Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3f4JZITSrApLtQej8_nP6ASChy0.roa
File: 3f4JZITSrApLtQej8_nP6ASChy0.roa (raw, json)
Hash identifier: WRH7zbYMZVPm+XShde+lPXsUNBGawlqA/KYsI/0vj3A=
Subject key identifier: DD:FE:09:64:84:D2:AC:0A:4B:B5:07:A3:F3:F9:CF:E8:04:82:87:2D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01873FF5ED27D470D63744EC5AF347421CC5
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3f4JZITSrApLtQej8_nP6ASChy0.roa
Signing time: Sun 02 Apr 2023 03:14:54 +0000
ROA not before: Sun 02 Apr 2023 03:14:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:3f:f5:ed:27:d4:70:d6:37:44:ec:5a:f3:47:42:1c:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 2 03:14:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ddfe096484d2ac0a4bb507a3f3f9cfe80482872d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:fc:c0:6b:0d:95:94:a2:d9:39:1c:6c:99:6f:
41:80:1a:77:69:a7:a6:b8:1b:51:63:6e:44:a9:22:
b0:28:15:b0:19:90:5c:1d:11:32:b2:a1:c5:9a:b7:
26:6a:59:19:4f:d0:86:0f:2f:1e:65:8d:73:07:ca:
3b:bd:70:42:fb:33:49:25:fe:14:19:07:05:0f:e5:
d7:d4:44:93:6b:ea:b3:59:7c:0f:c4:41:4c:ad:e9:
75:1e:ab:8a:7b:73:c4:b4:ae:a4:5b:5b:a8:e2:8b:
f6:2e:54:d5:45:16:e3:e8:f7:5d:cf:d1:ff:8e:19:
d7:ed:57:18:da:93:af:86:08:c1:05:38:ea:02:4b:
e6:b0:c2:39:c7:71:85:17:5f:8e:7f:88:39:e4:a2:
3c:46:79:48:d5:ff:35:da:c7:97:45:ea:a5:db:4b:
dd:15:55:db:3f:92:f0:c1:73:92:a0:ed:3e:0a:fd:
89:47:9d:75:f1:e9:cb:38:37:df:c9:95:4a:db:38:
04:eb:01:f0:48:4f:30:31:68:e8:0d:81:a8:b7:19:
d6:88:fa:4f:cd:fe:85:67:03:b8:17:54:83:6a:b9:
f6:5e:8d:68:01:0a:89:04:d0:f5:b8:40:c4:4c:6a:
1e:39:02:6c:d9:d8:95:39:e7:bf:b8:0c:7b:c8:0d:
27:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:FE:09:64:84:D2:AC:0A:4B:B5:07:A3:F3:F9:CF:E8:04:82:87:2D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3f4JZITSrApLtQej8_nP6ASChy0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
af:2e:a3:09:9d:ac:ef:2f:23:f8:b3:c7:82:c7:ae:97:88:75:
75:37:36:a6:7b:7c:56:27:00:d0:c0:7c:ab:4e:15:87:6f:9a:
96:1d:4a:f2:b8:66:75:cd:85:53:46:75:02:53:19:f5:63:9b:
2f:83:a1:96:f1:93:39:16:68:ea:e7:a5:bb:a8:0f:e9:c8:9e:
db:6e:d9:1e:a7:80:f6:d7:d6:96:2e:4c:6c:91:0e:8e:be:33:
9a:51:e4:43:a0:11:67:a0:9e:d8:71:df:c1:ff:da:b7:48:e1:
b2:94:27:16:85:d5:a9:56:17:d5:30:3c:f6:79:5e:da:e6:74:
47:86:ab:39:ac:4b:ca:30:b5:28:6f:d6:20:1a:86:5d:ff:a4:
d9:d7:2a:59:eb:54:f2:3a:1d:6f:80:9f:08:e8:a6:d6:31:23:
3b:73:81:cb:53:80:f9:9e:9f:47:33:f3:f3:75:c4:fc:c3:3b:
f4:8e:1c:97:60:a0:c4:47:ab:e9:86:bd:d5:70:d9:37:0c:41:
c0:ea:24:a7:93:9e:af:c6:3a:5c:02:f3:1c:89:27:60:03:11:
58:81:e1:25:88:f4:e5:40:ca:13:87:ef:ca:20:57:72:93:eb:
d9:c5:eb:2c:d4:fa:4f:4e:ed:64:7f:63:e0:31:8b:34:ad:79:
10:95:00:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 22:01:05 2025 by rpki-client