Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3gC3MkNDq5kvqW26DaGBdi-iXY8.roa
File: 3gC3MkNDq5kvqW26DaGBdi-iXY8.roa (raw, json)
Hash identifier: M8uJNj53REZUolE6Yz4L8uVcYPUbCMdGuzDpm5BjHH0=
Subject key identifier: DE:00:B7:32:43:43:AB:99:2F:A9:6D:BA:0D:A1:81:76:2F:A2:5D:8F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187476F623DF6962FF482889243BE17AD4F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3gC3MkNDq5kvqW26DaGBdi-iXY8.roa
Signing time: Mon 03 Apr 2023 14:04:54 +0000
ROA not before: Mon 03 Apr 2023 14:04:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:187:476e:bda9/128 maxlen: 128
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:47:6f:62:3d:f6:96:2f:f4:82:88:92:43:be:17:ad:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 3 14:04:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=de00b7324343ab992fa96dba0da181762fa25d8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:d6:a9:92:53:ab:1a:cb:d3:f4:cf:1b:63:e3:
31:0c:e4:86:d8:20:7e:87:07:6a:b8:6b:b9:f8:c5:
7e:67:71:76:ce:03:ac:6c:f7:06:98:c1:2f:ce:f0:
62:ca:de:67:9e:99:a6:92:eb:d8:72:5c:c3:f5:64:
cf:80:63:d8:87:f7:fe:33:f8:ba:c9:11:c6:0f:c6:
85:5e:f0:ef:fd:e8:e8:2b:5c:09:3b:9c:d5:70:c8:
5e:5f:53:5e:50:d7:ec:8b:5d:f2:34:1a:55:5f:6f:
2d:5f:88:7d:3d:8f:04:da:e7:d2:37:07:37:84:2e:
5d:fd:dc:a0:bd:bf:70:b8:21:b1:69:af:08:4d:7e:
65:89:db:09:1d:bd:b3:a7:ae:45:a8:cd:b3:6c:4b:
de:79:ed:30:75:44:96:f5:c9:2f:c0:e6:c6:f2:97:
a6:42:a1:cb:57:d8:fd:51:2c:27:ff:02:65:c5:93:
5b:ee:48:d9:57:85:ec:59:4e:9a:5a:d4:26:87:d0:
5d:0e:db:42:d7:26:33:c2:09:b6:5d:59:4c:42:94:
a8:e6:62:f6:e4:81:de:a8:d7:1c:ce:da:de:b1:8f:
8d:54:58:57:34:8e:f5:6f:7f:99:27:0c:d2:95:41:
46:35:06:28:5e:0f:7f:42:69:f3:cb:1d:93:63:70:
2d:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:00:B7:32:43:43:AB:99:2F:A9:6D:BA:0D:A1:81:76:2F:A2:5D:8F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3gC3MkNDq5kvqW26DaGBdi-iXY8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
08:5c:c9:32:9a:6b:f2:f5:e9:d3:92:42:1d:e7:e0:6d:9b:8c:
d3:e4:ad:92:d9:cf:68:19:32:30:03:68:2f:00:67:ee:95:b8:
c3:4a:0b:c5:fc:a5:d5:c9:4d:96:88:59:f5:98:0b:6b:c2:e0:
cf:fc:ef:ed:ee:e3:44:5d:f7:63:98:19:2f:85:40:be:c4:31:
65:0b:15:00:82:6e:80:2e:d4:e7:30:bc:06:a8:1a:36:58:1b:
6b:e6:94:87:b9:9d:c5:fd:2c:bf:4b:2a:32:d5:c6:0e:4f:81:
3d:c3:f1:57:d5:49:87:b6:0c:b4:93:48:fb:55:03:05:6a:38:
18:bc:a2:80:dc:97:5a:d3:86:cd:aa:40:5b:c7:70:39:69:23:
66:19:14:9e:49:74:33:d0:66:8a:b7:e5:92:4e:c9:ac:a3:59:
d3:da:b4:61:b7:a2:8f:e2:84:68:f0:7c:e2:6d:ff:67:cb:a0:
eb:88:ab:4e:43:de:65:f9:51:88:e0:84:72:ae:5a:94:e6:82:
cf:d6:f6:ba:2a:df:cc:65:30:1b:be:5a:36:b5:29:02:cb:93:
f3:66:a7:1c:a1:80:94:ae:2b:33:3e:39:f1:b2:8b:27:28:63:
a3:82:45:26:9a:c4:6a:4c:07:6e:bd:cf:d1:b5:4f:8c:3c:c0:
04:ca:fb:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 17:48:25 2025 by rpki-client