Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3f_ENuoymFxI3LKEYJM106infgM.roa
File: 3f_ENuoymFxI3LKEYJM106infgM.roa (raw, json)
Hash identifier: ECmT3yJMAK9yTz8Y+CRxKMbgtq6DTpTTgyDrcLfRsbo=
Subject key identifier: DD:FF:C4:36:EA:32:98:5C:48:DC:B2:84:60:93:35:D3:A8:A7:7E:03
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018741E4519EDE13ED65B0938FE1953B5813
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3f_ENuoymFxI3LKEYJM106infgM.roa
Signing time: Sun 02 Apr 2023 12:14:54 +0000
ROA not before: Sun 02 Apr 2023 12:14:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:41:e4:51:9e:de:13:ed:65:b0:93:8f:e1:95:3b:58:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 2 12:14:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ddffc436ea32985c48dcb284609335d3a8a77e03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:01:b3:52:ce:f7:2b:e7:a1:12:d6:88:09:78:
84:7d:b7:54:e2:72:2b:2b:9b:8a:f2:e5:ce:75:89:
1c:10:1a:1e:c4:3d:71:0a:4b:c1:9a:79:0e:2c:6f:
b2:16:ef:de:19:06:fd:84:41:7b:a4:a3:04:26:df:
e9:14:f5:ad:28:16:4a:a6:cc:ba:c4:8e:68:45:5d:
ac:19:8b:7b:08:20:a9:9c:74:dd:ab:ba:09:b0:64:
6e:3a:ed:e4:43:bb:87:8d:92:97:2d:08:69:cd:23:
05:61:b2:1d:81:ab:35:93:57:12:c2:b2:ad:25:34:
29:e8:c7:a2:c3:bf:04:99:ab:5e:52:84:c4:32:13:
68:2f:2b:dc:db:94:93:9c:59:1c:11:fd:b5:f2:b9:
01:6f:fb:c0:ce:f9:49:98:e1:a7:e7:64:03:c1:3c:
a6:c0:96:fe:1e:d3:ae:d1:e9:46:02:61:d9:77:fc:
3f:f4:26:06:9c:9a:17:5d:bc:8a:9a:04:8e:00:37:
a0:11:e9:4d:a3:10:b2:4c:80:c1:56:7f:7b:0b:32:
86:13:8f:19:bc:30:e4:a5:94:8e:0e:91:42:d8:9f:
f8:06:a3:18:4e:b7:3e:11:5a:bf:7a:8b:8f:6c:96:
9e:fd:6f:10:aa:0e:57:03:f6:1b:8a:4a:ea:fa:91:
59:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:FF:C4:36:EA:32:98:5C:48:DC:B2:84:60:93:35:D3:A8:A7:7E:03
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3f_ENuoymFxI3LKEYJM106infgM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
80:6e:06:7b:4d:b0:30:76:a6:70:97:b7:95:49:ea:55:0b:9d:
af:92:4a:cb:d9:ac:89:57:cc:a3:47:6a:b0:7f:69:1e:d4:34:
18:b2:ea:b3:8b:85:ba:46:cb:3b:f3:62:16:86:14:77:a6:ad:
b9:57:45:25:6b:d1:d6:24:c7:ef:d1:f0:65:98:15:c2:09:7e:
6a:bb:e6:b2:24:33:28:cf:cf:ae:68:94:0f:6b:84:51:15:7b:
bd:74:6e:6a:fa:b0:1b:63:71:0f:4d:33:a1:3e:95:7e:75:6e:
c5:75:a7:b1:9d:e4:10:92:00:4a:61:86:de:bd:cf:7b:e8:e8:
c9:7c:c1:53:0e:f2:6b:91:84:c1:ce:71:69:fb:61:d0:70:bd:
0e:02:18:1a:76:bd:45:eb:bd:25:dc:61:29:d8:07:6b:23:25:
a1:b7:80:cd:da:ee:14:16:74:92:37:29:70:78:ff:26:6e:01:
2b:92:c5:43:d7:a1:c1:64:71:44:f9:ca:1a:6a:45:0a:5b:dc:
bf:c1:e0:02:e4:c4:99:79:1a:8e:d1:d1:b7:34:c2:4e:1b:ad:
e8:f6:c9:87:d3:15:ee:77:cd:f4:a4:11:cc:36:dd:80:85:c9:
cd:96:13:97:45:b0:f0:e7:8b:0f:bb:1b:fa:84:65:52:3f:65:
1c:d9:20:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 22:38:23 2025 by rpki-client