Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3Wi4a6li_48_spsCmdzt_AivVvQ.roa
File: 3Wi4a6li_48_spsCmdzt_AivVvQ.roa (raw, json)
Hash identifier: cgnxAKRFELdphc22cMlfP7AcCd2SjOE1WzL/NxJuuqU=
Subject key identifier: DD:68:B8:6B:A9:62:FF:8F:3F:B2:9B:02:99:DC:ED:FC:08:AF:56:F4
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0183EF511A0A601FCDD4C4114E63512C9BFF
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3Wi4a6li_48_spsCmdzt_AivVvQ.roa
Signing time: Wed 19 Oct 2022 08:16:53 +0000
ROA not before: Wed 19 Oct 2022 08:16:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:ef:51:1a:0a:60:1f:cd:d4:c4:11:4e:63:51:2c:9b:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Oct 19 08:16:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dd68b86ba962ff8f3fb29b0299dcedfc08af56f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:0e:6e:09:cc:60:a9:26:3c:2c:5d:c1:95:11:
99:18:c7:82:01:25:a6:81:ad:af:be:5e:88:f1:8c:
80:19:1b:e2:f2:c2:be:53:53:d4:c3:ee:5c:0b:c1:
1a:ca:70:ec:89:79:86:59:22:47:b8:e3:5c:06:a2:
ce:e6:22:c0:ac:71:5c:eb:5f:91:7f:d8:e6:c8:39:
4e:51:f8:7a:ae:f6:9b:f3:de:db:2b:c3:7b:b8:95:
77:0b:26:9c:75:53:53:96:5c:84:55:06:9d:01:1b:
15:9e:6a:5d:fe:aa:63:2b:be:a0:99:1f:07:e3:47:
17:25:42:5f:0d:5d:f0:c2:32:e9:25:0a:db:ea:a7:
96:75:21:35:c3:34:7a:b0:a2:97:18:89:66:77:80:
72:8e:29:a0:12:65:09:3c:01:4c:a6:52:2f:c1:b0:
db:e5:c2:e2:92:8d:22:4e:14:7c:64:25:f1:a9:97:
23:e9:cb:63:7d:33:71:96:4e:41:f9:60:46:89:82:
9e:1c:92:05:c3:ae:0b:8b:86:f5:25:0a:48:f8:40:
78:a6:de:44:de:ae:53:4a:84:bd:35:b5:10:f1:30:
01:b8:da:d9:98:08:b0:c8:9a:a4:b5:e6:5e:9d:e4:
14:95:18:e4:19:8c:33:c1:71:aa:d8:13:13:56:dd:
d7:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:68:B8:6B:A9:62:FF:8F:3F:B2:9B:02:99:DC:ED:FC:08:AF:56:F4
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3Wi4a6li_48_spsCmdzt_AivVvQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6b:09:d2:59:b6:56:0e:a8:4f:53:d7:3e:9a:3f:e6:41:a5:01:
79:6c:b9:0f:cb:2b:a6:2c:a7:c2:9c:43:59:5b:0e:25:09:74:
2f:7b:03:0c:2f:77:6b:00:98:a1:3c:15:57:c8:53:b8:d1:64:
77:12:e1:1e:f8:4c:2d:34:52:41:f6:52:c0:09:22:6d:ae:57:
62:d7:90:dd:6e:c4:76:d2:61:d5:06:dc:70:e4:b3:f9:ef:e5:
ff:6c:a9:fb:26:cf:82:6f:27:f2:08:52:c3:07:fc:d0:0b:57:
b4:b9:e9:9d:75:bb:89:50:f1:ff:cd:78:0a:fc:96:c2:0d:6b:
9b:aa:d1:d9:26:05:9a:2a:57:a5:28:b0:7d:ac:a8:63:c1:37:
87:47:94:31:a4:02:6a:9f:1f:d8:29:ed:44:aa:1d:f3:eb:f6:
37:6e:ca:26:dd:32:3f:78:ad:99:ca:df:ce:f0:bc:d8:c2:fa:
89:62:00:94:60:ae:87:64:7d:56:db:93:ab:20:b7:22:63:dd:
0a:6c:97:00:36:55:5b:87:69:b0:03:26:30:3a:91:13:ea:59:
57:00:d5:7f:d6:eb:12:fa:61:58:61:e7:32:fd:87:18:64:fd:
9a:be:32:53:dc:91:1b:63:77:5d:69:e7:cf:b3:98:81:41:45:
c6:fa:e2:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 07:24:22 2025 by rpki-client