Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3qG7rgyJ2staawIhG77ifTJ1sPA.roa
File: 3qG7rgyJ2staawIhG77ifTJ1sPA.roa (raw, json)
Hash identifier: LKhtWv4fY1gMEzy+nc+XvbnDV7aN1QfpvXage2LVRgg=
Subject key identifier: DE:A1:BB:AE:0C:89:DA:CB:5A:6B:02:21:1B:BE:E2:7D:32:75:B0:F0
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 8BB98C92
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3qG7rgyJ2staawIhG77ifTJ1sPA.roa
Signing time: Sat 11 Jun 2022 03:11:02 +0000
ROA not before: Sat 11 Jun 2022 03:11:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:181:22f:7a99/128 maxlen: 128
2001:67c:64:ffff:0:181:477e:58d8/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2344193170 (0x8bb98c92)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 11 03:11:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dea1bbae0c89dacb5a6b02211bbee27d3275b0f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:76:fd:9d:19:b4:65:df:a0:72:9d:2c:a4:24:
2e:f8:0f:52:9c:5c:90:7a:33:ed:05:92:9d:3e:1d:
f0:82:52:6b:21:04:e5:3d:22:ef:1f:e0:95:61:fa:
52:c5:6b:30:1f:0b:e8:b7:9e:aa:19:26:f2:55:41:
0a:72:d8:b4:09:d6:31:c0:4e:f7:4f:38:c1:1a:f3:
af:cc:6d:08:60:8d:65:79:09:91:d6:b3:f0:1c:08:
60:a0:4b:06:81:ad:dd:07:92:4b:fe:93:ce:4c:83:
bf:87:35:96:d2:64:05:b0:b5:5d:67:b6:4f:2d:c1:
3f:6f:8d:73:8c:3f:c0:dc:d4:28:da:cc:20:a8:a9:
c4:c6:ba:14:eb:10:f4:b6:88:72:73:ab:4d:3b:6b:
bb:2b:4d:6b:81:1a:e7:9b:53:4e:81:d9:9e:f8:21:
ae:63:49:3d:67:4c:52:19:c7:9c:55:73:a0:5f:92:
a6:54:a3:1b:96:19:29:5a:1d:15:d4:f3:34:02:d3:
7d:1d:65:4f:82:51:40:50:53:50:15:5d:9a:69:3f:
c2:ff:d9:4a:84:85:ca:2d:9a:9c:45:d7:6c:5b:29:
fb:e6:00:a4:e7:c0:db:b8:0f:16:c9:4a:16:cf:6e:
6e:c4:99:24:06:13:f7:9e:1c:12:a9:f0:fb:3b:88:
a4:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:A1:BB:AE:0C:89:DA:CB:5A:6B:02:21:1B:BE:E2:7D:32:75:B0:F0
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3qG7rgyJ2staawIhG77ifTJ1sPA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
18:43:b1:91:49:6a:fd:ac:2c:dc:ca:17:9f:e3:96:40:90:47:
dd:7a:24:2d:5a:39:19:93:4c:e0:df:24:88:05:c4:1a:af:4f:
ff:32:90:08:db:dc:c2:5a:72:26:de:03:a5:67:c1:e3:cc:91:
c4:eb:97:68:dc:a7:60:88:f6:35:51:6d:53:16:e5:05:f4:43:
61:5d:40:14:73:de:85:fc:35:16:49:bc:ca:c4:7d:73:fe:e9:
c8:1b:83:e9:a0:f9:e2:37:bb:16:ca:02:17:29:28:79:43:93:
2e:8e:49:5a:48:78:48:ba:d5:c0:0c:b1:4d:36:82:6d:fc:7b:
56:de:0f:d6:83:0c:0a:65:e9:ea:b4:c3:e8:87:62:27:e0:f0:
8d:55:e5:6d:93:8f:1d:b3:85:fa:aa:da:62:dc:70:51:1d:d8:
0e:13:2d:ae:eb:6e:97:72:62:44:c4:98:40:4f:d0:68:08:d8:
48:60:37:3e:80:d3:a5:96:26:87:5a:3e:69:99:41:54:3d:a9:
3f:68:d6:1a:73:82:36:49:60:40:2a:61:e0:5e:2f:ec:71:1c:
0a:7d:47:da:7c:fd:39:38:5a:cf:89:bf:0b:cd:26:f4:3d:58:
f4:5d:64:44:a1:c5:ee:b0:f4:ed:7a:ec:5a:31:3f:28:ea:9c:
8a:1d:a4:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 09:51:41 2025 by rpki-client