Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3ouow3CtkZAyp49RxZizEs4RR2M.roa
File: 3ouow3CtkZAyp49RxZizEs4RR2M.roa (raw, json)
Hash identifier: 7eGvnKbKZwMhV9QCnRclKHYeZcoeh3r1OOLgVhPsQac=
Subject key identifier: DE:8B:A8:C3:70:AD:91:90:32:A7:8F:51:C5:98:B3:12:CE:11:47:63
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01896EEAC39E1C2F681A018BD4466C5BA023
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3ouow3CtkZAyp49RxZizEs4RR2M.roa
Signing time: Wed 19 Jul 2023 16:10:26 +0000
ROA not before: Wed 19 Jul 2023 16:10:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:6e:ea:c3:9e:1c:2f:68:1a:01:8b:d4:46:6c:5b:a0:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 19 16:10:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=de8ba8c370ad919032a78f51c598b312ce114763
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:1f:16:aa:82:c7:08:aa:8a:d2:44:0b:02:85:
b7:ee:45:8b:70:bd:52:35:64:12:49:9c:a1:71:95:
65:02:83:51:96:da:54:c5:07:d0:6f:07:de:e6:76:
cc:83:b4:56:b8:f3:b7:f9:ac:c4:9d:3d:4c:56:77:
1e:0c:18:3d:b0:00:52:9a:dc:06:80:06:aa:f9:ae:
b8:2f:b5:cb:0d:7e:bd:7a:01:7f:c6:c3:44:f2:b2:
d6:66:53:da:33:fa:51:74:d4:b6:6b:4c:5e:ab:2b:
b2:c4:32:8d:b8:6e:6a:ae:79:22:3b:3e:ce:f5:1d:
78:a6:c4:a2:d8:2b:0d:2e:3f:ac:9e:71:f7:96:5d:
75:a5:ef:bb:bb:56:e1:8e:eb:7c:66:1b:ec:d8:af:
0c:67:84:a9:b2:64:91:7f:d2:c3:76:98:9f:a3:da:
df:d1:dd:d3:1a:ab:60:76:14:db:d2:34:70:87:0d:
8d:11:68:ff:7e:c2:67:32:ca:58:ec:7c:4e:a8:05:
fd:62:85:25:f5:d8:0c:ce:fa:58:bc:5b:51:1e:d6:
50:d6:84:63:52:d7:1c:79:8a:3f:14:44:7c:c6:5b:
bd:75:e4:5e:92:24:95:0b:c2:6b:d7:44:30:82:3c:
f8:ff:54:bc:a7:53:6c:65:09:fc:77:6d:78:66:bf:
41:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:8B:A8:C3:70:AD:91:90:32:A7:8F:51:C5:98:B3:12:CE:11:47:63
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3ouow3CtkZAyp49RxZizEs4RR2M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2d:93:30:99:40:9a:75:06:e3:cb:31:5d:42:8f:ea:4b:33:5b:
01:50:52:03:b0:cc:3b:a6:4f:aa:81:b1:01:85:18:b8:79:41:
6a:c8:ce:ff:ae:0b:40:e5:15:6e:68:5a:c1:17:8c:2f:66:64:
85:85:81:90:93:64:67:10:4c:39:06:f4:ec:25:95:a8:86:f5:
da:94:2c:d3:db:f7:9f:a0:9f:03:44:63:ac:59:12:da:d8:1b:
b9:84:ad:da:9a:fc:ae:60:50:b2:a6:00:7f:ed:da:66:56:a6:
17:69:e7:be:fb:cb:fd:ed:88:82:b2:95:86:dc:39:40:de:74:
b5:bc:df:77:fc:f4:7c:a5:bc:b1:4c:fd:6a:c7:61:b0:a0:78:
62:04:10:66:a2:35:dd:0a:e5:43:8a:87:47:22:99:53:6f:82:
2d:7a:89:e5:db:ab:5e:94:2a:69:cd:20:f3:4f:20:8f:3a:48:
ff:3c:1f:fa:18:2c:17:85:96:64:31:bb:11:0f:54:f6:74:c6:
86:e0:c4:c9:f6:e1:36:d6:4e:5e:0c:84:c6:ab:70:c6:6d:6e:
30:c5:18:25:74:f5:11:6b:8a:63:4e:83:24:2f:57:bb:30:14:
9c:65:af:47:cd:a3:bd:cd:ec:73:5d:91:e9:ea:55:16:c6:34:
fb:60:46:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 01:58:55 2025 by rpki-client