Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3oPjE10Ud2fdOw0kxq4xX9SDl3A.roa
File: 3oPjE10Ud2fdOw0kxq4xX9SDl3A.roa (raw, json)
Hash identifier: pgdYqkGiwBMuPWHDjUrZ6d1rgdNXGyysTxHGd3c9hdg=
Subject key identifier: DE:83:E3:13:5D:14:77:67:DD:3B:0D:24:C6:AE:31:5F:D4:83:97:70
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01861AD4F58D78085BDAB9B4AF0803BDA2BD
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3oPjE10Ud2fdOw0kxq4xX9SDl3A.roa
Signing time: Sat 04 Feb 2023 05:10:09 +0000
ROA not before: Sat 04 Feb 2023 05:10:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:1a:d4:f5:8d:78:08:5b:da:b9:b4:af:08:03:bd:a2:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 4 05:10:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=de83e3135d147767dd3b0d24c6ae315fd4839770
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:9b:0d:d1:f0:99:f2:dc:3d:06:07:ec:86:bf:
40:10:83:e5:66:00:e6:3f:0a:ad:4a:15:cf:9a:0e:
fa:cd:12:ad:61:c1:e0:1f:56:ad:a7:a2:e8:32:c8:
65:6c:82:7e:f0:5c:6e:9f:83:e3:94:c0:ca:1c:ac:
46:87:03:1d:27:48:04:c1:1d:6b:2c:59:9a:75:20:
10:86:59:fa:f3:b0:6a:94:b1:df:35:f1:db:0f:83:
cc:91:47:1f:44:3f:e4:4d:a7:11:8e:d2:6c:e6:b7:
4f:37:94:c5:b2:d4:5c:55:3f:83:91:b1:bf:71:76:
a7:be:63:88:f1:e0:dd:ca:bf:39:63:35:93:c1:f8:
d0:50:6a:29:ef:8c:11:8c:53:64:be:3e:a0:a1:b5:
1b:3f:82:80:f1:92:3f:d1:7c:49:5b:96:a4:44:c5:
31:90:e4:18:32:72:da:82:ad:f1:e1:e7:cc:c3:45:
67:70:11:66:6a:72:62:ba:e7:35:f2:0a:b7:e5:b5:
64:cf:9a:ca:80:a9:77:9c:16:59:37:cd:c8:6c:44:
79:92:4d:0b:48:ff:79:3b:11:18:65:b6:99:bc:70:
1f:0a:a3:c0:79:5a:77:77:11:8e:40:d6:b1:67:63:
ce:f5:c3:d9:bc:6e:f2:71:1a:7a:20:17:22:bb:7e:
39:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:83:E3:13:5D:14:77:67:DD:3B:0D:24:C6:AE:31:5F:D4:83:97:70
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3oPjE10Ud2fdOw0kxq4xX9SDl3A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
05:b5:8e:67:64:65:62:95:15:1f:12:b4:95:9d:fa:a2:34:0c:
96:84:d1:bc:07:d5:91:08:0c:79:d8:11:7d:23:1a:68:f6:68:
9a:de:bd:f1:ec:fa:09:03:bf:4d:e6:e0:a3:b0:8c:6a:92:dc:
da:3a:c0:3d:4c:e0:57:e8:18:af:20:92:10:a7:fe:37:f4:a5:
bf:3e:9e:49:35:b3:4b:12:a0:f2:e3:57:dc:0f:17:6a:eb:8c:
a2:72:dd:8f:e4:f6:0a:49:d8:3f:02:b6:54:b3:57:ab:41:3c:
c4:8e:49:67:da:87:e3:9b:ce:c9:0c:2f:e2:ed:f3:df:5e:6c:
92:31:b8:39:ec:54:20:c8:c4:15:89:a2:58:7c:6e:b1:6c:df:
87:e4:2a:7f:a3:c6:1d:ad:10:38:45:5a:30:c0:5b:4a:4e:00:
d1:5f:10:ae:3c:15:b8:41:f0:19:ae:b0:fe:50:1b:89:b6:d7:
29:aa:94:09:8d:1c:84:3c:d9:cd:15:b5:f4:45:d3:7b:5e:78:
f2:4c:03:0a:22:ca:b5:25:a8:bf:22:0d:7e:e7:81:d2:4f:57:
ef:03:83:42:71:f3:d1:2a:74:1d:26:90:e7:d5:fb:3e:6c:1f:
3f:5f:aa:0f:d8:ef:9f:df:9b:b5:1b:9e:c8:9d:01:ce:cf:19:
85:93:c1:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 04:29:20 2025 by rpki-client