Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/03ivxY8P0ILa_oV63dvvhUhR3nY.roa
File: 03ivxY8P0ILa_oV63dvvhUhR3nY.roa (raw, json)
Hash identifier: b/CcJmQHWE7d8/lnaAZFFauZgWbFoF4O4ScdhBZzEsw=
Subject key identifier: D3:78:AF:C5:8F:0F:D0:82:DA:FE:85:7A:DD:DB:EF:85:48:51:DE:76
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01846F6075930F5B7434B7E2EAB554576964
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/03ivxY8P0ILa_oV63dvvhUhR3nY.roa
Signing time: Sun 13 Nov 2022 05:05:03 +0000
ROA not before: Sun 13 Nov 2022 05:05:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:184:51c3:ad7c/128 maxlen: 128
2001:67c:64:ffff:0:184:3fbd:71f7/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:184:6f60:6e92/128 maxlen: 128
2001:67c:64:ffff:0:184:4250:a4df/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:6f:60:75:93:0f:5b:74:34:b7:e2:ea:b5:54:57:69:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Nov 13 05:05:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d378afc58f0fd082dafe857adddbef854851de76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:05:4d:a6:a1:56:16:da:66:e7:be:3e:9d:23:
89:f4:c5:46:76:20:2a:7a:e0:19:fc:ef:7a:f0:b1:
b8:39:90:0b:2b:43:dd:1d:58:b4:7b:f0:c9:74:31:
9c:81:31:f1:d5:24:8c:40:67:8b:9e:db:63:5a:dd:
c0:13:f5:f9:12:a8:3a:b5:d8:e2:f4:57:14:54:65:
0e:a6:18:de:e6:16:c6:70:98:17:81:de:fa:53:87:
59:cf:8f:ac:68:e8:0a:09:38:d3:52:31:b8:6a:a9:
d8:9a:7a:18:bb:ab:c8:2b:50:12:0b:05:88:81:2b:
ea:b1:25:ac:bc:7d:e6:54:08:f1:2e:6d:27:59:39:
ed:8f:9c:9a:7a:58:76:0b:3e:2b:f0:69:de:2c:93:
95:8c:97:ce:d5:1f:bc:91:d1:cb:ba:9e:1e:04:57:
f8:b7:f5:52:80:ea:a2:15:18:8e:3e:7b:d6:bc:44:
39:da:bd:09:b5:b5:80:40:90:db:a1:4b:b9:b0:36:
66:1f:6d:98:02:47:3a:7c:0b:d0:99:0c:b9:77:84:
48:9c:c1:d0:64:f1:21:b7:9f:42:c8:ca:ac:db:ec:
3f:a8:1b:44:1c:30:ef:75:b2:2f:92:f2:15:7b:68:
34:c5:21:79:e8:91:e0:5d:2d:13:88:82:eb:38:fb:
4c:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:78:AF:C5:8F:0F:D0:82:DA:FE:85:7A:DD:DB:EF:85:48:51:DE:76
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/03ivxY8P0ILa_oV63dvvhUhR3nY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
ab:ac:b8:e8:43:9a:2f:cf:78:96:62:be:e1:90:0e:55:76:52:
35:eb:39:e7:5b:f5:39:3a:81:d7:0a:d8:8b:82:42:89:29:d4:
e4:4d:d4:b6:79:c3:00:87:cc:e3:82:2f:c9:f8:f4:21:68:fa:
35:c5:15:0c:87:8d:46:ac:11:52:54:05:e6:1a:11:21:0d:c7:
cf:fb:f2:79:ae:8c:68:f5:d0:83:0a:67:d7:f6:b0:38:02:96:
2c:cd:fe:7e:35:88:98:e3:f6:1d:82:a9:0d:56:bc:61:34:e7:
11:8e:b4:23:1e:7b:7f:22:7a:68:77:d8:f6:05:cb:81:57:7d:
7e:03:da:df:4d:63:d3:dd:21:4c:43:0c:50:26:a2:39:ab:11:
d7:be:bc:c6:d0:be:1b:a2:33:72:e7:5f:51:af:a5:c1:df:7a:
2a:cc:f4:1e:16:3c:1f:9a:a9:d4:d5:f5:f8:5b:7a:ca:12:c5:
e6:35:3a:1c:3c:6e:08:99:43:d4:05:10:b4:fa:8d:0a:ab:6c:
31:c6:5e:34:2b:62:5a:45:7e:ee:70:fa:b7:2c:1a:1d:bf:29:
e3:65:19:7a:ea:0c:d5:3e:24:e4:07:29:9b:4e:03:bf:60:15:
22:ff:d9:c3:2d:2c:54:7a:30:23:af:80:bd:69:cd:4b:54:4a:
7e:32:01:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 03:15:24 2025 by rpki-client