Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3_T39TTu8hVV7RKzgMUMldXaC6E.roa
File: 3_T39TTu8hVV7RKzgMUMldXaC6E.roa (raw, json)
Hash identifier: KPLS6udt5YP7T3fVmWbSYJN6ZbZxGmSaIDVZ9hAYorw=
Subject key identifier: DF:F4:F7:F5:34:EE:F2:15:55:ED:12:B3:80:C5:0C:95:D5:DA:0B:A1
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01828390D0ED30614EC0F93F2FCFD9B1C6DD
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3_T39TTu8hVV7RKzgMUMldXaC6E.roa
Signing time: Tue 09 Aug 2022 17:04:41 +0000
ROA not before: Tue 09 Aug 2022 17:04:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:8390:c766/128 maxlen: 128
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:83:90:d0:ed:30:61:4e:c0:f9:3f:2f:cf:d9:b1:c6:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 9 17:04:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dff4f7f534eef21555ed12b380c50c95d5da0ba1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:93:48:6d:a3:60:09:ca:31:c5:69:c8:b4:b0:
4e:55:48:34:d2:70:94:d4:13:0a:07:35:12:a9:68:
2e:d3:79:f2:05:3e:c7:53:3e:ca:b8:f8:aa:91:fd:
2b:1a:ff:24:6a:3e:60:a0:39:33:0d:98:76:fc:c1:
af:5a:47:c3:51:ac:f2:0b:80:6a:e5:f7:26:00:1e:
a6:b6:93:d9:71:6e:1a:f9:26:5d:bf:23:47:a5:d2:
65:a8:ab:bc:28:57:d1:4c:c9:a1:27:eb:23:8e:df:
11:73:5f:5c:75:18:3b:a7:ca:67:43:f9:6b:f3:09:
59:9e:f5:19:19:64:4f:65:20:30:aa:50:a3:2e:20:
3b:df:11:c8:48:44:70:45:17:c4:15:ab:88:81:90:
9c:95:5e:19:5d:4c:8d:c3:2e:c5:50:fd:50:0d:f5:
bd:1a:66:d3:da:f7:db:4f:4b:76:d9:0c:1e:59:6a:
5d:4b:f4:0f:39:32:1b:1a:ba:18:df:90:98:a4:86:
05:aa:eb:f8:cc:b5:f1:d2:3f:12:1e:47:cb:c8:db:
f5:1c:3d:86:39:22:f6:69:2e:8c:06:32:f1:e9:4b:
61:53:6d:14:13:66:7f:fb:73:f1:4e:0e:e9:1e:1b:
2a:a1:6c:9f:ae:35:59:30:41:d4:b7:0b:a9:08:85:
9f:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:F4:F7:F5:34:EE:F2:15:55:ED:12:B3:80:C5:0C:95:D5:DA:0B:A1
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3_T39TTu8hVV7RKzgMUMldXaC6E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
81:6c:31:9c:01:7b:9e:bf:e7:c8:ef:b1:d4:f6:78:95:17:2a:
3e:87:e3:03:85:29:aa:97:0b:60:1d:19:c9:36:f7:16:93:69:
46:80:b5:1b:88:e9:8a:3a:c8:f3:16:48:6c:99:f3:b5:e2:e4:
85:cf:3b:89:e6:56:72:5c:54:92:47:18:98:a0:13:58:fa:06:
5f:e5:c4:e9:96:15:a6:46:ce:48:37:85:a6:12:a5:dd:bf:20:
a7:69:3a:ee:e9:d4:12:55:63:bc:53:4b:85:ba:8a:58:67:c8:
15:0e:83:d3:7f:14:35:c6:6c:16:e5:f4:98:f3:a3:2a:2a:02:
5c:94:9a:56:5f:3c:89:4f:80:7e:39:7e:4c:eb:62:41:35:3d:
34:b4:87:32:2d:a1:49:16:4a:15:d4:8c:e5:43:c2:e4:53:13:
ce:69:a8:63:d4:cb:42:46:74:4d:28:cc:4b:07:18:5f:46:1f:
76:e6:a8:c1:33:48:dc:ba:64:09:12:79:7f:93:4f:62:dc:74:
e9:f9:e5:cb:a0:17:ce:df:d6:97:8f:8c:5d:86:55:61:49:18:
8d:4a:d2:ba:fc:bf:ff:0a:ab:2d:c4:da:c3:cf:dc:51:79:e3:
2b:93:f7:b0:60:8c:80:84:0b:8a:bf:83:87:59:5f:62:ae:02:
5f:bd:7e:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 02:41:42 2025 by rpki-client