Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/373h0v7U9iT-ddaPBgEQuUFJ5rU.roa
File: 373h0v7U9iT-ddaPBgEQuUFJ5rU.roa (raw, json)
Hash identifier: P6TV3tUDkleOGYAogqqKNPR7xuSA7MDv+Be9DhOm1oE=
Subject key identifier: DF:BD:E1:D2:FE:D4:F6:24:FE:75:D6:8F:06:01:10:B9:41:49:E6:B5
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018815AB54021E4FD95D33977D9C493B1C52
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/373h0v7U9iT-ddaPBgEQuUFJ5rU.roa
Signing time: Sat 13 May 2023 15:12:09 +0000
ROA not before: Sat 13 May 2023 15:12:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:15:ab:54:02:1e:4f:d9:5d:33:97:7d:9c:49:3b:1c:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 13 15:12:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dfbde1d2fed4f624fe75d68f060110b94149e6b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:4c:3a:1a:8e:8a:75:b8:cd:73:ae:65:4a:23:
a0:4e:4f:a8:2f:4d:f4:2f:f1:58:00:f2:44:9f:7f:
26:c0:66:db:3f:f1:a7:d8:ac:85:27:87:47:cc:27:
26:83:b1:0e:a1:5b:49:a8:e9:ee:e6:81:2c:7f:da:
26:a0:bc:04:2c:72:c4:e5:86:06:f7:69:2d:a6:6c:
ef:87:60:e0:99:75:08:7a:48:ec:82:bb:ee:23:43:
69:94:01:dd:5d:35:74:57:5b:68:d1:f3:84:cc:38:
0d:c9:21:b2:c5:0c:78:04:ed:de:ca:1d:18:ed:75:
a5:23:c4:11:be:e7:dc:ca:45:57:1a:a1:28:0c:d1:
14:12:ff:64:91:4d:3e:67:c0:06:5d:40:ad:eb:36:
20:ef:22:ae:fe:6e:74:0a:ef:c0:d9:8f:4a:70:58:
f1:b5:6d:64:74:2c:8c:b7:2b:4a:93:9f:a8:14:06:
4e:4f:ad:4b:67:6b:e4:7d:44:e6:4d:b3:c3:64:cf:
e8:1b:2c:cb:b5:0d:8e:7a:ea:bb:fc:bf:b2:ef:36:
8c:71:17:f2:5d:46:43:18:41:42:3d:a2:a9:44:92:
2e:4e:c9:dc:cb:21:58:79:cf:7c:e9:5a:b2:81:2a:
91:1b:19:7d:28:f1:fe:f5:10:0e:66:21:e3:d9:c7:
0c:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:BD:E1:D2:FE:D4:F6:24:FE:75:D6:8F:06:01:10:B9:41:49:E6:B5
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/373h0v7U9iT-ddaPBgEQuUFJ5rU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1c:85:26:97:45:b3:13:5c:10:ef:aa:4a:10:0a:85:cc:cb:17:
7d:1d:d0:3a:ec:57:57:07:b4:06:15:4a:4e:38:2d:c4:54:74:
1e:2e:49:cb:e4:74:62:26:97:4a:22:21:70:06:26:6d:d8:ef:
bf:e0:fe:b0:f5:af:a5:84:69:fc:57:86:fb:b6:6f:a5:7a:ba:
1f:fa:26:cf:da:86:11:90:6a:7e:ba:92:45:6e:74:34:95:6f:
77:33:43:25:b8:73:5c:b6:0b:94:e1:0e:76:d2:21:d2:72:ec:
71:1c:bb:97:93:51:c3:79:b7:81:9a:9c:1c:ba:e8:d6:fb:56:
83:51:52:dd:ac:32:a8:a0:3f:82:be:6e:0d:27:b2:5e:be:82:
ee:e5:11:b0:c0:ac:52:ce:3a:15:21:89:31:ff:55:fe:c3:c1:
87:18:69:c9:57:5d:3f:ce:0b:ca:90:68:03:49:26:34:aa:73:
34:14:48:9e:fb:8e:5d:74:f1:3d:37:48:c2:fe:0d:a8:68:af:
be:b5:ca:eb:f0:75:43:5c:ad:0c:20:f8:5e:63:0a:9c:02:46:
64:e9:a7:14:08:f4:c5:f0:54:0d:a1:43:9c:c7:61:68:cd:7f:
d4:a8:21:60:45:01:ee:67:d9:91:05:24:d2:44:d6:2f:a0:ed:
c8:77:43:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 10:03:55 2025 by rpki-client