05:1d:66:79:16:d8:90:
54:3f:d8:58:75:9e:4f:ec:18:6f:13:25:2c:49:87:
1a:51:ac:df:df:4a:5e:85:c0:13:cb:5b:47:b2:29:
98:be:b4:30:f0:03:48:ef:7c:1b:f1:ac:08:96:2c:
45:6b:09:4a:3e:d4:4f:e5:39:ad:23:ae:8e:f0:d8:
76:51:51:0d:1c:cf:f4:83:d3:82:2f:26:e9:92:11:
77:d8:ce:58:10:9b:06:e1:a0:2c:a6:59:c2:d2:ed:
d4:0c:4e:ca:c3:52:48:7a:ae:4b:2e:77:1f:b7:f5:
5d:b5:80:d1:4c:c4:cc:ef:b1:8e:11:67:fd:a4:59:
26:6d:43:0f:1f:ed:a2:74:cb:c0:9a:4e:ae:71:32:
4a:28:b3:4b:4b:c1:6a:5f:c5:6c:3c:87:62:67:77:
0d:32:68:0f:aa:42:74:e7:20:fe:1e:25:f6:a3:9c:
50:1d:23:34:ba:b2:45:23:6b:98:99:ae:21:76:73:
f1:08:e9:c1:e0:4d:86:ca:78:23:47:aa:04:84:30:
17:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:61:7E:A1:0A:24:4F:17:B5:C6:B7:D0:D8:96:94:4F:F5:ED:CE:C1
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3WF-oQokTxe1xrfQ2JaUT_XtzsE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6c:4e:64:64:20:9e:05:87:f3:0e:3e:58:cd:00:d8:65:3d:6d:
90:80:8f:48:81:98:dd:73:33:7a:7f:f5:a0:c0:0b:a9:ed:51:
37:5d:97:73:ac:1a:9e:65:de:36:7f:2f:b0:77:7b:3a:75:fa:
69:cc:ac:fd:c4:7e:68:bc:f1:d8:41:26:2b:2f:0c:9a:5b:e3:
15:f0:19:fe:7c:28:8c:f1:19:51:14:76:6a:f7:69:29:f4:23:
c6:73:2a:57:7a:0e:eb:af:2b:c4:46:5b:b8:fe:82:07:6c:8e:
54:8f:25:d7:d5:d6:5d:84:68:7a:40:9c:61:cb:3d:d5:5c:76:
60:b3:69:a1:51:af:42:8f:03:2b:09:e1:52:0c:b0:5c:dc:c6:
02:17:54:49:73:4d:4c:e4:c4:54:8f:1b:05:45:a3:86:e0:31:
79:0b:18:01:97:94:67:03:23:c6:22:1f:fb:20:b3:39:32:30:
42:8e:8d:10:10:46:26:b8:68:40:33:f0:1c:a4:6d:28:e2:a1:
98:05:7e:2b:62:b1:0a:c1:68:90:69:ce:10:bc:6b:6c:66:13:
4b:6d:2a:a7:fa:b5:64:99:fd:5d:92:23:d6:81:e5:c3:7e:f3:
c4:1d:ac:3f:e1:ea:71:bf:48:31:f5:44:ef:5f:b9:ec:0e:69:
58:00:9f:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:51:03 2025 by rpki-client