Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0ADykoKiW8oxElNk-p_uuI6-ot4.roa
File: 0ADykoKiW8oxElNk-p_uuI6-ot4.roa (raw, json)
Hash identifier: 35/1b1MSR8kvNcX022X+1Qu68tgo9gzwfk9NgVu68ok=
Subject key identifier: D0:00:F2:92:82:A2:5B:CA:31:12:53:64:FA:9F:EE:B8:8E:BE:A2:DE
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189ADC4406F579C8C3A5AF875658B98B7BA
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0ADykoKiW8oxElNk-p_uuI6-ot4.roa
Signing time: Mon 31 Jul 2023 21:04:27 +0000
ROA not before: Mon 31 Jul 2023 21:04:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:189:adc4:1bd4/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:ad:c4:40:6f:57:9c:8c:3a:5a:f8:75:65:8b:98:b7:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 31 21:04:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d000f29282a25bca31125364fa9feeb88ebea2de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:fa:d8:48:5e:e8:27:d7:db:3e:ea:53:d0:82:
18:db:ef:45:cc:7c:e1:6e:cb:b2:11:cc:f7:da:08:
f8:2a:93:60:1f:f1:97:82:fa:ae:b6:a8:bc:a0:db:
b6:d6:ea:34:e8:5a:78:7d:97:a6:92:2a:cb:1e:df:
90:da:34:91:ba:dc:19:b8:13:2f:2f:50:6e:04:02:
6e:27:bf:93:73:4d:fe:a5:99:b2:d5:49:d1:04:7d:
81:ef:e4:86:44:54:70:1e:ef:bf:aa:92:dd:b7:3a:
5b:97:54:5e:e7:0d:e8:a2:df:b2:11:48:83:ad:50:
91:14:47:30:8b:21:e7:4f:37:32:c1:ff:cf:d7:b6:
03:43:98:18:c9:b7:10:ba:90:f6:db:88:c0:c6:42:
a2:e7:ad:66:33:9e:5f:9d:cb:52:9e:1c:fe:4d:52:
d4:20:64:ba:67:63:cc:48:76:96:45:24:bf:b9:22:
82:82:0d:83:77:d7:75:8b:ad:ee:7e:2c:a3:a0:9a:
9e:82:b8:05:28:cf:51:e0:a4:24:60:64:a4:7f:9c:
34:15:19:ac:7e:91:40:d6:27:d0:62:08:3e:20:29:
85:75:c3:47:53:52:7b:c0:8f:3c:03:79:c9:01:5e:
fd:dd:02:a4:38:be:4f:9b:d5:ca:2a:6c:77:1f:5e:
65:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:00:F2:92:82:A2:5B:CA:31:12:53:64:FA:9F:EE:B8:8E:BE:A2:DE
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0ADykoKiW8oxElNk-p_uuI6-ot4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
aa:b2:43:4c:87:13:06:83:3d:a9:88:34:4f:e9:84:ea:6e:09:
ed:11:df:e1:3d:20:65:d8:1b:5e:df:5c:1a:b3:65:fa:5c:4e:
da:18:e3:a5:a9:cf:9e:1a:98:c5:f3:f4:08:a1:c5:22:e5:20:
ad:12:fc:12:25:f7:56:8b:a4:b2:fe:25:6d:bb:b6:d3:df:6c:
ae:57:37:69:c0:56:5c:34:e7:e8:52:97:0c:5f:5e:56:4f:49:
1c:28:72:69:e5:3f:4d:96:c0:c5:79:dc:83:e9:92:42:6e:84:
ea:42:f6:9d:9b:89:16:a1:86:14:c2:15:42:42:72:4c:cc:a8:
fc:7f:4e:29:f0:15:6e:b5:68:18:89:60:5d:c9:76:39:ec:97:
aa:a6:72:d5:c9:bf:78:78:76:78:4b:fb:7b:a6:97:ac:a9:a8:
3b:95:0f:a5:ec:d8:0e:b6:b5:8e:93:54:66:0a:3b:22:46:08:
7f:4a:32:27:47:74:58:c9:b1:85:05:1d:27:6b:17:d9:fd:d6:
d9:b9:69:ac:10:6d:5e:34:f9:3b:ff:3a:c4:94:87:54:cc:2a:
ef:52:96:bc:06:53:1c:41:d2:f0:53:21:76:35:04:c3:f5:fe:
ca:c1:78:9e:e4:e9:90:61:ba:2e:85:b0:68:e1:89:c1:be:38:
bb:aa:bc:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 01:47:55 2025 by rpki-client