Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/DC4SI57xio-_tusjJ3xJx1IPjLo.roa
File: DC4SI57xio-_tusjJ3xJx1IPjLo.roa (raw, json)
Hash identifier: 25QNYT30VcZ12/piAiMd3vdl9uVIaTOdz/pC2k7iKyc=
Subject key identifier: 0C:2E:12:23:9E:F1:8A:8F:BF:B6:EB:23:27:7C:49:C7:52:0F:8C:BA
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189E7BAAF0917695587BE0889CD3DD28879
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/DC4SI57xio-_tusjJ3xJx1IPjLo.roa
Signing time: Sat 12 Aug 2023 03:11:58 +0000
ROA not before: Sat 12 Aug 2023 03:11:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:e7:ba:af:09:17:69:55:87:be:08:89:cd:3d:d2:88:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 12 03:11:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0c2e12239ef18a8fbfb6eb23277c49c7520f8cba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:8b:b2:78:05:0b:a7:bd:ef:77:27:d6:a2:eb:
d0:1f:76:b5:77:70:c8:e3:0e:d8:08:2b:40:40:99:
6a:fe:ae:89:66:72:c3:d6:ea:0b:f9:2e:dc:a2:bd:
7e:ac:ed:dc:60:8c:9e:62:ce:86:0b:61:69:9a:e1:
79:84:06:22:06:e7:54:60:22:7c:3a:e5:5a:a4:66:
45:d4:73:13:b1:2d:f1:f2:a6:5f:4f:b3:dc:26:10:
d9:22:48:d3:8c:5a:67:46:4c:c8:75:64:00:4f:48:
68:99:26:cd:81:13:b3:20:1e:74:93:55:40:a5:8b:
85:37:b0:e7:9a:21:a9:55:55:1b:e9:5a:2a:22:c5:
24:0a:af:cd:02:75:e0:33:5b:17:2e:6e:4a:e1:aa:
cd:9d:d4:16:b1:03:89:bc:d7:16:ce:7a:58:98:16:
e9:2b:b1:fa:5e:9b:e2:5b:c9:03:64:82:e3:a2:78:
94:29:56:f0:13:3c:39:4e:c4:7e:df:51:cb:f2:6d:
88:b2:aa:ed:05:3f:1b:97:69:ae:b2:2e:d3:4e:75:
ad:dd:92:03:5a:10:4e:8d:76:6f:e9:28:b6:48:ed:
2f:8f:63:c0:1d:b0:5a:b3:a9:4c:05:7f:fa:c1:7d:
9c:e2:4f:50:e7:26:42:1e:02:42:7f:e0:92:4b:fd:
22:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:2E:12:23:9E:F1:8A:8F:BF:B6:EB:23:27:7C:49:C7:52:0F:8C:BA
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/DC4SI57xio-_tusjJ3xJx1IPjLo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2b:f5:ec:c9:42:13:8e:5f:d6:b4:c9:3e:d7:8c:21:42:84:fe:
da:da:30:67:49:28:2c:9d:4c:56:3a:27:70:07:84:40:86:fa:
1d:c3:17:4d:53:83:3d:56:73:3f:e9:a9:ce:c2:9a:18:de:3f:
2a:2f:bb:76:5c:13:96:6e:31:08:80:9a:3b:53:dc:73:15:48:
ee:ce:33:bd:26:a1:95:9a:04:7c:c5:24:16:62:32:97:02:d3:
e7:a4:67:12:6e:39:e0:4a:de:19:85:b7:e2:14:83:97:b5:6b:
13:d5:b9:1b:6e:85:9d:0f:c8:d6:5f:4e:17:29:4a:4f:0c:00:
9d:a4:a1:ab:cd:20:3c:1c:ad:34:f1:57:6e:14:f4:39:ee:c6:
41:93:ae:35:fc:93:bb:58:02:5d:e5:2c:42:2e:51:cb:e6:ec:
15:23:80:68:58:3e:d0:89:ba:6d:84:56:b7:93:8c:ff:49:ce:
70:a8:df:9f:9f:6f:be:6a:35:f4:03:ae:7b:48:65:8a:2f:a8:
24:f2:59:33:a7:6c:1d:79:57:9c:0c:70:85:ac:30:21:66:0d:
34:0f:4a:fa:5b:20:cb:16:8e:17:3a:28:8a:c1:81:e0:38:dd:
1d:a5:c3:54:a0:a7:4b:28:e3:23:e0:2d:8b:2b:ec:02:a9:bc:
67:ab:f4:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:40:42 2025 by rpki-client