Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3w_igASpOsCtIdbGWsaTIJlocoA.roa
File: 3w_igASpOsCtIdbGWsaTIJlocoA.roa (raw, json)
Hash identifier: NRRsx622dWd2fIJysL+fHT6PI5HH9Av0Jwz537ApSok=
Subject key identifier: DF:0F:E2:80:04:A9:3A:C0:AD:21:D6:C6:5A:C6:93:20:99:68:72:80
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A3F1696FB60DEF8F72B88119BD73B012C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3w_igASpOsCtIdbGWsaTIJlocoA.roa
Signing time: Tue 29 Aug 2023 02:19:19 +0000
ROA not before: Tue 29 Aug 2023 02:19:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:3f:16:96:fb:60:de:f8:f7:2b:88:11:9b:d7:3b:01:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 29 02:19:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=df0fe28004a93ac0ad21d6c65ac6932099687280
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:ae:e8:45:67:13:fb:3b:6f:90:7a:e7:e9:46:
56:06:10:15:a4:1e:bc:e0:99:39:5b:2b:6f:29:f1:
5b:9c:eb:a6:fe:d8:b2:ce:6a:9c:54:ab:46:99:00:
cf:3e:bb:cb:4c:2a:f7:e6:b2:56:70:4d:6f:b7:16:
e1:4c:a7:c0:b8:ea:6e:79:4b:5d:aa:02:9a:f4:7e:
49:de:91:34:be:d4:39:9e:a3:93:fc:ef:35:0f:b4:
b1:f3:7d:6c:85:7a:b0:3a:b2:0f:e0:ab:cc:46:3d:
bd:08:ed:65:2f:5f:b3:08:97:bf:9a:66:ef:e0:51:
cd:05:64:65:6d:16:02:39:9b:53:bd:f6:a0:eb:61:
b5:a1:cd:5f:a7:ac:f0:a7:30:b2:5d:1f:4c:7d:91:
88:c7:f9:22:e5:19:1f:d8:d6:3a:41:34:49:1e:86:
e2:d4:b4:29:84:d7:c9:c1:55:62:1c:84:bf:48:9c:
f6:38:d2:b0:48:b2:22:12:84:de:23:1e:34:39:95:
57:27:60:e0:6d:e6:6a:11:29:55:d3:72:66:f8:b8:
15:b7:56:0f:fe:e0:2a:91:d9:a2:df:86:86:c7:7b:
f1:aa:d1:57:c6:0d:28:b3:15:a5:8c:2b:44:1d:95:
99:4e:31:a4:9b:0d:c0:b7:ec:a3:ff:f9:70:18:08:
e1:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:0F:E2:80:04:A9:3A:C0:AD:21:D6:C6:5A:C6:93:20:99:68:72:80
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3w_igASpOsCtIdbGWsaTIJlocoA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
26:bf:c3:64:48:04:9a:5d:04:26:3e:2f:66:b1:32:f7:a0:54:
f3:28:ef:8c:ee:ea:cd:77:41:49:05:4f:b0:1f:8d:44:9f:3f:
66:bb:d6:b2:28:39:d7:d5:b4:3a:8d:30:3f:28:a5:e7:3b:1c:
3b:ba:74:d2:ab:fb:74:02:90:74:1e:43:b0:80:d7:31:bd:d4:
5d:a4:a3:b8:2d:63:d0:a0:30:c4:73:21:06:11:5f:c6:81:5f:
2a:a7:61:b7:1d:6d:86:19:d2:64:40:b2:5c:94:58:d5:59:30:
72:67:62:90:92:5f:e8:2c:ac:22:00:34:2a:07:b2:a4:0a:39:
7c:44:92:8a:19:53:b0:ea:d1:e5:79:d1:8f:ab:56:c3:bd:f7:
92:1b:38:cb:d3:c6:e1:96:00:fc:c7:1d:61:2e:16:68:f8:24:
b1:72:de:ec:6d:79:2f:9e:2c:c7:f0:8d:ad:e8:bb:a8:9d:98:
a2:f9:24:01:c9:b4:fc:e4:5e:84:ad:ff:55:00:34:34:fc:8b:
2b:4c:4e:82:25:93:d9:35:69:af:34:9f:a6:3e:45:59:fb:be:
d2:d3:59:a1:25:09:d7:02:1b:f4:03:2d:aa:01:20:fb:b3:90:
4a:2e:9f:2d:a3:69:db:78:76:9b:18:e6:2f:c7:b1:10:23:d3:
ef:7a:19:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 12:44:49 2025 by rpki-client