Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/a3lT029-LcrfIfDtmQTeWuw9vt4.roa
File: a3lT029-LcrfIfDtmQTeWuw9vt4.roa (raw, json)
Hash identifier: 1e/K2vQSOW+rEvWOdgg8B08zxgmbI31fkJ/5BE2VoTk=
Subject key identifier: 6B:79:53:D3:6F:7E:2D:CA:DF:21:F0:ED:99:04:DE:5A:EC:3D:BE:DE
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01887D15EB6484A73FD0D6D7EEA728CE9F93
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/a3lT029-LcrfIfDtmQTeWuw9vt4.roa
Signing time: Fri 02 Jun 2023 17:09:28 +0000
ROA not before: Fri 02 Jun 2023 17:09:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:7d:15:eb:64:84:a7:3f:d0:d6:d7:ee:a7:28:ce:9f:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 2 17:09:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6b7953d36f7e2dcadf21f0ed9904de5aec3dbede
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b0:25:70:d2:ae:ed:7f:36:a1:4f:31:de:3b:
58:de:49:a6:4f:c8:25:84:35:68:09:09:b9:c6:6e:
83:c2:76:57:0c:58:93:b7:04:de:2f:b0:eb:d3:7a:
35:a2:ae:99:07:a4:96:22:1e:87:b1:a8:54:4a:13:
66:ee:81:da:4b:a1:72:c2:70:02:b3:89:ce:b7:4e:
75:1e:f0:c8:52:78:9b:45:d6:60:c0:54:f8:e2:ea:
aa:9b:51:f5:63:5d:ce:f3:90:bf:30:04:df:b7:e5:
29:a2:c3:74:66:dd:f3:75:a4:bf:b0:ff:37:fe:d7:
e0:20:6f:e7:33:d4:ed:d0:44:56:52:bc:6b:89:b9:
ea:a1:0d:f4:82:f3:ef:28:20:58:42:31:21:1d:fb:
3f:6a:db:be:6f:6a:ab:99:c7:91:d2:4a:9e:ed:9d:
79:c7:17:c9:f6:b8:ff:4a:53:b1:ea:bc:33:b1:62:
7c:68:56:9c:bd:cd:66:5e:e7:67:7a:b3:cf:85:dd:
a7:0c:21:a6:c0:66:18:fe:a8:1f:e7:fd:54:44:55:
45:8c:14:b9:05:37:44:b9:ce:56:a7:e1:07:7c:eb:
67:d0:56:ba:8f:f5:10:69:f2:d6:02:1f:46:4f:6d:
51:30:6b:5a:c7:a3:32:95:62:d0:a4:f4:84:88:6e:
34:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:79:53:D3:6F:7E:2D:CA:DF:21:F0:ED:99:04:DE:5A:EC:3D:BE:DE
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/a3lT029-LcrfIfDtmQTeWuw9vt4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
47:66:a3:d6:25:4a:40:1b:01:42:70:30:1d:bd:e6:8a:9e:27:
79:09:34:c2:22:d3:fb:d2:8d:fa:ee:21:d7:0f:37:de:84:61:
39:ab:96:ee:71:6a:43:67:21:58:93:6a:45:c5:9c:20:ef:e9:
d2:db:d0:7d:ec:04:9f:e3:08:d4:37:0b:94:30:8a:ea:9c:38:
d4:c1:a8:7a:b6:5d:a0:fa:d5:2d:6a:60:14:13:58:f7:cb:c9:
6a:4a:28:bd:f3:c3:12:17:86:3a:2a:ba:bd:14:f9:24:0f:f2:
59:45:7b:b4:8d:88:a5:cc:7f:d8:5e:46:30:ac:28:35:dd:a2:
20:f1:f4:94:3b:85:6d:39:59:10:4f:96:b7:02:2a:d0:e7:a5:
60:ee:be:ce:eb:be:00:07:eb:a6:8c:c8:2c:a4:c8:0a:0c:3b:
d1:1a:b5:b5:9b:ed:f1:8f:04:46:af:84:8e:c1:ed:ba:03:7d:
77:a4:24:57:da:4c:6f:74:fa:c7:85:43:73:93:22:22:0e:61:
61:97:c8:bc:5c:71:ad:b2:78:54:44:bc:b0:6d:32:93:c3:78:
35:19:e2:16:d2:d9:1f:1a:19:b7:58:25:2f:28:7c:9f:ae:e7:
f5:f8:5a:f2:5a:1f:ba:10:97:bb:8e:8c:1f:ce:cb:fd:1a:9a:
9e:23:14:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 09:51:20 2025 by rpki-client