Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3xOmgyNmPUjPjmb3u69merNIkHI.roa
File: 3xOmgyNmPUjPjmb3u69merNIkHI.roa (raw, json)
Hash identifier: nER+AC00MYR5m8pncNXKsX9SPprxnZtklEso5v+UPdA=
Subject key identifier: DF:13:A6:83:23:66:3D:48:CF:8E:66:F7:BB:AF:66:7A:B3:48:90:72
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018528202BDC36538CA5CD38A69F2474FA79
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3xOmgyNmPUjPjmb3u69merNIkHI.roa
Signing time: Mon 19 Dec 2022 02:04:35 +0000
ROA not before: Mon 19 Dec 2022 02:04:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:185:281f:e466/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:28:20:2b:dc:36:53:8c:a5:cd:38:a6:9f:24:74:fa:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 19 02:04:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=df13a68323663d48cf8e66f7bbaf667ab3489072
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:ef:fa:46:88:aa:1a:96:7f:67:a6:d1:28:de:
ed:be:99:72:62:20:e0:86:3b:17:06:a2:1c:99:e4:
03:65:1f:c4:e5:e3:ff:b2:75:58:37:a9:ba:45:39:
dc:8f:d3:90:8f:50:13:0a:a7:6e:08:cc:c9:2a:bd:
15:97:0f:ef:03:15:26:21:7d:25:13:43:16:b6:51:
5a:86:02:af:4a:70:c4:1d:cd:52:a1:10:34:81:f1:
ab:d0:6d:2c:5c:c7:c5:35:39:00:75:ef:a6:4d:ac:
5f:14:d0:3b:b7:a0:bc:d7:fa:d1:2e:9a:f0:67:cc:
b3:c2:ce:ca:e4:f3:d9:5c:38:a9:d0:f1:92:b9:b3:
d9:50:4e:28:8a:e8:f5:46:e2:46:6f:cf:89:e1:84:
d5:2e:c9:4f:49:ac:a0:92:e4:41:db:a4:d5:55:e7:
27:58:e0:18:1f:e4:02:4f:f7:54:93:13:24:e0:fa:
a2:bf:cb:2f:4a:f8:db:05:5c:42:de:43:c1:4a:45:
a1:39:9d:dd:15:fa:11:b4:b6:1e:48:67:8f:01:4c:
db:4f:50:22:41:4e:5e:68:b7:c3:a6:b2:6d:d6:89:
96:3c:e5:cb:3d:41:5b:86:80:a0:ca:89:af:ac:b6:
02:47:7b:93:74:e6:de:b5:57:fa:f4:47:2d:66:e1:
1c:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:13:A6:83:23:66:3D:48:CF:8E:66:F7:BB:AF:66:7A:B3:48:90:72
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3xOmgyNmPUjPjmb3u69merNIkHI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4a:91:ad:9e:f1:91:47:dd:a4:cc:df:f4:38:d3:f5:62:0a:dd:
7b:64:d9:11:d3:aa:2d:25:f0:6f:16:4e:41:c4:89:6b:5f:bc:
07:34:79:67:91:89:6a:b1:c1:1e:a0:81:98:74:bc:6e:4f:e8:
76:2a:90:58:15:59:fe:8d:7c:78:4b:06:63:1b:55:f0:96:aa:
7b:00:6d:db:08:be:69:c3:aa:47:33:73:28:db:33:e9:06:f0:
4b:37:0b:48:df:3d:27:d5:d2:5a:d6:e8:55:02:ad:b0:a3:0c:
4a:f9:96:fd:f0:96:6c:5a:be:47:f8:36:ce:36:d4:57:82:b2:
e9:86:29:db:2f:88:f0:f7:83:ab:08:35:ef:c2:d6:45:ef:59:
77:66:f1:12:dc:2d:a0:fe:97:0e:60:e3:c1:c4:a4:9b:d0:ec:
67:4d:45:b4:4e:44:c3:f5:d5:e3:6e:ae:8f:90:3c:14:36:29:
f7:44:f4:03:12:2d:b7:c5:11:84:7e:cf:28:03:a7:62:d8:93:
e9:ad:74:e5:a8:22:18:fe:07:b8:70:9f:8d:64:e4:82:65:5f:
f5:c8:91:08:53:08:73:94:2f:eb:6a:9d:b2:40:47:49:e0:9f:
f1:d8:47:dd:82:a8:cb:71:b1:8e:fc:74:d0:69:9f:82:64:18:
5e:47:e2:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 20:11:14 2025 by rpki-client