Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/D3BQfz9fFltgALl7j7l1QtSuTVs.roa
File: D3BQfz9fFltgALl7j7l1QtSuTVs.roa (raw, json)
Hash identifier: AlHb5+3Ihl/i4uQb84oNuxJpuxhz5JeHCaehjbaXwqo=
Subject key identifier: 0F:70:50:7F:3F:5F:16:5B:60:00:B9:7B:8F:B9:75:42:D4:AE:4D:5B
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 6FEB17E4
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/D3BQfz9fFltgALl7j7l1QtSuTVs.roa
Signing time: Sat 05 Mar 2022 15:08:57 +0000
ROA not before: Sat 05 Mar 2022 15:08:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1877678052 (0x6feb17e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 5 15:08:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0f70507f3f5f165b6000b97b8fb97542d4ae4d5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:99:1b:5d:4f:93:2d:d1:2a:23:44:23:6d:34:
73:48:f4:9e:1f:0c:25:11:81:5f:6e:9c:51:da:d3:
1c:5f:88:08:47:8e:a2:6c:49:c9:eb:36:ba:5d:a5:
36:9e:84:f5:fa:4f:26:0e:2f:f8:45:bc:e7:e5:98:
b2:28:ad:d2:48:0a:9f:8d:61:ba:6d:bf:62:f8:76:
b4:eb:a9:fb:92:ec:26:44:fb:55:ee:e7:e7:70:d6:
36:1e:88:9b:12:ab:ae:62:34:ef:7a:e7:16:1d:08:
b3:2d:68:ef:56:2b:69:93:3c:f5:fa:b1:74:63:31:
96:ca:bc:2c:30:8d:9b:f3:45:ea:26:f1:55:a6:06:
a5:de:2e:bd:77:54:56:1f:7c:fc:83:e4:21:fe:71:
ee:f8:a5:30:35:7e:d8:a3:33:96:e8:8a:55:33:9c:
cd:2a:8a:1f:5f:6d:1d:dc:87:ea:1d:aa:77:98:cb:
ad:e0:d4:00:62:76:2c:0e:93:48:e9:6d:5d:cc:59:
63:65:2d:0c:1b:73:77:22:06:e9:87:6a:8b:11:c7:
e3:78:3a:41:c2:00:63:30:50:d8:74:1b:da:22:8e:
7a:31:7c:0b:e4:cd:8a:8c:bb:99:b9:9c:85:38:72:
58:f3:f8:83:32:c2:bf:97:ba:1b:05:e5:e6:6d:da:
35:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:70:50:7F:3F:5F:16:5B:60:00:B9:7B:8F:B9:75:42:D4:AE:4D:5B
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/D3BQfz9fFltgALl7j7l1QtSuTVs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9b:f3:33:c4:f0:93:07:f5:b9:d1:19:6c:fd:e0:62:26:88:7e:
4b:ac:f6:41:d3:6b:fc:19:d8:7c:b3:9b:dd:cd:6a:f7:2d:6c:
d7:9c:65:d2:df:05:03:ce:89:87:83:4d:ae:8d:64:1b:34:03:
8f:ed:3c:ac:a9:b9:4b:80:de:04:76:7c:c9:b2:9f:40:eb:4f:
18:c5:1b:e3:b4:6b:20:74:b3:a2:4a:b5:99:5a:56:c8:9d:28:
fc:cd:d2:d8:8a:73:13:b6:9e:80:66:02:65:02:d7:12:34:11:
9e:d2:f6:bf:23:8c:9e:1b:29:9c:39:bb:73:80:f9:ab:01:d8:
9a:ee:39:07:db:da:1c:01:9e:77:62:36:14:dd:74:3f:18:27:
f9:60:c8:69:c5:a4:d4:ca:45:aa:8d:8f:97:30:16:ef:79:20:
c7:bf:36:77:cc:3e:b1:3d:29:80:91:a2:c9:13:f4:95:18:6d:
54:b6:de:a7:4e:03:5a:f4:81:b7:5a:f1:3d:dd:70:34:aa:71:
16:59:91:fe:26:b5:6b:60:be:39:26:79:67:2d:44:89:e7:84:
f6:5c:85:57:df:20:86:19:ba:c8:e7:4f:ec:0b:e4:b2:0d:08:
58:08:24:c7:24:72:0b:e3:b4:d0:52:d3:e3:ad:44:06:ed:a1:
74:5a:79:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:24:14 2025 by rpki-client