Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/DBNyhUQO5xkAd5y_5sj1anCYRi8.roa
File: DBNyhUQO5xkAd5y_5sj1anCYRi8.roa (raw, json)
Hash identifier: ZNHZWYTIut4qTN66j+iPLQGevBJy+o105UK/7S7d/58=
Subject key identifier: 0C:13:72:85:44:0E:E7:19:00:77:9C:BF:E6:C8:F5:6A:70:98:46:2F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01857B6212F243C5287654B90F7501DFF880
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/DBNyhUQO5xkAd5y_5sj1anCYRi8.roa
Signing time: Wed 04 Jan 2023 06:05:03 +0000
ROA not before: Wed 04 Jan 2023 06:05:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:7b61:d0e7/128 maxlen: 128
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:7b:62:12:f2:43:c5:28:76:54:b9:0f:75:01:df:f8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 4 06:05:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0c137285440ee71900779cbfe6c8f56a7098462f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:0f:92:25:b5:07:d0:52:34:a0:4a:82:65:ab:
86:73:8b:b4:f0:82:72:58:4d:91:0d:24:5b:c8:e0:
27:f1:3e:2f:b2:82:04:15:a1:66:1a:0c:4c:0a:3c:
ed:2f:59:97:82:79:91:0c:cc:58:18:f9:8c:8c:f4:
72:14:a6:17:92:f2:60:72:2e:5e:05:8d:b1:56:85:
55:3b:a3:4a:83:f0:04:0d:f7:e3:cf:0b:07:62:3d:
e5:24:85:89:cf:ca:c5:ff:eb:a3:c7:aa:21:25:ea:
0e:29:12:8e:32:b9:f7:c0:ca:24:90:40:ce:95:e8:
47:4e:cd:cf:e0:d7:91:81:e9:77:5d:17:18:92:95:
44:3e:6b:02:ed:b8:71:71:c6:97:b7:4b:de:ae:f0:
34:27:4a:c0:92:8a:15:7f:81:83:b6:45:9f:6f:19:
c1:40:d5:47:e7:fb:54:e8:c3:ef:29:ba:15:29:ac:
09:c1:c9:c3:9a:30:27:ce:b0:c2:5a:c9:bd:d9:c0:
bb:82:0b:53:29:cc:72:e8:e1:31:2f:12:f7:47:48:
1a:e8:57:56:11:c6:9f:91:7a:e0:64:f8:9a:1a:42:
f7:24:1d:16:82:59:52:a8:f0:fb:63:8f:d7:c9:c5:
fb:f9:bc:57:a7:53:45:cf:c0:6a:0f:6d:d3:8f:35:
9b:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:13:72:85:44:0E:E7:19:00:77:9C:BF:E6:C8:F5:6A:70:98:46:2F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/DBNyhUQO5xkAd5y_5sj1anCYRi8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a0:ff:77:24:32:df:74:51:2a:fe:ed:68:50:1e:6b:23:6e:20:
a5:a6:4d:d3:c0:c3:b2:36:67:a8:a5:89:70:0d:1a:9e:c3:3c:
bf:9f:cf:76:b8:13:26:18:d2:cf:39:3a:67:ce:b3:aa:c6:66:
d0:53:0c:2d:67:b8:bf:b0:f3:08:8f:eb:ac:44:0a:f3:8a:b4:
6e:5b:0d:08:32:1d:c0:3d:1b:bd:8d:1c:87:41:60:64:27:56:
ee:d3:a5:fd:88:e1:63:a5:ef:f2:fa:11:30:5c:a9:71:d0:06:
be:ab:c5:55:0d:f2:bd:9b:56:a4:f4:9e:93:94:ed:20:1f:5c:
58:05:f4:a5:8c:38:4d:a7:f0:3f:00:64:6a:40:56:c4:30:e9:
1f:53:4e:df:23:a6:35:a7:b1:5e:ee:1c:9f:3f:12:59:94:46:
58:6e:21:5a:c6:93:f7:52:55:43:96:fd:52:e1:a9:db:9d:21:
95:d3:1c:fa:6a:e9:68:3e:e4:65:41:b4:13:b5:e5:64:d4:5b:
32:40:22:f5:59:69:4a:73:e0:12:4a:57:e4:cf:6b:67:cf:8d:
67:da:c8:76:15:fc:16:47:de:0b:67:6f:43:e1:fb:c0:ac:64:
dd:a8:8c:1c:d5:17:78:64:f9:dd:31:ec:f6:cf:a1:e7:58:50:
84:10:52:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 08:58:18 2025 by rpki-client