Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3nJT4Apc2-kZ-tOg637tuf8JmVo.roa
File: 3nJT4Apc2-kZ-tOg637tuf8JmVo.roa (raw, json)
Hash identifier: tW2djAZmSyt/opzmE2xYj4u3B6S+MiGoMEH8Pf03Nuk=
Subject key identifier: DE:72:53:E0:0A:5C:DB:E9:19:FA:D3:A0:EB:7E:ED:B9:FF:09:99:5A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01894FFF7EF95CCD1833E7EC954EE46BE562
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3nJT4Apc2-kZ-tOg637tuf8JmVo.roa
Signing time: Thu 13 Jul 2023 16:04:51 +0000
ROA not before: Thu 13 Jul 2023 16:04:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:189:4fff:10ef/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:4f:ff:7e:f9:5c:cd:18:33:e7:ec:95:4e:e4:6b:e5:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 13 16:04:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=de7253e00a5cdbe919fad3a0eb7eedb9ff09995a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:64:9f:dd:ba:c8:c6:75:b5:d9:02:be:15:96:
37:b8:7b:1d:0c:76:75:2f:60:01:68:49:89:68:58:
10:95:f1:ff:7d:ae:d9:98:7f:81:f0:89:42:de:95:
77:13:73:25:09:a7:4f:71:2b:8d:eb:ef:34:f3:3b:
47:8f:8b:9d:45:57:16:f9:83:f1:d8:4f:3b:84:42:
de:cf:37:64:bd:08:ff:eb:3f:d3:db:c8:21:ee:60:
b7:4c:8e:63:c1:46:1d:3f:04:7a:3d:a0:0a:90:17:
a4:06:0f:3f:33:04:63:dc:4c:cc:d1:1b:2a:e6:6a:
89:54:9a:c9:fd:67:c7:7b:83:1a:da:6f:0e:02:ac:
67:a5:4f:9c:fd:a3:09:ea:6f:4f:ea:d9:f8:79:f1:
69:2e:ad:f1:e1:14:31:fa:31:b9:db:5d:c2:eb:8e:
86:57:37:10:39:cc:88:99:c2:c0:20:c3:9f:67:83:
5a:84:a4:f1:69:00:d8:3d:1f:a8:3d:4e:cb:a5:54:
46:16:b9:da:72:7b:65:ac:9a:c0:2c:33:b1:e1:99:
b8:5f:4f:05:6b:61:58:e2:3b:88:d2:99:0a:bf:4c:
2a:64:67:0d:b6:4b:ea:c9:56:42:13:5f:2e:2d:82:
86:13:40:4e:9d:50:62:8f:f2:c7:26:f3:f5:a5:2b:
1a:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:72:53:E0:0A:5C:DB:E9:19:FA:D3:A0:EB:7E:ED:B9:FF:09:99:5A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3nJT4Apc2-kZ-tOg637tuf8JmVo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
22:42:76:d0:d0:26:f5:21:82:d3:9b:24:89:2f:57:45:30:54:
fb:29:94:c0:85:8e:ab:16:b4:3f:d3:b3:7f:50:c9:7b:a2:2b:
97:ee:61:94:70:a2:5e:24:1f:47:3d:70:46:44:18:6c:67:0e:
13:3f:6c:42:57:09:61:d8:cc:45:2e:4d:48:d2:08:e4:e8:7e:
a6:5b:bf:24:23:37:90:33:95:33:2b:ae:06:6d:14:06:46:3b:
bc:a6:4e:8e:a6:56:f2:4a:68:74:a0:b0:44:3c:26:1a:24:d9:
76:fd:30:3e:9e:d5:7b:da:0a:37:4d:2c:b8:a1:67:45:58:19:
35:a5:e0:85:6f:a6:78:f8:6b:31:0b:99:c4:a0:8d:39:b3:69:
36:7b:70:ee:5b:15:2b:f5:68:bb:13:40:64:a7:79:ae:eb:b1:
40:27:8f:c0:84:d2:5e:91:13:bd:05:be:5c:99:b2:a6:2a:02:
9f:6d:3f:87:f1:1b:81:d1:a8:0a:64:f8:13:55:6c:5d:ac:b6:
86:70:3a:78:03:20:4f:b3:85:ed:a0:d8:71:1c:36:29:4d:c2:
fe:ce:66:3f:6c:c5:38:3f:f1:29:71:e7:a5:ad:30:cf:33:2b:
d1:25:a4:44:30:06:a7:eb:f4:1f:47:a0:3f:46:28:80:37:ec:
d1:25:04:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 20:37:49 2025 by rpki-client