Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/OD-kc3-BNwLWMQDchBE3ZxhVUps.roa
File: OD-kc3-BNwLWMQDchBE3ZxhVUps.roa (raw, json)
Hash identifier: 8sjtXo6IXwyGoXdFzQbLgC5wBxAE61fmw6AAHowAp9I=
Subject key identifier: 38:3F:A4:73:7F:81:37:02:D6:31:00:DC:84:11:37:67:18:55:52:9B
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186A8B2E21FF7EB21218B676F369B7753AF
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/OD-kc3-BNwLWMQDchBE3ZxhVUps.roa
Signing time: Fri 03 Mar 2023 18:19:00 +0000
ROA not before: Fri 03 Mar 2023 18:19:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:a8:b2:e2:1f:f7:eb:21:21:8b:67:6f:36:9b:77:53:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 3 18:19:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=383fa4737f813702d63100dc841137671855529b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:50:da:9f:7f:fc:74:49:76:51:29:ae:88:88:
3a:14:f2:f6:5b:6e:89:ab:5f:a8:c1:78:17:b9:56:
9e:8a:cd:6f:5d:8f:3a:af:51:24:4e:59:9c:5c:dd:
dc:7f:bd:48:3d:5a:1e:1f:4c:d2:e9:cb:0b:88:3a:
d8:1a:a1:f6:cd:3b:23:cf:9a:9a:d1:db:73:c1:2a:
ad:65:86:1f:b6:51:1b:eb:e6:9d:f5:67:39:77:f2:
d9:e6:23:ff:7b:01:22:2b:af:c7:a7:73:f1:96:ee:
23:ac:8e:9b:b8:ef:98:02:c7:f9:11:d5:c9:4f:e4:
4c:8e:6a:58:6c:ca:ba:54:03:03:a0:23:f1:f7:31:
b8:88:d0:77:93:83:7d:01:f2:11:5c:e8:88:05:a9:
70:d0:63:14:d5:c4:4c:fe:41:b8:75:35:5e:2e:90:
28:f2:28:48:e6:7a:7f:3e:ae:d0:8d:e3:53:a2:9f:
a0:5e:44:eb:24:57:b4:86:fd:bf:2d:51:e1:dc:5b:
52:ae:6f:34:10:d8:bc:fd:bb:b8:ab:df:89:69:43:
30:aa:2e:b4:3b:99:ae:26:aa:d4:39:15:ea:92:46:
19:a0:c1:71:84:fd:f1:4e:24:6d:b4:99:2d:68:eb:
57:0e:d3:85:41:32:61:a3:59:4e:f0:42:21:0c:eb:
23:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:3F:A4:73:7F:81:37:02:D6:31:00:DC:84:11:37:67:18:55:52:9B
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/OD-kc3-BNwLWMQDchBE3ZxhVUps.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
65:cc:84:c7:0a:3d:49:a7:75:59:6d:0a:9c:cf:4c:37:53:b9:
4c:45:d2:14:6f:f9:ee:39:9d:6f:1f:ac:ec:9b:36:dd:a0:13:
40:77:5d:88:1e:ba:75:0b:5b:4c:a8:18:0e:47:6e:19:06:27:
f6:7a:d2:22:03:5d:ad:ef:3e:2d:8a:55:f4:bb:21:a7:f5:1b:
b3:91:3d:d6:80:48:ae:58:0a:66:ab:c8:bb:21:93:7b:88:85:
f5:f5:af:95:8f:54:c1:5a:9a:ea:7a:1c:43:04:92:40:15:c1:
59:af:6e:f5:eb:e5:03:75:b4:37:db:e2:9c:a3:95:ce:2e:74:
7e:a0:e0:73:c4:d7:c3:56:73:41:21:3f:f9:f1:ee:63:18:c9:
a7:ac:2c:27:0e:fa:76:30:84:17:39:1e:f9:ac:07:1d:9d:e1:
3a:14:85:1f:b0:58:0e:9f:a7:db:39:bd:e2:76:ed:4f:b6:29:
93:37:a0:29:df:84:6a:a8:fb:ee:84:33:e9:3c:fb:a0:ce:55:
a7:3c:f2:24:bc:88:09:a6:b3:1d:be:e1:ba:9f:b8:3a:15:c8:
d9:4e:a2:f0:cb:b6:49:30:62:2a:28:20:33:88:c1:81:49:48:
aa:4f:29:af:ca:6d:7e:49:d3:64:db:bf:e4:75:2d:33:ff:5f:
86:a0:6d:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 19:05:21 2025 by rpki-client