Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/DFa3wKo0ExGksdYgcraQIq-fhdw.roa
File: DFa3wKo0ExGksdYgcraQIq-fhdw.roa (raw, json)
Hash identifier: 9V65GaI77Dnr/VbTsLmLmyHv25E4fB9nYycR6x8kxvk=
Subject key identifier: 0C:56:B7:C0:AA:34:13:11:A4:B1:D6:20:72:B6:90:22:AF:9F:85:DC
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01880CA74891B93831FF0E4D9CEDBD0A0F6D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/DFa3wKo0ExGksdYgcraQIq-fhdw.roa
Signing time: Thu 11 May 2023 21:11:09 +0000
ROA not before: Thu 11 May 2023 21:11:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:0c:a7:48:91:b9:38:31:ff:0e:4d:9c:ed:bd:0a:0f:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 11 21:11:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0c56b7c0aa341311a4b1d62072b69022af9f85dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:1b:e7:bd:c8:81:87:f9:26:b7:e8:da:08:c8:
40:77:1b:5b:1c:da:36:f8:06:86:05:e1:c2:fd:c7:
ba:17:ef:79:03:9a:9c:07:c6:63:e9:f7:5b:a0:ff:
0b:cf:ea:63:b0:82:cc:7c:33:b1:a4:97:de:02:3b:
26:ce:fd:c0:77:f6:19:e3:c9:30:c7:8a:ad:4f:f6:
f2:08:1b:a4:88:a3:4d:6c:03:48:d7:2b:d2:df:48:
e4:21:d8:5b:a2:2f:df:64:a4:51:7e:21:7d:1a:96:
74:01:96:51:50:25:87:28:fa:14:bd:a0:5b:4a:c3:
a3:4d:0f:91:06:d1:1c:d1:29:5e:32:2e:7d:27:b1:
2e:3a:5d:1a:02:08:da:47:1e:5a:0b:eb:31:dd:d3:
7d:8b:b3:91:c2:06:75:fb:c1:19:1a:fa:14:93:a4:
df:c1:90:0c:16:bc:da:fd:f8:50:82:b7:8b:9e:85:
59:ec:c8:93:fb:2b:a6:f6:f1:d2:fe:c4:ca:d3:b1:
15:8e:bd:cb:9b:63:1a:c4:6e:ea:36:dc:33:01:41:
e7:75:b3:de:21:45:70:54:b9:60:fe:7c:22:79:c8:
cd:a7:db:c8:ae:9e:aa:9a:c7:ef:39:83:17:88:c9:
d1:dd:93:c7:bc:62:99:a7:9a:62:ac:e2:e0:02:f9:
ff:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:56:B7:C0:AA:34:13:11:A4:B1:D6:20:72:B6:90:22:AF:9F:85:DC
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/DFa3wKo0ExGksdYgcraQIq-fhdw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
99:cd:d7:4c:36:6f:0a:77:f7:e1:36:e5:cf:1b:cd:40:6f:c0:
85:f1:13:d8:6d:d5:48:bd:00:2a:97:03:6c:e3:30:02:86:e3:
63:40:4d:d9:6c:c4:bf:fa:2a:f6:fa:6b:9e:a8:ab:1c:52:9b:
35:f9:41:cf:77:0b:58:98:cd:66:d9:90:01:ab:8e:83:b1:b7:
bb:e0:b4:0a:1b:99:cb:e7:5b:76:08:d7:6b:69:17:a0:28:43:
10:40:41:c7:89:ba:d1:09:48:76:4f:02:99:a2:05:5d:00:13:
30:28:b1:18:01:08:7e:5f:1b:b7:4b:84:06:7a:4b:ca:65:83:
76:97:de:48:2a:89:86:c1:7d:51:b9:08:6b:b5:5c:1f:47:2d:
95:47:88:41:ee:c4:53:f9:55:d7:36:3c:05:0e:d6:e2:44:77:
7d:d1:fd:e9:53:77:dd:3a:72:55:cf:d1:43:40:92:0a:39:42:
0c:0e:53:07:8f:ac:a2:29:0a:32:d7:99:01:64:8e:0a:f9:e4:
7a:04:4c:ef:12:15:20:20:01:d6:b4:4d:4e:9b:7a:0a:60:0f:
f0:f6:a0:28:a6:16:f0:93:dc:f4:5a:6b:d3:65:0b:de:5d:d2:
1d:c8:5a:20:ea:89:cb:43:9c:92:8b:d1:e0:72:37:f1:e2:88:
9a:79:e7:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 20:27:39 2025 by rpki-client