Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3dDFfsEgLBWCATzgtVwg594nGg8.roa
File: 3dDFfsEgLBWCATzgtVwg594nGg8.roa (raw, json)
Hash identifier: TVr4U1sqMTVI5IZbf6DhAfy6ulSz9QeK9Md5C4DGr4c=
Subject key identifier: DD:D0:C5:7E:C1:20:2C:15:82:01:3C:E0:B5:5C:20:E7:DE:27:1A:0F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189F5E6731D3AED673C0DF0DE68E914EA30
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3dDFfsEgLBWCATzgtVwg594nGg8.roa
Signing time: Mon 14 Aug 2023 21:14:27 +0000
ROA not before: Mon 14 Aug 2023 21:14:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:f5:e6:73:1d:3a:ed:67:3c:0d:f0:de:68:e9:14:ea:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 14 21:14:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ddd0c57ec1202c1582013ce0b55c20e7de271a0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:54:ef:23:0b:4b:3a:7c:22:98:2e:20:46:57:
fd:eb:c6:27:2e:e1:fd:a4:52:b2:ad:e1:51:ef:61:
27:c4:a4:40:77:89:5d:df:4b:fe:7d:29:04:81:67:
f8:b0:7d:6b:3d:d4:85:e3:70:f0:e4:6f:ba:65:31:
61:b8:e5:4f:70:63:d6:60:0f:bb:d8:5d:8c:46:a0:
94:ed:70:d1:37:09:c4:9a:91:ac:97:8b:86:62:ca:
f4:96:54:b6:fa:39:af:fa:46:4f:fd:b7:6d:49:97:
8f:97:ef:5a:c8:ef:d2:ac:44:17:bc:e7:35:ac:cf:
52:d3:d3:5c:a7:b9:75:33:51:5d:ca:84:43:00:42:
ea:38:3a:98:37:1d:6e:16:2f:f2:54:a4:a8:89:56:
28:ed:76:73:84:25:58:16:7b:58:05:0e:d5:25:40:
73:dd:0a:5b:7a:8d:b6:e0:78:cd:ac:98:43:d0:02:
c8:76:ec:1e:a0:91:27:41:4f:47:77:3a:86:54:06:
b1:b2:7e:6f:e6:87:ea:e2:82:4f:e6:1c:21:62:08:
5d:9e:17:b5:d9:db:f8:9d:2a:b3:88:15:a5:32:fe:
30:1e:75:d5:dd:ee:7b:8a:75:85:27:eb:e4:89:c9:
ff:69:b3:bb:6b:9d:9d:70:f8:3c:03:c8:eb:88:d4:
0f:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:D0:C5:7E:C1:20:2C:15:82:01:3C:E0:B5:5C:20:E7:DE:27:1A:0F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3dDFfsEgLBWCATzgtVwg594nGg8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
97:4d:d7:53:a4:36:a8:bc:61:31:9c:a5:91:26:54:98:70:dd:
84:32:32:94:c6:0e:94:2f:56:44:62:4a:2e:9e:f0:6d:11:cb:
c1:0d:f2:b5:ac:85:34:8c:fb:5b:b8:18:52:5c:c2:4e:5f:71:
53:d2:f8:32:dd:a4:76:f4:77:13:cc:1f:2c:03:4e:51:8e:34:
0f:cc:fd:49:81:9a:ab:f4:42:3a:b8:65:79:df:0c:89:52:17:
de:96:28:80:23:e6:d0:af:b8:6c:4b:85:6d:32:70:20:41:2d:
a9:39:15:d2:95:04:e2:fa:fb:d7:88:b4:1a:ec:d9:dd:53:0b:
7f:ff:7d:87:0a:2c:bf:5f:c9:da:8b:10:9d:02:ff:77:d8:cb:
99:d6:11:0b:f4:06:65:09:e8:a8:ed:8e:e6:db:6f:f2:06:c0:
71:da:5b:1d:59:5a:2c:5b:b5:0e:05:54:4b:ef:02:74:0f:77:
64:3e:ff:0d:69:43:ea:20:7f:3f:3f:f2:08:6c:e5:01:e2:93:
29:91:d7:dd:f0:3c:fb:e1:51:61:ac:8c:08:cb:03:5e:e0:f7:
99:0c:64:57:d8:ed:2f:c6:c2:6d:5c:74:bc:99:bf:04:e6:0b:
3b:09:25:25:e8:f5:13:94:8f:c6:87:98:82:76:2b:a4:00:e2:
29:50:14:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 23:42:21 2025 by rpki-client