Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/o3e3lVc_pLbQtbWkOt1gY-g8ReI.roa
File: o3e3lVc_pLbQtbWkOt1gY-g8ReI.roa (raw, json)
Hash identifier: V0FufNqJC9tb+Qd17zVfGLTSdPhhdoWN3zBnd+v9JMA=
Subject key identifier: A3:77:B7:95:57:3F:A4:B6:D0:B5:B5:A4:3A:DD:60:63:E8:3C:45:E2
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185D05F31FA647CB830395A47A68A1E4E10
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/o3e3lVc_pLbQtbWkOt1gY-g8ReI.roa
Signing time: Fri 20 Jan 2023 18:09:37 +0000
ROA not before: Fri 20 Jan 2023 18:09:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:d0:5f:31:fa:64:7c:b8:30:39:5a:47:a6:8a:1e:4e:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 20 18:09:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a377b795573fa4b6d0b5b5a43add6063e83c45e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:75:52:49:b5:95:5e:45:c9:1e:03:2b:41:75:
30:79:28:eb:88:04:27:a5:fc:48:f3:5a:54:c1:01:
fa:ad:62:3c:fe:de:d6:00:ed:09:89:d2:d0:eb:21:
7a:1d:ff:08:d5:b5:99:39:88:5a:1d:f8:fb:ba:c3:
bb:8b:db:b6:55:90:a0:10:0b:67:6a:6f:8d:5f:29:
c5:7f:81:dd:5c:fc:e6:94:e7:77:a7:89:6e:0f:ae:
c7:b9:e7:80:b8:26:e5:9f:e1:fd:30:34:47:fa:ae:
e7:b7:b7:a1:aa:30:bf:12:46:12:41:b5:a5:80:78:
84:47:ee:59:4f:b3:d2:ad:a7:43:49:4d:fc:54:9d:
3b:77:9d:b7:e6:b9:9b:18:24:c0:30:9b:6c:60:e2:
ff:a7:62:d6:01:02:63:8e:3e:4f:39:9f:e8:75:78:
e3:7e:4f:41:80:25:01:fc:f5:08:a5:1d:a2:88:c6:
48:1a:01:77:39:1f:b5:b4:d6:bc:0a:3f:39:7c:15:
63:f7:e8:49:da:d0:51:ff:82:58:c7:34:4e:1e:9f:
e8:f3:b4:45:0c:69:ea:50:b1:78:62:6f:62:90:e1:
45:86:6b:9d:22:e0:18:cf:5a:51:e4:6f:e7:a5:b2:
a1:97:56:f5:ad:02:cf:09:76:2b:d0:92:70:57:ef:
5b:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:77:B7:95:57:3F:A4:B6:D0:B5:B5:A4:3A:DD:60:63:E8:3C:45:E2
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/o3e3lVc_pLbQtbWkOt1gY-g8ReI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2a:89:0f:ca:20:1f:de:8f:c5:be:fe:95:69:87:6e:8d:e9:25:
bd:6c:31:b1:14:9c:7f:60:e3:bd:65:f1:ed:6d:29:1e:be:21:
bf:a0:14:0b:74:17:0b:fa:88:bd:ab:ab:ed:ab:f4:48:b5:94:
6d:9d:8b:9e:01:4d:6d:21:af:14:fd:9c:3a:a1:a4:4f:ff:f3:
bb:b8:d1:76:24:0f:d9:1b:b2:79:88:a6:b3:f9:6e:9b:9e:69:
3b:ab:99:79:3e:17:2a:31:e7:b5:38:aa:26:0c:61:96:09:9c:
48:ca:ca:b9:80:58:85:e9:c2:73:61:e0:3f:f3:3e:88:f4:e1:
38:7f:44:02:90:2b:a9:e6:e9:79:eb:87:13:2f:0f:ad:c7:d6:
f3:4d:8c:d2:2b:83:f7:5e:e5:c8:90:f6:61:96:10:3b:9c:8c:
ac:7e:f9:10:0d:0d:55:a8:f1:9e:43:66:39:1e:df:7c:b3:95:
45:6f:b8:66:ad:7f:b3:e4:62:b1:44:07:02:f0:89:e6:81:1e:
41:2a:5d:fa:7a:c2:62:cc:c6:78:45:4e:c8:f9:e0:05:ca:de:
be:d7:a7:74:07:42:cb:e5:e6:05:92:6e:7e:43:85:4a:44:db:
93:3a:01:f7:6e:75:7d:a4:4d:45:05:d8:e5:37:9b:3d:75:26:
f7:c2:78:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:30:46 2025 by rpki-client