Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3vXTr_82cnZN-kE5typ-RpvoZ68.roa
File: 3vXTr_82cnZN-kE5typ-RpvoZ68.roa (raw, json)
Hash identifier: AT0z0XAB4G1cbiQ3ty1uBXqze775I6Rc2Gj1zUfeWxo=
Subject key identifier: DE:F5:D3:AF:FF:36:72:76:4D:FA:41:39:B7:2A:7E:46:9B:E8:67:AF
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018548F4CFE142B9F3743C26B6325261699B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3vXTr_82cnZN-kE5typ-RpvoZ68.roa
Signing time: Sun 25 Dec 2022 11:04:41 +0000
ROA not before: Sun 25 Dec 2022 11:04:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:48f4:5ac8/128 maxlen: 128
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:48:f4:cf:e1:42:b9:f3:74:3c:26:b6:32:52:61:69:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 25 11:04:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=def5d3afff3672764dfa4139b72a7e469be867af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:e7:79:06:89:4a:1b:89:0e:ba:c9:bc:88:29:
c0:7f:f8:ee:3c:2b:5c:69:b5:e0:96:f4:d6:e0:c6:
ff:f6:38:a1:d8:5a:bc:7c:00:8c:c3:3b:9a:10:18:
54:65:fa:25:4b:ec:32:cf:e9:5c:96:c3:ed:c0:d4:
fc:a8:50:8d:3b:4d:79:e2:e8:db:26:d8:b1:0e:96:
a3:fd:a2:8c:b5:3f:a3:71:d5:49:6e:85:3e:99:17:
72:d7:35:79:95:81:8d:35:e7:21:f8:a4:52:5b:a0:
5b:03:02:95:eb:7d:93:d9:b5:6b:4b:57:30:59:5b:
4d:2f:80:c2:85:17:42:3e:7a:53:f9:f1:8c:d8:ad:
12:36:e0:be:5e:f4:e4:b5:47:e3:53:e4:88:9b:95:
c4:48:13:aa:3a:9b:90:2a:5e:6d:26:b6:f5:9b:51:
8a:e1:21:cb:d2:23:9a:bc:a3:2c:8e:2f:aa:4d:bb:
9f:67:fe:ef:e9:c8:87:62:4e:91:06:e2:3a:2d:fe:
e4:67:71:cc:30:30:d5:7b:ec:7d:b8:e4:bc:d1:46:
b2:95:35:89:6e:dc:be:8b:b6:ac:9c:af:b7:8c:10:
f1:e0:ed:f4:72:99:85:29:12:bd:05:91:8d:19:de:
7e:2a:39:fa:35:0f:95:70:64:e6:41:bb:2f:df:fd:
b4:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:F5:D3:AF:FF:36:72:76:4D:FA:41:39:B7:2A:7E:46:9B:E8:67:AF
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3vXTr_82cnZN-kE5typ-RpvoZ68.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0f:e7:14:c9:53:66:c2:3c:2b:7a:38:ab:55:45:65:dd:75:12:
e8:99:bc:6a:3b:a7:ad:8b:d5:da:48:70:3d:c5:32:d2:2e:0a:
33:28:99:fa:75:97:b1:f0:9c:ff:8b:46:a2:e5:02:1a:09:59:
63:62:a4:30:93:a7:6b:a5:bb:94:b7:64:a9:31:c0:c1:b4:b9:
9d:84:37:17:96:8e:a1:2c:5f:77:2f:62:f7:7b:e5:72:14:a6:
fe:9b:3b:15:ba:a5:ee:f2:ee:9e:61:33:52:0a:6a:6f:a1:f8:
28:e6:5d:33:45:b8:e7:4d:e6:a2:c6:9d:b3:cf:64:b1:a7:1c:
37:79:d9:e6:a3:a1:23:83:23:03:f6:da:38:a3:32:fa:65:c0:
95:23:3b:16:fe:f9:33:02:7e:46:59:62:9b:ce:54:82:cd:49:
5d:8b:9b:4b:51:97:f9:5f:65:36:a9:7c:7d:10:c5:57:15:86:
10:aa:d2:85:c5:c5:7b:2d:d2:c5:2e:fd:04:8b:6f:20:85:d1:
23:34:ff:2b:5e:5d:6d:a3:2d:4f:91:e9:fa:66:f8:64:88:1b:
7f:de:2b:73:07:0d:80:63:8a:e2:05:68:3e:2e:fd:5e:36:23:
50:21:6f:29:4e:9e:1f:a4:24:c2:c6:9f:ab:ea:23:60:8a:cc:
6b:6d:c9:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 13:55:34 2025 by rpki-client