Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3s62VHJt6j3f3IHAOItCT8hwj_c.roa
File: 3s62VHJt6j3f3IHAOItCT8hwj_c.roa (raw, json)
Hash identifier: I+CHaR4njt3kDU732ZQKrPbrXTXqzYe6idH6TdGZ5IQ=
Subject key identifier: DE:CE:B6:54:72:6D:EA:3D:DF:DC:81:C0:38:8B:42:4F:C8:70:8F:F7
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 682E5021
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3s62VHJt6j3f3IHAOItCT8hwj_c.roa
Signing time: Sat 05 Feb 2022 17:09:14 +0000
ROA not before: Sat 05 Feb 2022 17:09:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17e:a0dd:2f5b/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1747865633 (0x682e5021)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 5 17:09:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=deceb654726dea3ddfdc81c0388b424fc8708ff7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:9f:99:77:38:fc:d4:a6:eb:6b:85:95:c7:09:
78:4c:14:a2:a3:b0:33:28:f4:b9:d3:ab:ed:af:bc:
bc:da:21:8b:a7:55:90:f8:e4:52:a1:bd:4e:fb:ca:
52:83:26:da:3e:c7:bc:d6:40:dd:42:ce:f7:20:82:
2b:40:11:3b:1d:93:87:df:bb:47:d5:1a:62:62:77:
73:b4:ed:8d:a0:2d:6a:ae:9b:06:b3:91:35:27:40:
ae:d4:62:ae:2e:b4:a7:e6:69:0d:b7:48:04:1d:80:
18:f8:13:30:82:dc:71:38:68:e6:38:74:d1:d2:ba:
38:e5:8c:f0:ca:4b:53:11:ed:80:be:8d:56:ad:82:
b6:d8:f1:0a:23:db:7a:fa:87:55:e4:37:f5:c9:a8:
d3:63:02:dd:1a:dd:40:b4:99:18:5a:1d:89:e3:62:
97:41:32:eb:f4:b6:94:d4:39:b9:63:32:8f:c8:79:
a5:15:05:9a:6f:69:17:1e:07:ea:4a:0e:ec:0f:12:
a3:ac:c7:0d:46:e9:c5:7e:5a:7d:5f:f5:bf:e4:8e:
9b:2c:bf:21:d6:62:0f:d3:26:0a:c6:ed:75:12:59:
74:86:70:96:7c:6f:72:28:be:8d:bf:70:c7:60:92:
cc:de:bf:1b:07:2b:ba:82:17:b5:19:39:15:6f:0e:
c6:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:CE:B6:54:72:6D:EA:3D:DF:DC:81:C0:38:8B:42:4F:C8:70:8F:F7
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3s62VHJt6j3f3IHAOItCT8hwj_c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
35:a4:c0:65:74:ab:81:ce:8b:95:6e:c7:c9:6b:02:98:b5:c0:
62:3e:5e:1d:7f:09:f5:2f:44:8b:ca:af:47:f8:84:dd:8a:13:
2c:b3:aa:54:a2:ca:76:9d:5a:a5:30:72:4a:c2:34:cb:0f:18:
7a:bc:95:2c:36:6f:23:77:a6:30:5c:e4:1b:bf:b5:b2:9c:93:
2d:3f:25:ea:38:a2:15:92:98:f3:36:7b:50:3f:a9:47:27:4d:
9a:67:fd:cc:f2:10:5c:18:77:d2:f7:a6:8a:ac:c8:fe:c1:f5:
3b:ff:8a:5b:e4:5f:3a:69:eb:2a:d5:0a:b2:15:5f:c1:3d:e5:
28:73:ad:03:67:60:2f:e8:90:db:5e:ed:ab:eb:c8:07:f2:e6:
46:d6:33:f1:8d:93:3f:ef:e9:86:c1:04:69:d2:f3:ae:53:d1:
7c:aa:3a:26:41:5f:de:54:ae:bc:09:cb:ec:a8:ac:a1:5f:45:
d5:0d:d8:25:89:fd:cb:98:9f:30:4c:77:8d:fe:80:32:48:99:
2e:8b:6c:0a:3b:38:0e:3b:d3:61:9c:b0:a8:1a:0d:20:ca:26:
05:00:b5:eb:7c:22:45:bb:2d:3f:6c:99:22:ff:90:52:be:df:
89:62:e2:67:34:9a:29:a9:f2:be:ed:56:49:02:88:cf:c3:7a:
1d:e3:30:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:35:03 2025 by rpki-client