Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3YTA-Ch9G0seH8PscpuNCmh88p8.roa
File: 3YTA-Ch9G0seH8PscpuNCmh88p8.roa (raw, json)
Hash identifier: o5c9vasZ3PMTVhBscmRjk7LVvcD3yO0+t/NHE1ZQ0gM=
Subject key identifier: DD:84:C0:F8:28:7D:1B:4B:1E:1F:C3:EC:72:9B:8D:0A:68:7C:F2:9F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01869594D9BBBE929CC795083884F6899228
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3YTA-Ch9G0seH8PscpuNCmh88p8.roa
Signing time: Tue 28 Feb 2023 01:13:25 +0000
ROA not before: Tue 28 Feb 2023 01:13:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:95:94:d9:bb:be:92:9c:c7:95:08:38:84:f6:89:92:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 28 01:13:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dd84c0f8287d1b4b1e1fc3ec729b8d0a687cf29f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:14:b6:bc:48:c2:a0:2a:60:f3:18:14:51:52:
09:3c:77:15:e6:91:b7:a2:27:f8:e3:e3:7b:0c:eb:
ab:b5:3e:69:fd:02:8e:11:00:45:8a:96:d1:1b:ae:
24:88:f9:0e:75:58:18:89:e8:57:01:4e:bf:7c:89:
b4:79:85:1c:06:47:09:cc:5c:5a:5a:dd:66:34:2e:
66:f8:40:a4:a7:1e:70:97:97:49:21:f1:eb:eb:c8:
f7:0a:20:a8:6f:02:4f:f3:33:b7:57:c5:99:85:da:
f2:09:36:79:b3:05:e9:52:b1:26:34:07:70:89:b8:
0e:a9:45:65:15:8e:6f:f2:7a:ac:a6:ca:47:d3:04:
43:16:86:9e:cd:24:fa:b7:11:8d:ae:a3:35:6b:21:
b3:5e:b7:ae:ec:c9:16:4c:be:92:ac:42:91:e1:6c:
9c:73:ce:8e:2b:3b:a3:5a:09:d4:b2:43:9b:f4:87:
cf:07:01:16:86:d4:56:af:38:a6:62:2a:a8:1d:64:
ca:41:d0:c1:c5:c9:43:5b:35:cb:85:03:4f:32:0c:
fd:f1:72:56:c3:04:29:66:f8:b0:65:ae:98:a0:f2:
b3:17:0d:64:07:69:db:45:52:91:f6:4c:23:2d:66:
72:4b:6f:86:d6:a5:8f:ef:1e:3a:67:e9:15:d7:c1:
2a:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:84:C0:F8:28:7D:1B:4B:1E:1F:C3:EC:72:9B:8D:0A:68:7C:F2:9F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3YTA-Ch9G0seH8PscpuNCmh88p8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
65:8d:6f:ba:d3:77:b5:04:f0:2c:ae:75:d5:6c:e0:49:7c:1d:
fe:a2:90:71:e9:91:e2:3e:ea:bb:1e:0f:05:44:d0:00:01:ad:
84:24:ed:cc:65:12:d0:61:0f:82:d9:fb:d0:86:d7:f3:e0:61:
b5:b3:89:c8:0b:e6:f0:13:c2:30:c1:30:9e:65:1a:6b:a4:20:
19:6d:ad:69:b8:cb:f7:58:6c:67:d1:1f:46:27:36:c5:cc:6f:
25:bd:51:cd:b2:1c:f8:cb:c3:ac:40:f8:b0:31:6c:3e:00:5d:
93:84:4e:ea:bb:28:1f:9c:23:74:0d:03:6a:b3:58:bd:e4:63:
cd:df:ad:d5:ef:d3:20:cc:d0:c8:8d:cb:71:c2:d3:e9:0a:2d:
8e:c9:cb:d9:17:da:1f:05:e2:e9:e6:0b:cc:f3:1d:26:3a:05:
d7:1b:72:51:c3:50:a5:5f:84:36:e7:35:d8:18:10:bb:c7:1d:
a9:b1:a3:44:f8:68:ee:47:a6:4b:b3:b2:5e:31:91:0b:62:3e:
b2:f9:92:62:60:0c:a4:34:93:d8:be:10:64:27:14:eb:8e:59:
20:49:07:c0:39:2e:e7:ad:ab:98:0b:28:9e:04:c1:c9:3c:27:
01:72:d0:50:76:1f:c5:a3:1b:2e:e9:8b:80:a2:3c:e6:f2:ac:
9a:9c:d7:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 22:53:17 2025 by rpki-client