Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3CGtDdwY4PiVhNW6m-zNe0ku1TA.roa
File: 3CGtDdwY4PiVhNW6m-zNe0ku1TA.roa (raw, json)
Hash identifier: ELQF3uduP+gbBKayH97WEnNpCyDNQj/6A0o3Xti0Las=
Subject key identifier: DC:21:AD:0D:DC:18:E0:F8:95:84:D5:BA:9B:EC:CD:7B:49:2E:D5:30
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018871ED38C19776D03D12A90C885BA150FC
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3CGtDdwY4PiVhNW6m-zNe0ku1TA.roa
Signing time: Wed 31 May 2023 13:09:11 +0000
ROA not before: Wed 31 May 2023 13:09:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:71:ed:38:c1:97:76:d0:3d:12:a9:0c:88:5b:a1:50:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 31 13:09:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dc21ad0ddc18e0f89584d5ba9beccd7b492ed530
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:3b:ab:a7:c9:0d:62:bd:b5:b9:d3:b9:ff:52:
82:c6:c6:5a:ff:23:9b:74:d1:0c:e3:01:98:4c:8c:
17:3c:e1:c4:ba:5c:b3:05:1d:69:49:67:25:cd:a9:
51:f5:05:ee:a2:40:cf:69:70:be:04:c9:95:c8:5c:
6e:a0:d5:46:2d:ee:cf:d1:f8:81:c1:70:42:5b:b0:
15:75:1c:ca:5b:ce:9b:33:17:aa:f7:33:19:e8:e9:
2a:e5:a7:7c:d7:24:a1:80:a8:5d:86:8c:80:b7:70:
4e:47:07:0e:b6:28:43:87:a6:fe:68:ce:9f:a4:d0:
f3:fd:c3:05:e3:c5:57:9c:01:ac:07:4f:e2:83:72:
97:d1:16:24:b8:f7:25:38:f4:8e:a7:29:72:31:85:
3e:fe:e8:4e:38:24:f0:0d:7c:16:bd:ef:25:cb:8d:
a9:29:e0:40:0f:c0:76:24:33:e1:8d:7b:ac:2a:62:
f9:09:9b:7e:52:dc:ba:e9:13:e9:1b:c4:89:7a:eb:
ff:03:2c:6b:11:92:15:d7:da:87:21:fe:63:54:ba:
e3:4b:47:8e:13:9e:c6:b1:fa:3e:b6:82:36:57:d1:
10:63:53:c1:42:d1:44:2b:d2:f0:37:3b:cf:b0:38:
25:0b:4a:bc:be:fc:b9:6b:e7:69:11:97:8c:9e:89:
3d:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:21:AD:0D:DC:18:E0:F8:95:84:D5:BA:9B:EC:CD:7B:49:2E:D5:30
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3CGtDdwY4PiVhNW6m-zNe0ku1TA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5a:fd:e4:ef:a7:70:41:8c:d5:86:78:d7:b9:67:46:77:92:4d:
cb:34:32:3b:b8:03:2a:16:c4:8b:79:42:4a:8d:13:53:94:d0:
aa:98:6e:fb:7a:19:3f:33:63:95:38:12:98:01:a1:f8:bc:40:
3c:59:7c:bf:62:71:c8:31:d6:33:74:ff:92:c5:b0:b6:28:d2:
77:ab:d3:02:f8:15:a9:0c:79:4d:52:7c:bd:ee:35:7a:f8:9e:
08:f1:20:d9:0c:98:00:32:b4:a8:b3:30:dc:70:a3:bb:45:d9:
be:a7:24:e0:1b:5d:f1:98:10:c7:7d:88:d7:95:e3:7a:b7:b3:
60:1b:93:4b:d5:04:11:ec:51:a9:77:f9:20:01:5f:4d:00:f5:
5f:99:c3:8a:71:0d:e1:da:21:61:c9:4e:b4:65:26:30:77:dc:
77:4e:cf:28:5d:54:49:3b:fb:9e:55:62:51:ed:89:52:d9:bb:
19:ef:5d:80:ed:0c:0e:fc:b9:93:02:01:92:3d:66:65:1b:e5:
5e:a7:0a:fc:0e:46:0a:39:b7:2e:60:55:fd:71:d0:a8:64:20:
b1:d9:02:93:44:c7:46:a4:ec:15:97:6b:66:6e:a5:5f:72:47:
c8:eb:af:e9:ad:21:fa:f5:3d:c4:f1:2a:18:5d:91:62:89:f6:
6a:35:4a:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 00:37:07 2025 by rpki-client