Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3sXi2VGu09U9IfYRXpRDOWYyOFI.roa
File: 3sXi2VGu09U9IfYRXpRDOWYyOFI.roa (raw, json)
Hash identifier: c+R2/ZPHBK44Sz47BBx98SjKH4/fIQQ1xX44/71ae6M=
Subject key identifier: DE:C5:E2:D9:51:AE:D3:D5:3D:21:F6:11:5E:94:43:39:66:32:38:52
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0182E9F779BAEE9FD0F8495557F23212DF00
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3sXi2VGu09U9IfYRXpRDOWYyOFI.roa
Signing time: Mon 29 Aug 2022 14:18:05 +0000
ROA not before: Mon 29 Aug 2022 14:18:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:e9:f7:79:ba:ee:9f:d0:f8:49:55:57:f2:32:12:df:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 29 14:18:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dec5e2d951aed3d53d21f6115e94433966323852
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:be:cb:d8:ad:31:9d:07:77:7a:67:cd:92:24:
c4:48:d9:1c:08:87:2e:ba:65:16:32:74:e7:2d:c3:
bb:e5:3a:58:27:f1:5e:02:61:c7:2d:f3:fd:75:da:
58:0d:ca:d3:56:4d:85:46:7b:2a:5f:48:a0:47:c7:
04:a6:34:8e:9c:fc:1a:dc:70:27:2f:90:68:2b:29:
71:a3:bb:05:08:0d:f2:31:89:82:a3:04:c2:97:b9:
99:e0:5b:42:85:35:87:a5:0f:89:c6:e3:81:36:1f:
dd:39:c0:96:8d:fe:10:b6:3d:25:7c:b3:44:88:57:
7f:a8:5f:dc:17:d7:ad:c6:6c:85:58:d3:7d:9a:12:
42:da:61:c7:c7:61:c8:d5:c9:c4:b1:f4:be:1b:64:
87:63:e3:40:20:c8:80:62:d9:c2:88:cd:c8:99:bf:
4a:6a:34:03:12:f0:a5:c2:b4:56:02:84:ac:7f:12:
bc:ee:c1:13:f7:9a:4e:96:00:94:21:11:cf:38:fd:
d6:90:f8:b7:1e:af:35:79:8a:b7:fd:8d:7e:56:aa:
b1:da:b4:f7:02:72:e4:ce:7b:19:a1:a2:7d:9c:b4:
83:6c:57:c8:5f:3c:01:9d:8e:de:8a:3e:aa:5f:50:
13:b3:f3:9a:25:7f:2b:7d:48:76:cf:c3:0e:1e:13:
fd:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:C5:E2:D9:51:AE:D3:D5:3D:21:F6:11:5E:94:43:39:66:32:38:52
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3sXi2VGu09U9IfYRXpRDOWYyOFI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
00:12:72:7a:6f:bc:31:98:e3:b8:65:d8:a5:07:19:c3:a9:38:
e2:77:74:07:50:69:49:fc:96:59:0a:75:15:87:dd:8a:5f:d2:
db:ce:eb:08:37:0a:82:65:99:cb:b4:9a:aa:59:0d:3d:3b:62:
75:f6:22:69:4d:03:eb:7f:d4:ca:ba:8e:61:24:5b:d2:03:f9:
dc:2f:0d:ce:a5:4c:fb:aa:3b:8c:9d:6b:fc:d0:c8:14:f2:30:
09:05:ee:f1:52:93:3e:42:60:94:2c:46:4c:71:48:ca:3c:15:
b0:a8:fa:4d:d8:8a:fa:c8:44:bf:65:33:99:1c:00:35:16:72:
94:62:a4:fb:a5:aa:47:84:d3:3c:2e:70:21:f7:be:6a:e1:0a:
68:ad:c0:d3:4b:91:af:f1:da:2c:72:d6:e9:2a:43:d4:65:ab:
cb:87:db:bd:6e:a0:ea:41:7f:5c:d2:8e:d2:2d:ad:84:0e:a7:
32:a0:27:bf:cc:f5:ba:3f:8a:2e:9f:f3:5a:62:ba:50:6b:50:
c8:3e:c3:bc:9f:d6:1a:92:36:6a:2b:ba:69:08:00:de:b5:3f:
ca:a2:c5:fd:b7:95:0e:5f:01:34:e1:95:da:60:ad:f6:ba:df:
df:05:75:96:fe:8f:2d:d0:7f:b8:c0:0b:b2:71:48:b5:c7:ff:
57:95:ef:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 05:01:31 2025 by rpki-client