Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3iiv6-4JjCCMQji9dLrk98FJcfU.roa
File: 3iiv6-4JjCCMQji9dLrk98FJcfU.roa (raw, json)
Hash identifier: 2buWyW3QfJknMOg90r7DIy/abwO4tSFi4Mpnu15XKIE=
Subject key identifier: DE:28:AF:EB:EE:09:8C:20:8C:42:38:BD:74:BA:E4:F7:C1:49:71:F5
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187443767E767F72E733BF9645AC47D5EFE
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3iiv6-4JjCCMQji9dLrk98FJcfU.roa
Signing time: Sun 02 Apr 2023 23:04:54 +0000
ROA not before: Sun 02 Apr 2023 23:04:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:187:4436:bfa9/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:44:37:67:e7:67:f7:2e:73:3b:f9:64:5a:c4:7d:5e:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 2 23:04:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=de28afebee098c208c4238bd74bae4f7c14971f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:40:21:ac:b5:f2:a8:58:88:c8:6e:fd:a2:2d:
a5:86:f4:03:e0:a0:57:59:87:c5:9b:5f:8c:52:16:
a9:f4:b4:61:da:5a:d1:3e:ec:63:a2:71:ce:a9:b6:
98:fd:94:58:9f:ac:c4:f3:c1:df:41:64:c0:31:75:
e9:e8:b0:8f:ac:7e:f3:57:6d:f3:1a:99:af:d0:98:
bf:b6:a0:82:ca:63:9c:d5:c8:94:6b:78:ab:a5:28:
45:bb:08:b7:fd:a6:ec:2f:25:58:89:15:cf:61:fb:
07:11:19:a9:71:9b:50:1f:7a:f7:4f:cb:a9:ee:01:
6a:43:1e:c4:30:cd:52:b8:3f:f9:1f:3e:fd:ba:52:
3c:f5:16:7e:1f:9d:f1:97:c0:79:a9:b9:36:a7:c4:
50:dc:b1:41:98:b5:4e:31:a6:5d:65:da:8b:a0:d6:
77:31:f0:a5:f7:a7:ae:77:62:04:68:16:b2:26:7b:
85:84:73:92:92:15:be:40:7b:55:63:70:fa:58:a3:
a9:b2:d1:b0:8a:3f:e9:b1:08:f6:e9:e3:18:64:b2:
c0:97:91:12:6b:dc:fb:ce:42:03:6e:c4:f7:b0:8a:
2c:c1:38:56:97:6b:99:f6:20:fc:c8:3b:34:c5:d7:
96:b9:d3:df:20:78:b2:a4:3e:00:f5:ac:9c:f4:ec:
5d:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:28:AF:EB:EE:09:8C:20:8C:42:38:BD:74:BA:E4:F7:C1:49:71:F5
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3iiv6-4JjCCMQji9dLrk98FJcfU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
99:ce:b4:0a:70:9e:e6:d4:d0:47:f4:e5:23:4d:42:b6:d0:94:
fc:b1:b9:81:ca:ce:1b:42:e1:42:5d:05:e1:50:24:1c:a1:82:
55:8b:c2:5e:df:75:c7:16:8c:85:9c:c6:c4:f5:b6:26:29:18:
7c:1e:35:eb:9b:7a:a0:b4:7b:66:26:df:22:0d:04:46:99:a4:
f9:ce:df:7d:d2:de:5a:21:23:84:7a:5f:66:e8:7b:e4:97:be:
ea:ed:cf:28:7a:08:e2:6d:c5:88:61:99:7a:67:53:d4:2c:0f:
a4:49:e1:73:01:05:55:a2:bf:4c:ed:c9:1f:98:72:79:62:6e:
79:c2:6f:7b:d1:9c:40:3b:9b:23:0b:67:db:e3:c3:ba:c1:75:
93:16:79:9d:63:45:2b:dc:85:48:ac:14:75:60:af:fc:bf:4d:
9f:ae:a2:05:24:4f:4e:ba:ac:2b:cc:e9:1a:03:1b:24:a1:ba:
14:50:45:59:35:37:54:49:1a:93:e1:02:b1:53:cd:49:18:0a:
bf:9e:2f:ed:7f:d9:25:be:cf:b3:fe:5b:e7:ad:97:1a:a2:ac:
75:d4:af:25:ed:46:2a:d9:8b:36:83:d8:df:c5:74:41:56:24:
3f:33:d9:46:fd:a7:eb:6b:2f:68:5d:01:29:bb:e9:a7:e2:92:
33:fa:72:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 14:28:43 2025 by rpki-client