Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/D80kqDVETXMGqMuweQrMRw9cJrM.roa
File: D80kqDVETXMGqMuweQrMRw9cJrM.roa (raw, json)
Hash identifier: b+uEpX5z9StT0TNXD4bjYAYU720zLYb8G0a9GL3jn6g=
Subject key identifier: 0F:CD:24:A8:35:44:4D:73:06:A8:CB:B0:79:0A:CC:47:0F:5C:26:B3
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189EAF56A3FF02C658B139B9EB37078802B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/D80kqDVETXMGqMuweQrMRw9cJrM.roa
Signing time: Sat 12 Aug 2023 18:14:59 +0000
ROA not before: Sat 12 Aug 2023 18:14:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:ea:f5:6a:3f:f0:2c:65:8b:13:9b:9e:b3:70:78:80:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 12 18:14:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0fcd24a835444d7306a8cbb0790acc470f5c26b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:3a:3f:3a:f7:5c:f2:0a:fd:83:12:cb:4f:3e:
b2:f1:42:58:f2:4d:9d:34:36:98:21:0d:3f:08:9f:
23:22:39:df:3b:d5:a4:e5:6c:68:7f:c4:a5:2e:ac:
46:ea:c7:6c:f8:6f:36:c1:69:c1:b7:a7:08:eb:dc:
eb:11:10:81:15:e5:ed:a1:f6:0b:d2:9a:1f:fc:cd:
42:5f:76:67:c6:5d:1f:7d:20:78:00:6a:01:20:07:
5d:7e:90:0d:97:d6:85:4b:84:8b:61:f6:af:e2:f9:
fb:15:85:ec:04:62:2b:db:3f:2d:a2:5e:ba:9d:3f:
d4:03:9d:1b:a4:3d:78:71:e2:29:d1:67:bf:e8:e0:
46:ef:94:7e:03:2e:cd:9f:74:e5:ca:95:92:bd:03:
9d:3e:f7:d5:50:9b:d3:5a:52:5d:b5:35:ba:53:d4:
c8:6b:0e:f6:69:7b:1c:9b:64:82:5d:80:72:15:e0:
55:7d:6b:25:73:3c:12:78:42:79:aa:5a:69:72:3a:
65:fd:3c:bb:d7:92:e9:08:6d:70:70:3b:dd:fe:8f:
3c:c4:ab:b3:a0:8a:53:86:3c:6e:4d:7c:2c:39:b2:
10:2e:69:5c:0a:0f:76:13:63:bc:d8:2c:ab:e5:b3:
ed:8e:1e:83:18:94:f0:88:58:fb:4f:b5:9b:7e:9d:
e8:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:CD:24:A8:35:44:4D:73:06:A8:CB:B0:79:0A:CC:47:0F:5C:26:B3
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/D80kqDVETXMGqMuweQrMRw9cJrM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
34:c9:08:56:43:0a:aa:ad:14:96:0c:a1:7a:8d:c1:bf:98:3e:
a7:e2:ae:0a:27:8c:c3:95:7e:8f:e1:a3:fb:d1:20:8c:aa:a6:
a5:45:0f:ca:49:e5:4b:53:b1:50:e5:8a:15:fc:38:5a:6c:cb:
f3:de:5d:e3:73:32:ee:da:d2:25:4f:b7:e3:54:63:60:0e:5c:
00:38:ab:98:e6:9b:ea:0d:55:af:7f:3e:ad:f2:0c:ea:da:3c:
c7:2d:f9:e8:5b:46:1f:fe:c9:93:ca:de:d2:bc:bb:e3:e0:ce:
c5:db:44:fa:68:ae:82:a7:99:f3:c5:69:05:2c:65:36:8d:4f:
76:9c:40:87:09:5e:85:fb:39:98:e7:90:79:7a:d2:13:f4:bd:
8c:51:1b:9e:aa:af:07:be:f0:0a:f1:79:be:c3:e5:36:0f:1a:
eb:a0:ab:55:0e:3e:51:de:c1:2e:0f:45:b4:82:74:61:82:2f:
75:f8:72:6e:1c:05:25:fb:83:d6:35:0c:fa:1b:9f:4b:6d:70:
12:25:62:a6:84:c6:14:7c:bb:7d:30:a2:52:75:83:74:d4:f2:
ee:77:0a:df:7d:48:f3:5a:84:0f:6f:8d:57:08:ae:de:3d:71:
09:02:7f:4c:4d:b2:01:74:d7:f5:ab:f2:f4:7f:11:69:f2:9c:
d2:ad:3c:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 02:51:02 2025 by rpki-client