Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3wJM-Aj4sk9GhyEAmQurmY-_qtc.roa
File: 3wJM-Aj4sk9GhyEAmQurmY-_qtc.roa (raw, json)
Hash identifier: K96hcnctsocOOYdA/iB8ts3wuxvzrvbIKy0OtJO95Ms=
Subject key identifier: DF:02:4C:F8:08:F8:B2:4F:46:87:21:00:99:0B:AB:99:8F:BF:AA:D7
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189D0C8A95388B51288F269BC50C3829A0A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3wJM-Aj4sk9GhyEAmQurmY-_qtc.roa
Signing time: Mon 07 Aug 2023 16:15:58 +0000
ROA not before: Mon 07 Aug 2023 16:15:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:d0:c8:a9:53:88:b5:12:88:f2:69:bc:50:c3:82:9a:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 7 16:15:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=df024cf808f8b24f46872100990bab998fbfaad7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:95:4d:89:05:ab:ab:81:a0:44:fd:fc:80:f0:
3a:54:a9:99:e7:7c:62:07:37:40:7d:fa:8f:24:7c:
66:ce:ee:a5:62:16:8e:dd:82:f9:dd:b6:c6:a6:83:
f8:b0:23:91:31:a8:da:08:11:a1:eb:48:f0:db:bf:
7c:03:38:b8:70:d2:89:38:4c:40:75:a3:0f:cb:f0:
7a:0d:6f:62:f0:75:08:d3:b6:60:fb:2f:92:b2:70:
c9:78:44:69:8c:a1:43:29:5c:e8:bb:f2:a5:c8:03:
f6:0f:65:86:ad:98:ae:c4:9f:10:a2:d2:0b:c9:db:
97:5c:06:49:f7:03:43:de:a7:12:8a:62:e0:1f:af:
46:c3:f5:17:5e:c4:84:22:d1:76:90:6b:6c:e3:7f:
4f:27:c5:71:eb:0a:40:5a:64:3c:e8:00:03:bc:82:
5c:3e:1e:6d:c5:1b:23:d8:24:df:74:50:9b:7b:84:
08:02:03:bc:33:dd:4f:e1:ea:3e:68:bd:a3:59:a6:
36:86:44:40:1c:31:b0:6e:1a:7b:06:5e:4a:9e:e4:
bd:f2:97:ec:dd:a8:15:34:1e:00:97:c0:18:f5:c9:
cb:91:e5:d2:27:1c:c1:24:1c:d9:e5:8f:f6:41:2c:
db:5c:fe:92:27:35:9a:bb:4e:97:19:cf:26:19:07:
c1:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:02:4C:F8:08:F8:B2:4F:46:87:21:00:99:0B:AB:99:8F:BF:AA:D7
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3wJM-Aj4sk9GhyEAmQurmY-_qtc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
16:41:ee:9d:42:9f:34:9b:f0:f6:69:8e:91:c8:ec:f5:e6:eb:
df:8c:78:40:d8:4c:cb:75:3b:f2:01:68:6a:06:94:91:59:31:
00:66:56:91:06:d3:ea:58:29:7c:bc:6f:f4:e6:bc:6a:ff:05:
9f:69:4f:53:ee:7d:5b:67:f8:19:60:1e:99:b8:54:bf:ab:a6:
67:7f:9f:84:dd:fc:84:30:65:33:79:9f:2e:89:13:a5:8a:9b:
83:fe:43:63:f2:8d:1b:aa:df:2f:52:61:c3:a7:26:9a:51:02:
54:5b:19:11:05:b0:a9:37:e0:00:df:f7:9c:af:b9:4c:81:cc:
09:cb:6d:94:0c:68:88:7c:29:bf:d4:57:98:29:44:dc:bd:58:
7e:3f:9c:55:9f:dd:85:fd:40:b7:70:08:3d:3b:32:15:2d:e3:
00:e3:89:35:5f:10:28:cd:56:05:3b:81:77:4a:87:5d:a7:2f:
2d:e7:e2:ce:ba:fb:41:dd:70:97:44:08:2f:44:e4:4b:fe:9a:
4f:15:d7:f5:31:ea:c2:57:6e:c4:c6:4e:c4:d8:a7:05:d5:b2:
7c:04:18:2e:dd:fe:4a:a3:a1:1e:1f:bc:c8:50:9b:f1:af:56:
22:8e:19:e5:2a:f3:63:b8:0c:5a:39:24:8b:48:1d:77:87:e1:
fa:eb:76:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:34:31 2025 by rpki-client