Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0DFZKQDzeSbl07noVQoUnFtdFkk.roa
File: 0DFZKQDzeSbl07noVQoUnFtdFkk.roa (raw, json)
Hash identifier: z/DhHmwC0zsnrR645NVGd8fOf1hBFd3kBseYUma1WY4=
Subject key identifier: D0:31:59:29:00:F3:79:26:E5:D3:B9:E8:55:0A:14:9C:5B:5D:16:49
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A115E923173BE78DFDE6839D52FFDCEF6
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0DFZKQDzeSbl07noVQoUnFtdFkk.roa
Signing time: Sun 20 Aug 2023 05:15:25 +0000
ROA not before: Sun 20 Aug 2023 05:15:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:11:5e:92:31:73:be:78:df:de:68:39:d5:2f:fd:ce:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 20 05:15:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d031592900f37926e5d3b9e8550a149c5b5d1649
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ec:2e:4b:1e:fc:a1:24:82:12:48:fb:94:13:
1b:e8:4f:38:fd:f3:db:1f:a1:9c:6a:46:3d:2c:39:
cc:18:03:43:2d:5a:5f:80:ca:66:67:c4:5f:2a:86:
c6:4f:36:a1:03:1c:00:02:78:c2:00:d2:04:19:ac:
e2:f6:79:b9:7b:83:bc:63:ae:36:55:66:08:28:98:
ba:ee:47:d5:18:99:4d:61:ca:69:91:41:b2:d0:e7:
e3:ec:e0:19:77:90:44:ef:b8:b0:15:a5:0a:5a:58:
e9:00:f8:a0:42:b0:18:2c:c5:93:60:32:b9:91:80:
94:a0:33:07:5a:0f:ed:d9:54:61:01:a5:bd:73:55:
47:fa:2c:63:c1:f9:cb:78:f4:26:6a:01:a8:b9:3c:
6b:b2:81:d9:9a:e3:af:23:9f:30:1c:4c:cd:5b:0e:
58:d2:f8:3a:f0:ba:c3:a8:5f:56:6c:b1:ae:79:d8:
d5:ab:5c:95:31:ac:bf:5d:9f:88:81:fe:34:79:0d:
6a:49:01:a4:76:6b:5e:e8:62:89:66:7c:03:aa:71:
99:3a:cc:8a:58:eb:c6:cd:0d:27:23:11:e0:ec:d5:
d0:99:01:98:9d:ed:e0:91:fb:5d:0b:04:33:eb:0f:
00:48:3f:ed:ca:79:39:34:15:3e:aa:f2:2c:90:9a:
b3:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:31:59:29:00:F3:79:26:E5:D3:B9:E8:55:0A:14:9C:5B:5D:16:49
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0DFZKQDzeSbl07noVQoUnFtdFkk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7a:ca:a4:6b:d5:84:da:99:ef:d4:00:d1:6e:42:1a:62:08:e8:
bc:08:1d:26:d3:5e:81:f0:f6:41:5b:53:89:2f:17:1b:26:dd:
19:c6:78:95:d0:09:3b:09:d2:28:0f:fd:ce:c3:f5:2b:ad:31:
f5:10:5c:55:bf:97:cb:c4:f8:f6:e3:d1:b2:9b:ce:1c:a0:71:
ef:6b:6b:72:e7:82:ec:c9:65:b5:4d:66:7a:ab:4b:01:54:5d:
9c:e3:d6:95:23:08:84:73:f3:b4:a5:b1:f3:f6:2b:83:87:7f:
24:8a:a4:61:84:6d:2f:48:e2:c1:b3:b6:b0:a8:35:27:8e:ab:
28:d6:2f:53:e1:7a:82:32:85:53:b4:71:73:db:52:3d:91:06:
02:80:0e:e9:15:97:64:d0:22:28:70:c8:30:de:73:7a:fc:09:
9a:2d:01:59:3f:30:d9:e2:f9:28:c1:1d:ba:a6:92:4d:b5:2c:
43:f4:cf:78:9e:8c:27:87:cc:46:2a:26:0a:11:86:4c:94:5a:
4e:34:58:f9:dd:74:1b:cd:b0:18:f8:8c:24:ac:61:87:10:04:
14:ee:01:8c:c4:e2:74:0e:7f:05:78:28:93:1e:fb:dd:4d:76:
57:f8:df:b3:6a:8d:32:c6:f7:44:bf:94:17:86:09:7a:af:87:
f9:bd:69:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:41:11 2025 by rpki-client