Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3XPHkCMzEsxQdIFcaZm0xTLeWFY.roa
File: 3XPHkCMzEsxQdIFcaZm0xTLeWFY.roa (raw, json)
Hash identifier: odR9iYgrZa31QE4qtkjyBpNuMSD1hiTdya15eIQN7tQ=
Subject key identifier: DD:73:C7:90:23:33:12:CC:50:74:81:5C:69:99:B4:C5:32:DE:58:56
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187FBE8C8CBFEE862484F5D636B6E6619AB
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3XPHkCMzEsxQdIFcaZm0xTLeWFY.roa
Signing time: Mon 08 May 2023 15:09:09 +0000
ROA not before: Mon 08 May 2023 15:09:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:fb:e8:c8:cb:fe:e8:62:48:4f:5d:63:6b:6e:66:19:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 8 15:09:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dd73c790233312cc5074815c6999b4c532de5856
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b6:5d:0a:99:d7:44:87:bc:81:ad:cc:ff:92:
ca:b5:66:b7:07:84:e0:27:c4:e9:d6:64:00:87:63:
91:2b:7f:6e:da:4e:8f:5a:3b:ba:75:bd:32:09:a9:
e6:0d:9d:cc:d7:a0:2d:ec:67:55:4a:e6:f1:00:fe:
2b:22:3d:08:6e:ce:4c:b5:6f:e2:d1:91:f8:91:8a:
e4:d6:72:37:09:8a:b5:41:64:22:ac:5a:2d:e4:7e:
4a:78:8b:af:8d:f0:f1:a4:41:2c:e0:85:17:27:fc:
34:b0:29:30:9a:23:30:40:c4:97:d0:c8:75:a0:0e:
9f:c1:64:3c:24:de:03:3b:c8:f3:e9:db:a3:f1:98:
eb:bb:b6:6a:6d:c0:6a:90:01:8c:88:34:73:91:24:
6e:3c:2f:ef:62:1f:aa:3b:b9:9b:92:39:09:28:52:
ce:bf:61:f2:e0:2c:3b:8c:e5:b3:a5:47:e0:c1:c4:
7b:74:31:50:15:d5:ca:b4:76:ce:1b:bc:ee:0a:91:
07:52:ec:29:31:51:c4:35:df:14:ef:35:3c:ee:20:
7c:08:30:f4:c3:ae:b7:7a:9a:bf:22:8d:62:e3:35:
de:fa:f1:b9:c5:f0:0d:21:a8:66:13:f4:d8:a9:db:
46:a6:17:00:d7:0d:8c:6b:c3:e0:cf:3f:5b:be:fa:
f8:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:73:C7:90:23:33:12:CC:50:74:81:5C:69:99:B4:C5:32:DE:58:56
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3XPHkCMzEsxQdIFcaZm0xTLeWFY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1e:26:a4:3f:e5:ff:d8:58:12:f0:c8:3e:4f:48:23:f8:57:63:
d0:29:a8:23:24:3f:2a:c2:d4:27:66:60:b8:ce:aa:db:93:ac:
3b:e6:95:33:fd:80:54:9b:45:18:a6:94:94:37:71:31:9c:59:
07:93:fd:26:e0:80:f1:14:04:d1:77:72:90:c1:4c:01:dd:aa:
1d:18:ca:1f:40:94:0b:71:15:2c:97:9a:00:87:02:63:ae:3f:
da:e1:7e:bd:34:5a:4c:a5:71:6f:ef:19:fd:2b:bf:89:1e:e1:
78:17:f0:60:ea:c5:3a:00:fd:10:38:cc:81:53:e1:f8:88:6f:
63:d0:de:e4:cf:e0:b3:e1:a5:c3:35:8a:50:b5:4f:a0:ca:a6:
8e:6d:e5:f4:13:35:fd:b1:f5:53:90:2f:03:17:da:2c:75:f4:
6b:70:0f:71:c2:8c:4a:fb:9a:a6:da:13:bc:9b:95:f1:c9:30:
74:c8:96:ba:b5:7f:78:27:86:71:ff:97:a8:88:21:37:3f:68:
47:f4:11:79:f6:43:1b:ae:34:e9:8f:a5:25:25:18:89:83:95:
56:13:33:91:2d:69:fb:ed:59:d3:db:06:58:14:84:b5:a6:47:
2d:99:0d:c1:6f:da:8d:8e:dd:11:22:1b:9d:84:76:5f:98:a4:
7d:05:03:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:12:16 2025 by rpki-client