Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/p3kTW-PQxW1hL0kC0o53ZP4J8rU.roa
File: p3kTW-PQxW1hL0kC0o53ZP4J8rU.roa (raw, json)
Hash identifier: nUzAnujScaNiKWqxcLkC5QBraH1gXpfZEi9ziv1CIl4=
Subject key identifier: A7:79:13:5B:E3:D0:C5:6D:61:2F:49:02:D2:8E:77:64:FE:09:F2:B5
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 6DACF12A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/p3kTW-PQxW1hL0kC0o53ZP4J8rU.roa
Signing time: Fri 25 Feb 2022 19:18:20 +0000
ROA not before: Fri 25 Feb 2022 19:18:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1840050474 (0x6dacf12a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 25 19:18:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a779135be3d0c56d612f4902d28e7764fe09f2b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:1c:85:ce:fd:76:46:47:2b:95:fe:49:1f:ca:
61:52:e6:5e:79:f7:e3:c2:2c:da:fc:11:ce:1e:a5:
26:4f:1c:dd:50:ac:f0:ba:c5:aa:39:15:bb:9e:03:
28:dc:e4:2b:9f:38:f8:e5:9e:64:65:86:e9:fe:13:
40:ab:e1:34:52:54:41:15:1c:77:71:5f:b9:b3:cd:
b1:64:f9:42:0e:8b:9e:85:65:64:f5:99:ae:5a:52:
ae:de:6d:3a:8a:19:fa:a7:11:fd:93:6f:df:79:c9:
21:32:4e:41:9f:c4:cc:f9:69:8c:75:26:72:0a:9d:
2b:e5:9b:0b:55:2d:a5:36:ba:5f:f3:80:cd:5e:cb:
00:6c:c0:c9:69:42:29:a0:6c:6a:db:f4:12:f0:18:
2a:d3:67:9a:61:6a:a6:96:09:f9:84:6e:92:43:65:
60:d1:52:e8:04:d8:a3:89:3e:4e:cf:9c:67:b2:a6:
59:a5:69:2f:38:1e:e3:a8:74:84:4a:86:31:76:04:
c2:67:6d:13:5a:f2:c9:09:b1:ff:9c:7b:3e:86:53:
bf:24:95:d6:24:0d:fc:22:89:c7:7a:ea:5e:ca:34:
04:86:ad:7b:90:7f:4b:33:f1:4a:1d:03:38:7f:ac:
f1:2e:f4:1e:d1:52:dd:79:f9:01:17:0f:34:21:fa:
a7:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:79:13:5B:E3:D0:C5:6D:61:2F:49:02:D2:8E:77:64:FE:09:F2:B5
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/p3kTW-PQxW1hL0kC0o53ZP4J8rU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
80:be:8b:2a:af:8f:c2:b1:fb:26:f9:4a:31:ae:46:6e:c1:c4:
26:eb:7d:f4:f2:37:84:4a:20:8c:65:0e:ed:38:6e:76:f5:cc:
f8:7c:ea:61:e7:f0:bb:36:18:55:9c:00:07:7c:fe:65:0a:66:
e3:8d:47:0c:60:ad:75:a1:78:21:54:11:1a:b9:cf:4d:57:91:
7c:6a:d1:e7:91:7a:a0:1f:85:c5:99:7b:f6:b8:1a:36:c2:3e:
f4:61:f9:5d:b2:1e:8f:28:72:83:05:a0:f5:16:7a:c6:ca:59:
ce:ae:8c:0d:58:31:25:f4:cc:c0:e2:e8:0d:a6:1b:f9:3f:af:
cf:36:55:c4:f4:3d:6c:ac:95:0b:5a:c6:bb:ed:a4:51:05:a0:
a1:39:83:bf:5b:0c:5e:56:26:cb:87:71:e0:e7:1f:d4:55:09:
89:20:57:18:03:ea:61:5e:e0:1d:12:3c:c2:7b:7b:6e:c9:fa:
7c:4e:6b:58:97:1b:84:6d:40:ed:8b:74:62:82:31:bb:af:61:
ef:f0:23:72:ba:2b:2d:5f:37:cd:a8:ee:5c:4b:d6:fb:5f:04:
26:d7:37:c2:29:57:4d:59:be:5a:4d:31:d4:e5:02:14:d6:28:
0a:99:34:b7:65:d8:76:fe:00:4a:2b:7d:8b:77:01:92:10:c7:
52:d9:bd:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 14:24:46 2025 by rpki-client