Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3TpqtvTxnu5uIEycbSKAr30h-Ys.roa
File: 3TpqtvTxnu5uIEycbSKAr30h-Ys.roa (raw, json)
Hash identifier: eITDffvYDNQKcZSPAo83uYsNEDp6jFLgyYF99AGE3TY=
Subject key identifier: DD:3A:6A:B6:F4:F1:9E:EE:6E:20:4C:9C:6D:22:80:AF:7D:21:F9:8B
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189E484898512F184CAEDF49D42D3D81554
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3TpqtvTxnu5uIEycbSKAr30h-Ys.roa
Signing time: Fri 11 Aug 2023 12:13:58 +0000
ROA not before: Fri 11 Aug 2023 12:13:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:e4:84:89:85:12:f1:84:ca:ed:f4:9d:42:d3:d8:15:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 11 12:13:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dd3a6ab6f4f19eee6e204c9c6d2280af7d21f98b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:d3:ed:70:b5:7e:54:90:98:f1:c0:99:d2:6c:
0d:7f:00:d6:01:c8:84:d7:b0:1c:f4:ae:00:4e:3e:
9a:ad:d9:43:0a:9c:03:24:02:64:88:3b:fd:dc:59:
98:95:51:49:91:09:32:04:1d:fc:5c:90:ea:95:8d:
ee:77:f7:c7:b0:4e:45:51:e1:d3:df:c6:b2:5e:a9:
b0:4c:43:15:68:88:3d:ff:b7:10:45:56:e3:73:47:
7e:82:19:bb:b5:32:62:6c:4b:47:ba:ce:d3:0f:74:
26:01:92:a9:62:f6:b6:6c:92:ba:9d:be:66:cd:ed:
ff:b0:91:49:65:f9:5d:5c:34:81:a7:0d:a4:bb:69:
48:03:64:2c:a5:85:df:ea:2a:be:b9:14:d3:4b:02:
da:3d:51:44:55:9f:18:57:c7:97:c2:2e:34:b6:f8:
73:c5:c6:b1:88:14:d8:e5:76:3d:92:e8:d2:71:bc:
a3:af:e1:71:4b:b4:d6:84:57:6c:12:45:cd:38:73:
ca:61:23:4f:7b:26:6a:d0:40:36:39:66:f2:3c:ca:
eb:c7:d0:e5:48:81:87:5a:36:02:25:5b:cf:1a:79:
b7:ec:71:87:b9:5e:92:0e:2c:8d:f7:b8:7d:23:09:
46:5f:dd:26:3e:9f:d2:b0:5c:82:97:7f:7f:e9:3d:
89:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:3A:6A:B6:F4:F1:9E:EE:6E:20:4C:9C:6D:22:80:AF:7D:21:F9:8B
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3TpqtvTxnu5uIEycbSKAr30h-Ys.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
62:a8:a4:65:49:ab:a3:33:57:30:b4:47:b4:03:d8:bd:74:b4:
1d:57:8e:c7:c4:59:8d:6d:0d:ae:07:ea:65:12:c4:d5:2c:94:
ef:be:1e:8a:2b:d7:a5:3d:42:3e:80:60:c8:21:e4:79:fe:e1:
eb:40:18:27:cf:a4:ae:77:f6:89:7d:0b:6f:19:de:a4:2c:46:
01:f1:cc:b7:46:76:b2:57:1f:b1:f2:df:f1:d5:d3:16:f4:60:
55:96:00:b4:19:b2:fd:a2:3e:22:56:8e:99:9c:92:8d:f8:2d:
4c:5a:c8:1c:be:23:58:73:58:55:90:ae:da:23:fe:1b:83:db:
a8:0f:83:3f:8d:73:c2:79:43:4a:e5:3e:2d:e3:b5:44:fa:20:
27:41:a3:79:0a:51:8a:b2:ff:dc:50:72:2a:12:ef:ab:78:4a:
21:85:70:ea:cc:b3:20:56:0b:b0:b4:2b:6b:44:55:d9:1f:7e:
62:20:19:bc:9c:fb:1e:a3:b1:2a:60:ba:99:32:49:aa:a2:29:
a4:bf:cd:bf:d0:db:3b:ed:fa:72:2d:20:0a:02:50:24:bc:23:
47:8c:e5:1e:18:a6:8b:5f:e0:5e:3b:82:f4:82:51:d8:b8:45:
c6:78:e6:76:24:cb:4d:9d:27:e0:59:dd:aa:11:39:d2:45:57:
e7:55:ef:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 00:26:41 2025 by rpki-client