Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3spogqT1IU2PxPzFxk18Jq8p8Pk.roa
File: 3spogqT1IU2PxPzFxk18Jq8p8Pk.roa (raw, json)
Hash identifier: Pbw+pEXu8LucPx5BUGjhFHWKyM32mgXFKfPM8vaacxs=
Subject key identifier: DE:CA:68:82:A4:F5:21:4D:8F:C4:FC:C5:C6:4D:7C:26:AF:29:F0:F9
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0182F743A88512346879F4AA4C6665366FBE
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3spogqT1IU2PxPzFxk18Jq8p8Pk.roa
Signing time: Thu 01 Sep 2022 04:16:22 +0000
ROA not before: Thu 01 Sep 2022 04:16:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:f7:43:a8:85:12:34:68:79:f4:aa:4c:66:65:36:6f:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Sep 1 04:16:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=deca6882a4f5214d8fc4fcc5c64d7c26af29f0f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:74:ad:db:7a:ff:75:d1:8f:68:d9:9f:9a:70:
8b:60:aa:51:bd:25:5b:7b:99:06:8d:7b:33:6b:8b:
11:66:11:9a:9a:b0:28:c6:97:ec:1f:d6:1d:df:ab:
22:67:b4:2f:46:10:5f:12:0e:ac:8b:4d:ab:bc:f6:
5f:32:02:81:a1:72:7d:82:42:a3:85:23:d4:ba:48:
80:14:dd:7a:3d:d0:6d:9f:75:89:69:6e:b0:b2:39:
26:a0:95:2f:a9:1a:04:4f:c6:19:d4:11:01:28:74:
03:2b:8b:4f:d0:7f:c0:1c:d9:99:0e:8b:10:8b:56:
ea:cc:32:12:6f:6a:e3:8a:e0:1a:a2:cd:ab:11:34:
df:c1:3d:97:f1:c8:1a:28:69:a0:67:73:ed:09:3f:
47:6c:66:39:60:16:a4:88:85:10:e4:7e:ad:25:d1:
35:ec:fe:d0:8f:84:c7:b1:1f:3f:b6:e1:38:5c:7e:
55:74:31:81:64:de:46:23:d1:4d:85:49:f2:fe:cd:
e3:e0:9d:fc:ec:4e:16:6b:96:bc:a0:3c:40:fb:bd:
6b:34:1e:98:c4:46:3c:eb:67:97:fd:b5:61:76:96:
09:d4:29:12:22:75:44:26:68:6d:85:31:ed:d4:60:
d7:d9:98:6c:be:33:75:28:e3:1b:e8:10:1e:0c:d9:
78:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:CA:68:82:A4:F5:21:4D:8F:C4:FC:C5:C6:4D:7C:26:AF:29:F0:F9
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3spogqT1IU2PxPzFxk18Jq8p8Pk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
12:97:93:51:d4:7e:8c:c1:e7:03:bb:62:ab:fd:66:73:af:b7:
fc:e0:6d:da:c3:d1:3c:1a:3a:2b:b9:9f:aa:61:eb:d8:40:f3:
8f:ba:2c:70:e3:92:bc:b7:fd:6d:58:77:a6:92:78:aa:12:81:
c9:d8:ea:f7:a6:e4:fe:ab:45:b0:17:8c:5a:b3:4f:a2:98:2b:
df:56:b1:59:a4:45:a0:5a:f6:48:05:8c:4a:c8:9b:4c:e0:96:
42:cf:c3:69:ae:d9:92:b9:05:09:41:01:10:fa:df:19:06:0b:
46:89:4f:ff:49:38:f9:23:48:a4:a6:19:e5:ce:60:8b:7e:3a:
ab:9c:09:94:f1:9f:12:da:fb:e3:3c:9a:c2:16:ba:14:1d:a0:
d2:fa:42:9b:da:f5:b6:82:4b:9d:83:ff:be:39:c9:6f:63:99:
a4:b8:52:0e:00:b0:b8:d9:0b:04:aa:6d:3d:1d:e7:07:91:fd:
46:f4:75:ea:4b:de:59:f9:1b:ae:ab:ea:ca:44:89:f3:6c:44:
ec:d1:6b:3f:f4:c7:85:c4:48:fe:b1:4d:46:da:f2:e6:18:0a:
49:3f:9d:b4:9a:ad:05:bd:0c:54:c5:91:d5:83:90:7d:ae:d2:
fb:e4:19:00:0c:a5:87:c0:9e:96:e1:76:c0:e4:70:25:1f:ab:
3f:16:8e:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 22:15:23 2025 by rpki-client