Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3r4k0X_PIt959srLB_oafWlW3h4.roa
File: 3r4k0X_PIt959srLB_oafWlW3h4.roa (raw, json)
Hash identifier: 70jmRkp+P71lPC5+s6lzziMC4363wgi2THEkCCyYRuE=
Subject key identifier: DE:BE:24:D1:7F:CF:22:DF:79:F6:CA:CB:07:FA:1A:7D:69:56:DE:1E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01870C754D466094E140B7160F5A49847495
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3r4k0X_PIt959srLB_oafWlW3h4.roa
Signing time: Thu 23 Mar 2023 03:13:46 +0000
ROA not before: Thu 23 Mar 2023 03:13:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:0c:75:4d:46:60:94:e1:40:b7:16:0f:5a:49:84:74:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 23 03:13:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=debe24d17fcf22df79f6cacb07fa1a7d6956de1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:cb:74:e5:9f:90:49:9d:0e:05:ad:73:74:c0:
ad:bf:6d:5c:13:e7:ed:a4:b8:19:03:84:49:86:71:
17:0c:b9:2a:35:9f:40:d6:68:b3:1f:e3:f2:9a:34:
8f:76:f6:98:84:cd:c7:cb:8f:9d:da:1b:e1:2a:94:
3a:d9:74:3a:cb:31:52:8f:a8:2b:9e:70:ac:24:d2:
f3:46:4d:2a:00:7c:62:d2:95:a3:bd:4d:dd:ad:20:
c3:d8:9d:d7:e3:44:c9:0b:94:10:0e:05:de:d7:e4:
7b:84:fd:ab:69:a0:5b:64:10:06:4d:ac:06:cb:ab:
4f:dc:40:f0:dc:86:53:90:dc:81:8a:80:81:f7:08:
5f:5c:1a:7e:44:3c:65:be:70:63:5b:ef:dc:61:cd:
19:d6:b0:dc:14:fa:32:8b:f3:5e:68:fc:01:e0:78:
dd:91:a2:9a:f4:05:af:5f:00:9c:a4:3e:c5:87:4b:
6b:7e:db:51:23:fc:7f:ec:d1:06:a1:58:50:5c:06:
e1:ab:6b:0f:1d:bf:f1:2d:cc:b7:52:8c:60:19:a5:
04:f1:b6:c0:b1:f4:79:ed:a0:0f:fe:60:42:c8:e0:
d6:5c:65:e4:87:ac:88:57:a4:8d:a9:ce:33:0b:dd:
7f:3a:94:94:36:09:a3:62:b9:36:2f:7b:1f:43:cd:
77:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:BE:24:D1:7F:CF:22:DF:79:F6:CA:CB:07:FA:1A:7D:69:56:DE:1E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3r4k0X_PIt959srLB_oafWlW3h4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4a:b0:e5:9c:53:89:38:40:fc:6c:df:c6:35:b2:39:45:04:23:
61:f4:c1:56:b3:9c:83:02:a9:cc:24:5d:c0:ad:6c:3a:34:ff:
96:d4:99:db:07:c9:ff:88:70:9e:07:21:1a:2b:af:25:a5:14:
50:e5:36:b1:ce:56:e3:8f:e5:46:6b:8b:ff:f0:9a:bf:ba:b4:
52:e4:7b:24:45:1a:a1:02:00:a4:ac:d9:8b:29:3c:c9:1f:a3:
0a:77:94:93:f1:c1:f8:95:f6:5b:f6:50:8d:50:ff:89:55:36:
2e:ea:3a:ce:03:80:34:5e:14:0e:61:3c:67:b2:8c:36:74:da:
83:62:a1:9b:79:4e:54:46:06:7c:a3:0e:d3:27:e3:3b:d8:c0:
5d:62:a1:ba:60:ae:8f:c7:15:52:99:49:bc:83:54:00:e6:82:
43:e4:74:31:63:d8:fd:b5:b4:6c:27:61:bd:df:f0:e4:dc:e1:
57:a7:70:e5:c7:dc:aa:5f:2a:11:43:4f:6f:69:ee:8b:8f:81:
99:ed:77:52:43:59:df:55:d1:43:c5:82:62:97:4d:cd:52:74:
09:8e:89:58:f0:32:7b:a1:bf:f6:0a:d2:00:a7:69:ae:a0:68:
52:dd:b3:f7:ff:ce:79:17:8b:aa:3a:2e:ce:3c:93:8f:05:35:
fb:0f:9d:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:18:38 2025 by rpki-client