Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3ih_gwWRHliRD_zdPjy2YfO0JaA.roa
File: 3ih_gwWRHliRD_zdPjy2YfO0JaA.roa (raw, json)
Hash identifier: 7HhZlMe6+sG4DmzXoelvyP3dnrYYMXiTVGHylawreqc=
Subject key identifier: DE:28:7F:83:05:91:1E:58:91:0F:FC:DD:3E:3C:B6:61:F3:B4:25:A0
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01888A2D6A0ACE72508B7248E7AA9B1C6203
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3ih_gwWRHliRD_zdPjy2YfO0JaA.roa
Signing time: Mon 05 Jun 2023 06:10:12 +0000
ROA not before: Mon 05 Jun 2023 06:10:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:8a:2d:6a:0a:ce:72:50:8b:72:48:e7:aa:9b:1c:62:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 5 06:10:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=de287f8305911e58910ffcdd3e3cb661f3b425a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:fd:65:f9:cb:23:d3:bd:ff:f1:ac:ed:06:7e:
a0:de:88:25:27:58:24:02:96:45:e1:bd:7d:da:a0:
cd:82:54:58:d1:4b:d5:f8:e4:df:22:0e:cc:b3:c2:
4a:a8:ff:2f:30:81:db:81:43:7b:fd:aa:54:cb:5c:
5d:48:c9:74:81:ad:45:1b:03:1c:ab:5a:88:db:a9:
17:38:4a:80:ac:45:2f:5b:4c:0a:8a:41:35:bc:4f:
9f:69:52:58:27:9e:b7:a6:25:14:c7:76:29:d0:a3:
d1:22:52:8c:df:24:f7:72:b4:df:63:a5:1e:96:72:
7c:d1:3c:19:41:17:eb:66:f7:17:cd:12:48:dc:92:
9f:c3:77:de:1a:a7:ff:19:d1:e5:40:f0:22:46:70:
64:c1:3a:3c:0d:8b:66:a3:b0:fe:26:36:82:47:d0:
35:63:76:02:67:97:b0:d0:0e:f0:41:1e:40:93:06:
54:b2:da:75:50:d3:17:be:de:4a:17:74:69:67:90:
d8:84:da:05:75:4d:03:6c:d0:b6:7d:f1:b5:dd:6a:
6f:1d:1e:01:50:77:e4:3a:16:6d:a6:fb:a1:d6:90:
88:9c:30:df:92:e3:4e:b2:5b:7d:57:f8:47:7e:89:
a6:a0:05:8d:98:66:1a:ac:cf:9e:fb:94:8d:e4:84:
93:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:28:7F:83:05:91:1E:58:91:0F:FC:DD:3E:3C:B6:61:F3:B4:25:A0
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3ih_gwWRHliRD_zdPjy2YfO0JaA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
98:5f:be:28:1c:1d:b7:7d:43:92:6f:de:31:ca:aa:91:49:dd:
cd:c9:85:54:ea:33:e7:ad:75:82:c7:dd:c0:cc:79:e1:77:fb:
52:5e:ee:05:8c:53:ea:da:ad:c9:b3:d0:6d:5c:19:46:d7:5e:
6b:56:b2:60:cd:b8:8d:52:e1:48:ff:5e:92:2a:30:ab:ab:70:
b3:c7:23:52:af:4e:fa:11:cb:aa:59:5e:f5:8f:5f:a7:7a:68:
25:80:40:4a:cb:08:1e:63:43:da:57:3b:c3:2d:86:c0:5a:f0:
29:83:ba:07:9b:74:c9:20:fc:ae:46:5d:ca:91:76:e1:ae:f3:
4c:5e:71:e7:dc:f1:bd:de:2d:c7:db:3d:20:04:21:ca:7c:ba:
74:0e:aa:04:fd:04:e3:6b:b4:75:a7:ac:1b:0e:85:c8:d0:5f:
84:51:1d:9c:48:f5:45:cd:12:17:af:0a:7f:3e:64:98:bd:6c:
99:5c:e7:cf:48:1a:5d:00:d2:c6:46:df:f8:94:a2:49:bf:94:
53:46:34:eb:28:84:aa:ee:97:1c:89:e8:88:88:af:1a:1e:58:
be:35:c0:0b:44:06:56:c0:d5:ab:a6:20:7c:e8:29:2c:06:f2:
de:71:8f:33:08:82:70:e6:1a:d6:52:4a:55:48:3e:cb:c9:5c:
0a:2e:79:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 16:14:55 2025 by rpki-client