Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/DIrDT7_JaWSuvph2iHHhipPAG6k.roa
File: DIrDT7_JaWSuvph2iHHhipPAG6k.roa (raw, json)
Hash identifier: OE7v7yw9O0rXEbSCelsVVqsBhhTsfRNu9NeYUmFNjSo=
Subject key identifier: 0C:8A:C3:4F:BF:C9:69:64:AE:BE:98:76:88:71:E1:8A:93:C0:1B:A9
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01847C47B1FA6A1DDDD129B5FCDEE2D7E2A9
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/DIrDT7_JaWSuvph2iHHhipPAG6k.roa
Signing time: Tue 15 Nov 2022 17:13:04 +0000
ROA not before: Tue 15 Nov 2022 17:13:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:184:51c3:ad7c/128 maxlen: 128
2001:67c:64:ffff:0:184:3fbd:71f7/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:184:4250:a4df/128 maxlen: 128
2001:67c:64:ffff:0:184:75cf:c8d9/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:7c:47:b1:fa:6a:1d:dd:d1:29:b5:fc:de:e2:d7:e2:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Nov 15 17:13:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0c8ac34fbfc96964aebe98768871e18a93c01ba9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:e0:1e:7f:05:61:94:60:1e:1a:e9:e1:22:82:
10:4c:8f:1d:f4:f1:e1:38:3d:f3:16:6c:b6:7d:3a:
36:fe:93:ae:48:3a:7d:b0:5d:7b:fb:da:03:7b:8e:
e1:55:45:cc:46:08:8a:93:62:ce:45:0e:6e:d8:9a:
cc:7e:65:89:ab:a4:c6:76:32:ed:06:80:93:0b:c7:
81:07:3e:ff:65:e7:c4:1a:64:a9:be:0c:51:66:cd:
84:c2:f8:90:e3:43:63:3c:7c:e9:09:38:e5:52:85:
c2:02:8e:4f:3e:1f:9b:67:81:4a:1a:f6:22:1f:f6:
4d:f9:ff:fe:55:65:d5:cc:23:c7:f4:69:65:21:a5:
cf:2a:7b:3f:0b:ae:7c:b9:1d:f6:85:35:8d:4d:4b:
83:07:10:eb:4a:e9:44:45:d3:40:4a:15:c7:53:9f:
8d:24:d2:16:20:d2:9d:c5:23:23:66:c0:07:fd:54:
4e:f1:e5:92:88:78:b0:05:e0:d8:d8:e5:09:02:f4:
41:1a:f5:38:27:79:f0:5b:d9:1c:ac:e3:41:61:e2:
a4:f3:62:c1:41:3f:4f:97:c6:0f:4d:1b:1b:e7:2d:
1e:d8:60:ed:44:74:bf:13:27:fd:a2:61:92:21:a2:
f6:0f:f1:f3:7c:91:85:00:7a:4e:9a:3b:b3:2d:b8:
49:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:8A:C3:4F:BF:C9:69:64:AE:BE:98:76:88:71:E1:8A:93:C0:1B:A9
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/DIrDT7_JaWSuvph2iHHhipPAG6k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
ad:58:79:a0:37:73:55:c1:c8:97:3d:79:46:f5:6a:fc:23:c9:
f2:92:d4:45:c9:1b:63:55:a6:a1:ad:69:0d:d2:ba:7f:33:c4:
5f:90:5f:76:12:d2:4e:65:ab:45:78:fe:c5:e9:6d:f0:3f:29:
21:c6:cd:33:86:a4:94:ec:5a:51:e2:0b:47:11:64:3d:90:cc:
40:f6:3b:6d:61:7a:9d:0e:a2:ed:cc:d3:dd:9d:b4:e8:7a:5a:
2e:98:14:70:35:41:7f:2a:8d:ea:c0:7f:d6:35:61:b1:cd:bb:
e6:d2:a5:27:88:26:32:1d:2a:c4:36:a8:b1:26:6d:84:18:e8:
a9:21:92:69:92:74:13:e8:55:7d:3e:1c:39:96:2c:99:af:0f:
43:65:97:02:9f:12:85:fb:27:63:35:78:80:83:be:05:9f:df:
b7:4e:cf:ed:96:62:20:6c:8a:2f:aa:2b:4c:e2:14:14:09:83:
07:46:40:95:aa:cf:67:b5:7e:69:60:33:ff:e3:cb:b2:0c:7d:
cd:c1:7a:1b:29:de:cb:c5:ba:26:d3:9f:45:c6:71:05:21:77:
d8:9f:c9:6f:b6:5f:70:c9:1a:cf:45:9e:c8:84:11:a5:96:64:
e1:60:2b:5e:fc:96:6c:9f:e9:78:fe:e4:2e:0a:98:83:a3:90:
47:4e:22:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 01:16:10 2025 by rpki-client