Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3buABP0flLz86Sy4So_jUKE7_YE.roa
File: 3buABP0flLz86Sy4So_jUKE7_YE.roa (raw, json)
Hash identifier: sibZx9J6vKYUgBGjZIsTamJJ+tMFu6SAaMlSF6ER0kY=
Subject key identifier: DD:BB:80:04:FD:1F:94:BC:FC:E9:2C:B8:4A:8F:E3:50:A1:3B:FD:81
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 85E7F115
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3buABP0flLz86Sy4So_jUKE7_YE.roa
Signing time: Sat 21 May 2022 01:11:29 +0000
ROA not before: Sat 21 May 2022 01:11:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:180:a810:6542/128 maxlen: 128
2001:67c:64:ffff:0:180:ddb5:bc5/128 maxlen: 128
2001:67c:64:ffff:0:180:466e:42dd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:e0ec:efe1/128 maxlen: 128
2001:67c:64:ffff:0:180:8961:505f/128 maxlen: 128
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2246570261 (0x85e7f115)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 21 01:11:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ddbb8004fd1f94bcfce92cb84a8fe350a13bfd81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ab:a4:ff:1d:dd:40:bd:cb:75:dc:19:4a:51:
4f:b8:90:4e:d5:51:db:06:f0:19:e3:0e:93:af:91:
5f:2c:29:71:d6:74:18:93:b3:28:93:dc:1b:12:bc:
ac:e1:66:49:7f:00:a0:a5:69:83:c3:5b:68:a4:20:
1e:fb:a8:ad:96:f7:b3:24:86:f7:df:b3:55:ff:2e:
9f:6d:40:be:c3:6e:e6:15:3f:16:9a:d7:e4:d7:bc:
93:db:87:34:ee:94:e4:31:87:02:b1:69:ad:be:55:
90:04:f9:6e:b7:c7:44:63:27:a2:6c:67:8f:01:08:
cf:51:e8:25:f2:9f:24:b6:53:ac:f8:2b:de:2f:99:
b0:de:13:28:cd:b1:e7:3d:9d:12:44:7d:b8:6f:e0:
4e:9b:89:19:fc:bb:ec:4e:97:0c:c3:a7:df:3a:54:
28:f8:76:95:55:58:69:bc:15:c4:2f:7b:2c:94:28:
c3:6c:b3:21:0b:87:23:1e:5b:bc:bc:dc:4e:2f:af:
2b:8a:60:70:43:eb:22:53:fb:90:ed:15:18:77:8d:
d8:c8:57:7a:12:41:c4:c6:b6:f8:0d:1f:dd:84:8b:
0b:c8:1b:3e:57:df:90:15:97:6a:36:c1:cb:2e:50:
5a:57:7a:2c:fe:f0:94:d3:59:0b:7d:6d:e8:57:3c:
7f:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:BB:80:04:FD:1F:94:BC:FC:E9:2C:B8:4A:8F:E3:50:A1:3B:FD:81
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3buABP0flLz86Sy4So_jUKE7_YE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
52:03:f4:7c:31:e3:3b:13:55:1b:65:45:0a:03:9f:16:8d:58:
95:bf:ed:b2:34:bd:98:5c:98:9a:b2:f5:00:e2:3d:55:b2:c1:
cb:97:ee:23:58:a8:56:d7:5a:5c:28:99:a7:9f:ec:67:cc:39:
3a:13:1f:d3:5b:34:2c:c3:1c:4b:f1:7b:f0:89:d7:57:75:37:
2d:e9:8f:a6:4c:af:1c:00:24:8d:83:19:d2:c9:c7:76:7b:a4:
67:fa:49:23:ed:6b:5d:90:51:11:3c:c8:b8:88:c2:2e:6b:ce:
49:a3:c1:13:be:9e:d7:b6:22:6b:57:0b:d5:b4:bd:4a:a3:2b:
b2:85:e9:e4:28:37:72:1c:e6:80:94:f7:0c:86:82:77:63:11:
4a:e7:5f:51:af:17:b5:d6:b5:a3:b2:c1:c8:02:2e:1e:9c:e2:
16:88:c8:56:22:9d:7f:51:8c:6c:a3:66:34:b1:81:0a:ce:d7:
06:de:21:21:da:be:4b:17:dc:54:11:c2:bc:5a:e7:8d:05:77:
53:b4:b2:fe:74:7e:5f:a5:dd:7b:d6:65:89:5a:1c:6c:85:32:
eb:d5:3d:61:26:b5:50:36:90:d3:16:06:03:a8:85:66:1b:57:
87:12:2c:2f:55:7e:7f:31:39:f0:5d:5b:03:09:ce:02:a7:73:
e7:db:c6:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:39:11 2025 by rpki-client