Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3k3vzx-wy3mmJOxn9vJWeF_1KvU.roa
File: 3k3vzx-wy3mmJOxn9vJWeF_1KvU.roa (raw, json)
Hash identifier: KfjwOnTT3v0Lrus0k2CWIJrFpAA3prd+Lf3ypcspnNg=
Subject key identifier: DE:4D:EF:CF:1F:B0:CB:79:A6:24:EC:67:F6:F2:56:78:5F:F5:2A:F5
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0181E7CDA6E72E90CE774C4D2C6612767834
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3k3vzx-wy3mmJOxn9vJWeF_1KvU.roa
Signing time: Sun 10 Jul 2022 11:10:23 +0000
ROA not before: Sun 10 Jul 2022 11:10:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:e7:cd:a6:e7:2e:90:ce:77:4c:4d:2c:66:12:76:78:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 10 11:10:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=de4defcf1fb0cb79a624ec67f6f256785ff52af5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:2a:ed:23:50:27:96:d6:4d:b9:ff:ea:6f:ce:
b2:bf:58:41:66:22:ea:42:f3:92:c3:bc:ff:a8:55:
9c:b2:d1:19:b7:a6:0a:e2:6d:4a:fc:2c:22:bb:c9:
36:54:9b:18:65:59:a8:fd:36:db:30:91:b9:4c:77:
80:fd:ea:03:af:b1:e7:c9:d9:f4:b7:7d:56:c2:f3:
79:b7:2b:59:34:e1:3c:7f:45:31:b8:7a:a8:0f:44:
64:8e:5a:9a:82:e8:1b:b9:b0:a3:be:8a:99:a4:b5:
86:ba:ed:ba:1a:06:a6:d3:a4:2a:45:19:bf:a9:45:
a3:95:06:91:27:0d:b6:e1:0f:ce:51:13:d4:7c:9c:
33:25:43:11:7e:a6:38:66:d7:37:ce:71:ed:38:02:
7e:d4:bc:4a:60:d6:f7:65:26:d0:d5:07:5a:db:70:
ce:cd:79:b8:f4:47:c1:20:05:d7:1e:6c:c6:6e:e2:
b6:c8:7d:f0:ef:45:2d:ac:4b:8a:a6:17:a1:8d:8a:
33:fb:a1:b2:91:2d:22:47:48:3e:f3:62:73:af:c1:
51:65:b9:f8:97:74:ec:33:77:92:02:6e:12:5e:fb:
ea:c8:95:bf:f3:b3:05:54:7f:b4:f8:f5:a2:15:e9:
5c:64:20:2c:54:a9:9c:ee:d0:53:ad:ab:c2:68:88:
bc:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:4D:EF:CF:1F:B0:CB:79:A6:24:EC:67:F6:F2:56:78:5F:F5:2A:F5
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3k3vzx-wy3mmJOxn9vJWeF_1KvU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9c:44:2d:ac:b8:7e:6e:62:b4:ce:29:81:97:85:e0:6d:46:41:
1a:7d:c7:13:34:51:36:e8:78:6b:e7:ed:45:cd:6b:af:97:4b:
87:ec:c5:40:9b:07:23:53:a1:ef:51:53:50:ae:4c:1a:b1:1e:
a4:02:30:12:ce:fa:dd:42:33:89:c0:c2:7d:93:29:2d:59:16:
62:8d:9f:d4:a9:8b:e8:1e:c5:d2:e2:09:55:00:4d:77:b3:e7:
c4:58:f0:f6:cd:b4:ef:53:07:a3:5a:77:bb:be:e9:5f:78:07:
76:7f:f4:c7:1b:d3:0c:2b:e4:e2:64:bb:ca:90:4a:44:44:55:
ad:51:9b:4e:a0:91:c7:84:5e:87:f9:7b:b1:f6:ce:50:dc:ff:
23:4b:3e:a1:d6:15:a7:79:71:35:d4:05:2e:7b:83:01:fd:7d:
78:57:c5:0b:57:99:e4:ff:bf:25:81:16:0f:10:e7:90:10:14:
3d:60:8a:a0:32:a3:f0:36:9f:98:cc:a0:06:f0:6a:d4:74:c7:
6f:12:3a:e2:a0:ca:37:f8:a4:1d:74:8e:c1:c5:8c:d1:e9:2a:
55:f2:5a:62:51:e0:a1:fc:1d:0e:58:16:e4:56:07:19:5b:50:
6f:5a:b9:e8:9d:67:ef:8f:4c:21:7c:b0:01:35:f6:de:5e:45:
6e:92:5f:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 16:27:59 2025 by rpki-client