Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/DAQ_8_Rff4ygg8ValM--GHdUzgs.roa
File: DAQ_8_Rff4ygg8ValM--GHdUzgs.roa (raw, json)
Hash identifier: CI5Ei1UgFwGnqG4nQC+Htamo0LE57Et5yMmJBoMJPHM=
Subject key identifier: 0C:04:3F:F3:F4:5F:7F:8C:A0:83:C5:5A:94:CF:BE:18:77:54:CE:0B
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189559CE0578B20D0336E2969B27FD09F2E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/DAQ_8_Rff4ygg8ValM--GHdUzgs.roa
Signing time: Fri 14 Jul 2023 18:14:51 +0000
ROA not before: Fri 14 Jul 2023 18:14:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:55:9c:e0:57:8b:20:d0:33:6e:29:69:b2:7f:d0:9f:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 14 18:14:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0c043ff3f45f7f8ca083c55a94cfbe187754ce0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:81:2a:59:92:20:64:74:90:58:91:28:50:45:
a3:ac:41:99:48:38:c4:de:a0:d5:42:7d:f3:3a:c0:
cd:0b:13:4c:ec:34:37:ed:34:1e:b0:76:b7:b6:55:
b6:19:26:c5:d0:b1:3b:db:d7:78:a7:50:0d:3f:fc:
96:96:5c:c3:90:dd:14:63:bd:65:10:35:9c:c3:77:
cd:5f:9c:d9:ec:21:29:eb:14:2a:ec:4f:d8:82:50:
74:0a:5a:60:f2:85:2a:26:94:2d:bd:0c:2e:fa:c5:
a8:28:8c:0e:bb:70:c7:c6:e1:14:1b:f5:8a:47:40:
4f:d6:06:77:4f:18:58:b4:69:c1:f3:07:d2:b2:3d:
59:1d:f5:4c:1f:5c:fe:1d:2f:fe:6f:fe:bd:9d:5b:
30:df:ec:8a:d6:1a:83:b7:02:29:fb:d9:75:41:2d:
d2:25:b7:fc:22:c9:0c:52:59:25:fe:16:13:1e:60:
99:61:8a:30:86:8e:b2:14:41:70:5f:c6:e9:2c:b3:
06:32:39:e4:8e:54:e1:a6:da:65:69:68:61:3c:f1:
00:1d:d0:63:0d:a6:84:95:72:03:02:a2:49:4e:d7:
cb:5a:21:a3:29:f3:51:79:48:83:95:d3:22:a3:c0:
19:b7:fd:29:0f:e7:1b:da:1b:5e:06:73:01:c7:5a:
54:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:04:3F:F3:F4:5F:7F:8C:A0:83:C5:5A:94:CF:BE:18:77:54:CE:0B
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/DAQ_8_Rff4ygg8ValM--GHdUzgs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6e:f4:f7:6d:ec:b4:6d:61:fe:c2:c6:69:cb:4e:c2:f6:3e:c2:
97:fc:15:9c:29:4b:05:0f:17:f9:dc:f8:c4:4c:1b:5b:72:3a:
f9:07:70:c2:9b:e0:b5:91:e5:67:cb:9a:fe:ba:34:87:fc:c2:
1e:7d:20:5e:26:b9:ae:86:5b:07:54:9f:58:a6:41:43:5e:ea:
97:25:c1:3c:02:bc:25:87:b5:e0:eb:cd:ad:d8:e9:6d:95:b5:
21:de:11:60:58:2d:8e:f4:e8:ef:3a:5e:d8:d4:16:12:41:a1:
7a:6b:b0:06:56:75:d2:2e:22:0f:e4:bf:2b:2c:39:90:35:6b:
ba:2b:ff:3f:5f:ef:41:6c:c3:7f:b5:44:a9:33:35:aa:8f:ee:
81:bd:55:59:a9:24:5f:a8:04:d4:05:98:99:a1:b1:08:f1:6a:
06:8c:1d:d3:74:a8:49:bd:75:6d:4d:54:65:50:6d:7e:32:33:
3b:7c:72:3c:ec:11:51:fb:61:bb:b6:3f:81:94:61:60:b4:fd:
3b:04:c2:04:d6:af:ec:70:e6:ef:90:ab:a8:da:ed:5e:79:0d:
60:c6:64:8e:b9:82:5c:88:b9:28:dd:6b:63:40:63:ce:7a:21:
19:04:e6:24:ed:b6:59:f1:ce:a8:87:c8:b0:5a:6c:49:cc:da:
80:f4:f3:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 01:29:46 2025 by rpki-client