Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3WWGm34CnI4V7mMbuZVbofgy_B4.roa
File: 3WWGm34CnI4V7mMbuZVbofgy_B4.roa (raw, json)
Hash identifier: IVc5CEXtOlo2ps1gT05pQyO5bA28CCmqmIkvJXbt/DA=
Subject key identifier: DD:65:86:9B:7E:02:9C:8E:15:EE:63:1B:B9:95:5B:A1:F8:32:FC:1E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A1DD2FAFC4754F25781CE4C49DAEF4F50
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3WWGm34CnI4V7mMbuZVbofgy_B4.roa
Signing time: Tue 22 Aug 2023 15:18:00 +0000
ROA not before: Tue 22 Aug 2023 15:18:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18a:178d:7ed9/128 maxlen: 128
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:1d:d2:fa:fc:47:54:f2:57:81:ce:4c:49:da:ef:4f:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 22 15:18:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dd65869b7e029c8e15ee631bb9955ba1f832fc1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:4d:bf:08:65:c7:52:dd:18:a6:e7:36:a6:67:
a7:0a:c9:36:8a:a6:93:69:71:89:c7:26:bc:18:85:
f4:8f:36:24:3f:b6:91:10:ac:d9:12:ef:5a:64:a9:
44:99:1c:8c:f9:af:cf:7e:04:06:87:7a:df:ad:78:
f1:02:dc:e3:e2:fc:76:6d:67:94:d9:b4:36:0a:76:
da:47:8f:0c:7c:7b:4d:23:ec:2b:c7:29:60:1d:fd:
b8:99:57:24:b6:c1:be:c9:c5:63:34:95:4d:ea:16:
c1:2c:96:49:35:b1:7f:19:04:f6:5d:50:11:22:ae:
1c:b2:19:af:17:70:5f:27:f6:db:08:a1:97:14:7b:
59:57:8d:c7:8c:ff:c7:97:58:1b:93:e3:8b:6b:ae:
57:f8:e9:34:3c:85:35:7b:4b:65:ff:cb:34:79:f9:
ca:40:e3:83:6d:d7:32:d1:cb:bc:41:db:ab:a0:09:
96:c7:6b:de:db:c4:7e:22:fb:62:2f:06:18:f9:e4:
4b:81:1c:83:5c:51:00:9e:b5:c4:da:36:98:65:37:
db:c6:71:d8:be:06:61:2f:ab:cc:a7:64:50:7c:d2:
67:86:30:9c:40:cd:4a:81:7a:d5:0a:79:0b:aa:5b:
28:fa:4c:ad:e4:5c:30:03:5d:ef:c7:0a:22:91:ce:
33:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:65:86:9B:7E:02:9C:8E:15:EE:63:1B:B9:95:5B:A1:F8:32:FC:1E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3WWGm34CnI4V7mMbuZVbofgy_B4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3e:6d:b8:22:5d:62:e9:cb:f4:79:8a:08:dc:e4:bb:a3:57:91:
9c:6e:b4:b3:01:a5:33:88:12:8d:b7:5f:16:39:10:cd:da:be:
a0:c0:d6:d2:1a:b4:2c:e2:50:d5:9d:e6:88:7f:df:3c:ba:25:
c2:a0:e8:a6:27:be:d0:12:7a:f9:f3:c7:db:64:35:05:ae:1d:
1d:7f:31:33:08:9c:ea:05:d1:19:ad:41:9e:6f:7c:3d:2f:0b:
b7:61:ce:96:b6:12:7e:a9:21:86:98:25:a5:c1:9b:f9:67:21:
01:7c:1c:82:45:e7:85:e3:87:a6:76:49:64:af:20:e8:a4:4a:
5a:c3:70:23:4c:71:3f:e7:4b:17:1b:c9:6d:12:77:ea:a5:0a:
22:8c:e5:18:df:49:a2:b0:69:b9:c5:c6:c4:e9:18:d8:b1:b6:
35:ae:f6:1c:dd:df:78:c1:17:ca:3e:d4:85:fc:0f:c6:52:52:
19:e0:ec:72:87:54:96:c0:53:22:11:03:93:bc:2e:03:00:01:
73:4c:8d:e9:2d:41:22:d0:74:a7:18:48:70:9d:32:66:06:17:
d5:58:28:b9:35:96:63:35:df:fd:9e:d1:b6:c8:b5:8d:2a:ba:
1c:61:48:c2:23:17:51:cf:7d:9b:28:3a:48:8a:f5:e4:67:29:
71:e8:b7:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 22:36:58 2025 by rpki-client