Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/A3Zq_Kbyh7njRjJiITmuUrB3_MY.roa
File: A3Zq_Kbyh7njRjJiITmuUrB3_MY.roa (raw, json)
Hash identifier: lMdwVbt0u8L2kSJA2JKVZ+1F8qPEk8CmbGfVp1wHkmk=
Subject key identifier: 03:76:6A:FC:A6:F2:87:B9:E3:46:32:62:21:39:AE:52:B0:77:FC:C6
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01882A3E1EDB41AB9D61CB2A3ADBB4D514C5
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/A3Zq_Kbyh7njRjJiITmuUrB3_MY.roa
Signing time: Wed 17 May 2023 15:04:54 +0000
ROA not before: Wed 17 May 2023 15:04:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:188:2a3d:6bdd/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:2a:3e:1e:db:41:ab:9d:61:cb:2a:3a:db:b4:d5:14:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 17 15:04:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=03766afca6f287b9e34632622139ae52b077fcc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:3c:16:41:ea:fe:ab:cb:54:fa:59:e7:19:ec:
b0:4e:82:24:63:29:6a:3b:41:0a:e4:41:bf:52:40:
cf:be:c1:17:6a:92:1e:1d:36:eb:1e:ef:b7:df:00:
f4:71:0c:7b:d5:fb:d2:e1:7e:dc:49:64:b2:a1:3e:
4e:8b:f3:49:cd:85:8f:68:d6:ad:44:93:de:ad:ea:
ed:12:a1:14:ad:20:98:45:48:6b:f6:71:18:24:6e:
c9:b9:77:04:7f:c4:18:ab:7d:ce:74:ec:30:de:ac:
36:31:70:51:74:16:42:f7:a5:c1:a4:f4:f7:74:9b:
86:73:51:dc:9f:91:f9:1c:66:0d:d9:31:73:41:f6:
3c:e0:07:1a:87:be:e6:f1:65:e8:69:33:10:c4:08:
e8:14:8e:b3:bb:b2:bc:4d:1b:15:d4:70:07:62:eb:
7f:31:45:1a:05:5f:e2:c3:51:e5:31:fc:84:3f:0f:
45:d5:d1:86:62:27:57:90:a1:42:2f:5d:8a:08:83:
75:6e:01:50:02:6c:12:b2:7f:bb:39:63:8f:d7:79:
a6:11:57:1f:d0:1b:95:d2:c8:77:b8:30:1e:92:f8:
a5:ae:9d:23:ff:9d:fe:6a:31:99:23:47:56:df:af:
77:90:4b:ed:9f:ca:71:f9:e7:7a:a0:2d:97:24:6e:
26:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:76:6A:FC:A6:F2:87:B9:E3:46:32:62:21:39:AE:52:B0:77:FC:C6
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/A3Zq_Kbyh7njRjJiITmuUrB3_MY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
37:53:be:7c:95:b6:05:fa:da:f8:4d:99:bf:d9:87:7e:88:7b:
9d:30:b7:08:52:f8:08:85:72:ec:20:30:95:a7:b0:c6:a2:de:
12:d0:b2:12:50:53:3d:ad:aa:b2:24:20:6b:6f:65:59:61:a9:
38:d3:b3:cc:0b:a3:76:2a:7d:08:c2:db:36:60:c6:c8:cf:11:
0d:e4:43:1a:44:64:9d:b6:cb:71:6e:0e:d1:4c:5d:8f:e2:2c:
0c:48:05:ca:d5:e3:08:4b:93:bb:2a:87:a8:ab:df:31:7c:db:
65:20:72:08:38:97:44:22:1d:fc:5c:33:b2:0f:9f:61:66:95:
25:1b:b0:21:db:f7:b3:f0:78:72:8d:77:20:83:be:d6:7a:9c:
73:9b:39:75:16:e4:f0:4e:7c:4e:7e:da:ea:11:6f:5a:e6:94:
e5:61:4d:6b:d2:34:72:7e:09:1e:ff:d7:68:97:ae:b6:f8:63:
ba:75:58:85:a9:86:8a:79:84:e1:8b:31:93:d9:80:bd:3c:d8:
9e:c0:f3:f6:39:76:ed:e2:c4:87:7f:57:cd:ed:46:cf:42:9a:
3b:a3:4d:01:9a:92:2e:d9:19:48:5c:77:c0:af:f2:6d:6c:e2:
ab:0c:53:a5:67:12:8a:2a:68:4d:68:0c:a0:5c:08:28:cd:bd:
1b:16:3f:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 05:57:09 2025 by rpki-client