Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3lMAb3Ls3yhSzGTb-UED376gdnI.roa
File: 3lMAb3Ls3yhSzGTb-UED376gdnI.roa (raw, json)
Hash identifier: z00nBljjkss2fpSkVBnMBOtKmVfUBtoz7muNaa5ul30=
Subject key identifier: DE:53:00:6F:72:EC:DF:28:52:CC:64:DB:F9:41:03:DF:BE:A0:76:72
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189AEA0E3372C41F48398EFFA43F2403483
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3lMAb3Ls3yhSzGTb-UED376gdnI.roa
Signing time: Tue 01 Aug 2023 01:05:26 +0000
ROA not before: Tue 01 Aug 2023 01:05:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
2001:67c:64:ffff:0:189:aea0:8fe/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:ae:a0:e3:37:2c:41:f4:83:98:ef:fa:43:f2:40:34:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 1 01:05:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=de53006f72ecdf2852cc64dbf94103dfbea07672
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:43:83:51:1f:f2:ff:13:49:8e:1a:6c:4f:94:
f5:be:c2:06:2e:59:07:8f:e2:de:b3:7c:3b:1a:39:
12:7c:40:84:80:58:81:5e:e7:fc:92:84:0c:a8:d2:
38:f3:55:7c:61:d3:7b:9b:42:a8:13:28:ef:99:84:
e9:ad:dd:64:2a:04:be:ea:a1:3c:e6:47:6e:12:87:
9b:4a:42:1c:4f:55:ec:af:68:d9:78:31:21:99:01:
1f:3a:05:0a:8e:fa:3b:77:5c:82:25:1b:c1:35:6b:
97:37:61:c1:33:77:ab:f6:b1:0c:db:41:ef:1a:0b:
bd:c5:10:88:d2:5e:7d:a6:5d:23:8a:0c:89:3e:48:
00:8c:61:7b:3b:c3:fa:ed:40:c4:34:d4:16:94:8b:
f1:e6:cc:3b:0f:a3:e6:97:6f:ac:54:4c:46:9c:a5:
90:d8:cc:a7:4e:3e:3d:d3:7c:7c:81:69:61:d4:d2:
a6:19:87:e1:50:59:2f:ac:1c:dd:0b:9e:ed:c0:b5:
89:5e:ef:5a:9c:ad:e1:d3:c9:ba:65:66:e8:8a:14:
18:06:81:e1:3b:11:73:03:c6:61:72:f6:fb:67:83:
3d:92:12:8c:a2:7d:0c:0b:ec:ea:77:8f:d9:bb:9c:
b8:18:de:1b:79:62:6b:64:17:72:0e:5f:29:49:a4:
ef:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:53:00:6F:72:EC:DF:28:52:CC:64:DB:F9:41:03:DF:BE:A0:76:72
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3lMAb3Ls3yhSzGTb-UED376gdnI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7c:8a:1a:22:c4:65:04:31:6c:bc:0f:7c:8a:1a:60:c0:6e:08:
80:c5:d8:b4:d9:ce:7a:af:4c:38:59:a6:19:30:83:8d:2a:4b:
2d:2e:2e:41:07:ae:fa:b9:47:b0:e4:7b:0a:34:9a:fe:85:a3:
83:0c:01:d7:13:ca:34:59:f2:3f:96:1b:22:b8:20:dc:ba:79:
0e:5a:66:f0:30:05:ba:d0:d8:f9:5e:48:5a:6b:ba:5d:05:cc:
1d:33:dc:49:08:44:c2:66:ce:d2:99:b8:5d:91:31:53:12:7b:
a1:13:cd:51:df:7c:7b:ba:89:b1:0d:da:56:37:15:3e:86:8d:
29:b0:c4:ca:05:c3:ba:e6:11:ab:6f:ec:ab:4a:2f:55:02:08:
5e:be:4f:83:87:7c:38:25:74:8a:07:46:04:22:2c:4d:dc:43:
0d:d9:b5:a2:32:e0:ab:11:53:1f:23:08:6f:1e:33:28:e1:4b:
fe:7e:f6:eb:0e:6a:02:03:80:81:d4:5f:67:9b:c7:72:44:bc:
0b:dc:b8:77:91:40:fc:59:93:f3:1e:6d:fb:70:47:b5:50:95:
f6:1d:a3:5b:0d:7b:c1:6a:80:b1:87:17:8a:5e:a7:20:7f:8a:
16:96:1d:eb:53:8b:67:70:34:16:1b:f9:8c:17:5a:73:99:d5:
f7:fa:ba:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 20:51:48 2025 by rpki-client