Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3ksiZT9T-Y9pdKrLGcDspYeU02g.roa
File: 3ksiZT9T-Y9pdKrLGcDspYeU02g.roa (raw, json)
Hash identifier: 3Qei3Q18A7/AHJY+0fAa06Bh/2pnqhsgnlu3trFm5qc=
Subject key identifier: DE:4B:22:65:3F:53:F9:8F:69:74:AA:CB:19:C0:EC:A5:87:94:D3:68
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018525C96BE8ADCBEC3B9AA464B0ACCF8C7A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3ksiZT9T-Y9pdKrLGcDspYeU02g.roa
Signing time: Sun 18 Dec 2022 15:10:35 +0000
ROA not before: Sun 18 Dec 2022 15:10:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:25:c9:6b:e8:ad:cb:ec:3b:9a:a4:64:b0:ac:cf:8c:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 18 15:10:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=de4b22653f53f98f6974aacb19c0eca58794d368
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:8a:4d:75:fa:5b:3a:87:5b:06:8b:e9:a2:69:
6a:44:d8:20:f1:33:6e:d3:3b:36:af:23:83:59:d0:
e0:49:af:60:90:b7:71:10:17:40:e3:81:3d:a7:23:
8b:66:76:29:f0:a9:9f:7a:f6:10:72:1b:00:47:96:
1f:fc:f6:f7:e0:93:87:1c:ec:20:37:bb:10:10:bd:
46:ae:76:cd:61:cd:48:c0:89:92:75:39:e7:4e:17:
42:f4:d2:3b:38:6f:f3:eb:82:a5:e5:74:56:f7:7e:
66:bf:65:c9:ce:6f:86:8e:b4:c7:a5:ea:da:c7:1c:
d2:27:67:d0:f7:70:49:9b:cd:81:b7:5b:38:e2:7f:
6c:87:e9:82:09:92:dd:56:4d:a4:ef:1d:8a:40:01:
18:c8:59:5c:19:37:59:9d:94:d6:7d:76:f8:a7:55:
86:1f:52:e3:18:de:fd:5c:5d:dc:20:b0:0a:fd:bf:
61:dd:df:b5:b3:6a:77:98:de:4a:d2:ba:7b:63:28:
37:ad:9c:54:a0:d0:ec:f3:67:aa:e9:b8:52:05:f8:
88:7a:71:00:a1:68:e0:c1:88:7b:12:04:8d:ab:9b:
20:e3:d2:2a:97:29:9c:3d:38:3b:f0:9d:cc:a4:99:
92:c5:c3:26:8f:43:95:e9:ce:5f:ee:e8:44:f5:e3:
e4:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:4B:22:65:3F:53:F9:8F:69:74:AA:CB:19:C0:EC:A5:87:94:D3:68
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3ksiZT9T-Y9pdKrLGcDspYeU02g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
56:ed:07:39:bd:72:0c:14:07:67:a2:13:80:44:c4:29:d9:bf:
3e:30:22:79:1b:6e:c1:61:d2:a1:04:8e:34:49:e4:97:9e:2d:
9b:89:92:cf:cb:d0:50:1c:6d:c7:69:a2:01:af:98:b9:2d:82:
12:7b:13:a4:9c:a5:c6:ee:c2:17:72:dc:27:21:f0:bb:ea:62:
52:74:8a:04:81:c7:0b:86:3c:ca:f7:ef:9d:31:86:a7:37:6e:
68:74:65:4c:83:02:51:7d:a4:08:d5:65:1c:66:20:eb:ef:66:
d4:c0:91:b1:e9:e9:f6:6a:9d:49:a1:45:f8:6d:88:ce:71:27:
26:d3:54:ad:a6:62:be:54:20:d1:7d:7f:1a:68:d4:5a:ae:2a:
65:b1:d6:fd:3e:10:3e:84:bf:a5:fd:1f:ee:b9:35:17:4e:56:
e0:bc:ba:4b:ce:54:87:f0:53:b7:9e:89:9d:0d:4a:4d:41:f3:
90:8c:74:aa:a2:01:9f:8c:c9:18:59:b3:b2:23:d1:e9:e4:3a:
25:25:0c:cf:64:05:1a:9a:aa:ba:05:61:7b:0f:0a:1f:af:08:
a3:23:c3:58:36:60:29:b3:1e:15:ef:70:56:15:06:75:62:36:
2c:70:9f:54:09:63:4f:ba:22:28:68:17:1b:45:7f:54:70:82:
aa:e8:54:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 00:18:15 2025 by rpki-client