Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3t4W4ftNPNj1_gwq1Ljb_vzpDDg.roa
File: 3t4W4ftNPNj1_gwq1Ljb_vzpDDg.roa (raw, json)
Hash identifier: 2dC6URlaUWseSnB7SFioi0m1L3R00Emi41x9dpCPk1A=
Subject key identifier: DE:DE:16:E1:FB:4D:3C:D8:F5:FE:0C:2A:D4:B8:DB:FE:FC:E9:0C:38
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 8D2C47C7
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3t4W4ftNPNj1_gwq1Ljb_vzpDDg.roa
Signing time: Thu 16 Jun 2022 08:10:44 +0000
ROA not before: Thu 16 Jun 2022 08:10:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:181:56ba:5b78/128 maxlen: 128
2001:67c:64:ffff:0:181:22f:7a99/128 maxlen: 128
2001:67c:64:ffff:0:181:477e:58d8/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2368489415 (0x8d2c47c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 16 08:10:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dede16e1fb4d3cd8f5fe0c2ad4b8dbfefce90c38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f2:bb:7b:2e:da:86:66:7a:71:d6:6b:c0:1a:
14:3d:87:da:b0:d9:24:41:a7:fa:01:f0:a5:30:22:
28:4a:12:c3:78:29:3b:00:ea:af:eb:89:31:7f:0f:
e7:4b:7a:37:b3:c1:7f:0c:93:be:d0:c0:80:c6:14:
9b:08:37:49:d5:36:87:21:7c:9f:f4:77:17:80:1d:
ae:a3:d6:db:d2:11:06:de:d5:46:2f:ea:16:47:7f:
79:da:9e:40:78:5d:5b:01:40:6d:c8:e5:6c:e3:7d:
be:cf:a9:73:7c:7e:0d:75:56:43:8e:98:0a:91:03:
80:3e:6a:2c:17:c1:43:c4:ab:5e:74:03:34:04:08:
78:7b:38:03:03:04:0d:5f:96:d1:8b:bc:84:50:85:
2d:b5:6f:8c:56:31:cb:c2:c5:78:e3:b8:59:14:d3:
2c:a7:c3:d8:fc:24:70:ac:cd:44:1d:e9:18:19:05:
de:a0:0b:42:bd:c6:d6:94:ee:14:ca:d3:8c:92:4d:
34:e7:9a:e5:10:c8:28:58:26:fd:5d:c4:0b:2f:bf:
56:5d:e3:fc:cc:b3:0b:4c:85:7a:37:71:50:67:84:
ba:76:50:d4:b4:2a:31:6d:d1:59:3b:12:9c:93:43:
ac:27:7c:f9:68:cd:da:c2:b7:8e:e6:8e:97:44:59:
d9:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:DE:16:E1:FB:4D:3C:D8:F5:FE:0C:2A:D4:B8:DB:FE:FC:E9:0C:38
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3t4W4ftNPNj1_gwq1Ljb_vzpDDg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1b:60:aa:32:a3:81:0c:cb:2b:b1:be:93:ad:9a:4d:eb:ef:db:
7f:35:08:cb:55:d1:24:a4:06:d0:66:a1:2a:51:3d:a9:d7:bf:
e7:30:b2:d0:af:28:5c:1e:d9:64:7a:f9:cf:0d:38:30:00:b9:
85:e1:4f:ad:18:6a:fe:70:b5:cc:47:fc:f4:f2:37:68:4f:b9:
c2:2e:b8:4c:b2:5c:47:8a:3f:f8:04:07:7d:1d:9a:e3:12:2f:
77:48:df:92:1a:69:ba:3c:e1:11:f9:a8:3f:34:36:21:7c:e2:
fd:f1:85:9a:9c:a4:db:c5:1f:ec:97:d8:94:1e:c9:a6:a6:ff:
c8:7b:dd:0b:03:9d:0f:14:0d:c3:53:73:9e:09:aa:ee:d5:c3:
e8:75:b8:4e:58:e6:1a:77:b9:65:6c:90:f3:05:42:e1:68:29:
0a:38:81:27:aa:9a:be:35:2a:02:6b:61:13:d8:ae:be:d3:3f:
b1:fc:5a:dd:cb:ed:0a:94:61:39:cb:ff:bd:ce:ce:a7:6c:f4:
b8:f2:b8:6c:79:c1:e1:a4:cb:b2:57:b3:70:1c:29:6b:15:96:
f6:ba:0e:b1:4d:c7:71:68:62:94:97:83:c0:14:f1:1e:c0:58:
96:5a:f6:58:88:0f:55:13:49:05:08:fb:b7:fa:e9:19:c0:ab:
e6:59:0e:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 09:43:25 2025 by rpki-client