Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3O2xSRnJ3WMugmb6W8jl_G8FU04.roa
File: 3O2xSRnJ3WMugmb6W8jl_G8FU04.roa (raw, json)
Hash identifier: S8P7MgqJVAv54CEH2Wj1aUKwEKvZMHke/HjCuxB2LnQ=
Subject key identifier: DC:ED:B1:49:19:C9:DD:63:2E:82:66:FA:5B:C8:E5:FC:6F:05:53:4E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01877A86AFA4DA5489D4A2F407A78A3206F8
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3O2xSRnJ3WMugmb6W8jl_G8FU04.roa
Signing time: Thu 13 Apr 2023 12:10:59 +0000
ROA not before: Thu 13 Apr 2023 12:10:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:7a:86:af:a4:da:54:89:d4:a2:f4:07:a7:8a:32:06:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 13 12:10:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dcedb14919c9dd632e8266fa5bc8e5fc6f05534e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:43:e7:31:bc:66:1b:18:a7:9b:8f:20:61:44:
86:61:83:23:61:e6:42:aa:89:4e:54:e1:1f:7a:17:
6c:2e:ba:7c:a1:54:ea:0c:ef:67:ad:b8:1d:49:79:
37:49:e6:1c:79:a7:82:42:ac:ec:09:cc:11:f2:8e:
3c:59:41:2d:5b:d7:19:6a:6f:4e:a3:3a:06:7f:2d:
ba:90:16:3e:92:2e:97:5d:6e:49:5a:50:e0:64:ee:
ca:bb:75:61:8d:f9:de:82:58:36:5a:13:16:f3:4f:
60:15:cf:41:44:85:2d:b6:ac:b3:32:af:b5:4f:00:
ee:b7:8b:0e:09:79:80:53:68:53:ee:02:ab:45:08:
a2:ef:5d:fa:ee:36:ff:07:a4:44:9c:39:75:f6:fe:
c8:47:7d:26:66:51:56:a6:a5:8c:4b:e8:ae:fe:60:
51:30:e6:97:c2:4b:2f:90:65:f3:69:c7:5e:5d:61:
50:3a:11:d3:13:a5:9c:06:ce:c9:0f:87:cd:49:84:
29:9d:87:98:6b:8e:36:f8:94:60:d7:c8:e0:34:6b:
b3:f1:51:39:48:78:14:b6:11:6e:4b:5b:21:49:b0:
8f:64:13:c2:71:e1:b7:4b:06:1e:fa:f7:87:b7:52:
e2:3c:e9:92:a2:51:7d:0d:7a:cf:e3:e6:35:b2:70:
7a:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:ED:B1:49:19:C9:DD:63:2E:82:66:FA:5B:C8:E5:FC:6F:05:53:4E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3O2xSRnJ3WMugmb6W8jl_G8FU04.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
41:81:ca:9b:35:17:31:f2:79:51:63:f8:e1:7a:90:c2:1b:fd:
08:5a:ea:52:fa:6c:6c:69:14:d6:d4:91:50:6c:41:6e:42:b8:
eb:07:5e:4a:f3:41:37:64:87:50:7d:26:c9:1f:5c:de:65:85:
d6:86:4c:68:57:96:5a:7c:1e:9e:1d:e3:57:3b:e9:c6:2b:79:
c1:ad:21:9c:ac:28:99:fe:30:ec:28:0c:bf:bf:b1:81:04:6f:
d9:72:9f:9b:b8:7c:de:88:25:24:46:13:24:d1:40:34:c5:6a:
c1:21:b1:36:1a:00:52:a8:44:0f:22:b1:1a:d7:c7:ba:85:67:
97:62:01:89:1c:1e:a2:6c:33:3c:cd:f5:cc:07:d9:9c:a8:80:
b9:dc:63:a1:a7:fb:5f:06:01:d7:1e:94:2d:b5:31:a0:f4:14:
35:6e:1c:38:2c:6a:59:29:3b:97:d4:ec:f6:05:d3:2a:b3:28:
ab:3c:9d:f7:96:a4:bb:91:b6:3c:bb:ae:72:eb:6a:47:ca:db:
bc:72:1e:25:a7:c8:e4:ef:01:c4:38:40:05:bc:0f:0e:9e:27:
1d:25:f7:2c:03:f4:06:a6:0e:3c:3c:b8:bd:3f:00:ee:98:79:
ba:da:c1:04:5a:ab:c3:0c:e8:2d:0a:05:e7:bd:41:d5:4d:8f:
b5:e3:31:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:13:28 2025 by rpki-client