Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/DKhU2tuYJ1q0r2pKa1EjSxLxiSw.roa
File: DKhU2tuYJ1q0r2pKa1EjSxLxiSw.roa (raw, json)
Hash identifier: eKtaobRx2vIlzI5m4YaKqoF+lp+t6BV8YZpWR6fgeRY=
Subject key identifier: 0C:A8:54:DA:DB:98:27:5A:B4:AF:6A:4A:6B:51:23:4B:12:F1:89:2C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186582EE2F0F02362FC2A8DE04604363D97
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/DKhU2tuYJ1q0r2pKa1EjSxLxiSw.roa
Signing time: Thu 16 Feb 2023 03:05:12 +0000
ROA not before: Thu 16 Feb 2023 03:05:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:582e:a80a/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:58:2e:e2:f0:f0:23:62:fc:2a:8d:e0:46:04:36:3d:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 16 03:05:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0ca854dadb98275ab4af6a4a6b51234b12f1892c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:36:40:1a:d7:f1:53:54:07:00:ac:13:ca:72:
7a:3f:90:02:a2:c7:71:95:1e:90:55:2e:34:38:3c:
eb:ae:04:66:29:03:ae:a6:16:4c:92:0c:9f:32:2b:
7d:78:0a:58:1b:54:c7:c3:6f:bf:b0:68:0c:e2:6f:
f6:1a:43:a2:91:df:cb:a6:35:8a:5d:27:c8:ee:d5:
c0:0b:19:5e:dc:f4:ec:f3:ca:44:40:47:69:04:cf:
cb:47:7b:a1:a1:c1:c5:92:6f:13:42:36:2e:59:30:
2d:47:09:05:a2:0f:2a:66:80:7c:bd:e1:9b:64:64:
9c:f3:ca:38:a7:49:92:00:a8:5e:de:1d:89:8f:8b:
3a:12:9d:d5:3d:62:d6:30:8b:8a:94:ce:69:4b:1e:
df:57:1f:f4:96:1c:90:51:14:ce:ca:45:e5:7a:93:
86:cb:4e:8f:4a:e5:e9:ac:a2:e1:69:9e:d0:04:b9:
8c:7a:e3:5d:46:31:ec:c2:52:22:57:da:04:d5:a8:
ec:15:52:6e:e9:b8:57:43:8f:cc:c8:39:46:ef:47:
98:8c:e7:a0:11:0b:49:35:71:7b:e8:12:2f:ad:3a:
cf:ca:27:54:66:06:17:0a:3e:ac:69:03:ba:e5:8e:
8e:fb:a2:80:01:98:1e:f2:4e:34:76:bc:96:96:99:
bc:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:A8:54:DA:DB:98:27:5A:B4:AF:6A:4A:6B:51:23:4B:12:F1:89:2C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/DKhU2tuYJ1q0r2pKa1EjSxLxiSw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
59:cb:21:f4:87:2d:5e:ed:cd:2b:27:af:ab:07:df:d5:cf:89:
46:76:1d:b8:48:48:32:57:fd:fe:7a:7b:a3:9a:93:31:50:7a:
70:4e:9a:c7:4b:4e:ff:ef:6e:61:f4:74:7c:b6:29:a8:e4:fc:
40:58:f4:bc:b7:9d:76:e0:12:83:0d:43:a1:95:e2:80:36:11:
e4:4f:10:fe:d5:2c:0a:49:3b:3e:2f:3d:2c:6c:a5:4c:36:92:
b6:66:13:65:33:21:f3:88:df:c8:e7:52:3c:bc:c0:91:ce:1d:
12:ea:ea:ea:b7:d4:ef:14:a2:3d:e1:87:71:1b:f5:66:ee:db:
9e:34:84:a7:fd:5f:bf:df:5e:85:0c:bc:cb:b9:62:dd:b3:52:
f2:3f:78:44:d1:c1:60:3c:24:78:51:f8:2f:36:d5:1b:b9:a2:
eb:ef:83:2f:1c:18:91:b0:22:25:24:7b:95:68:9f:2b:95:a8:
86:eb:d7:f8:4e:2e:89:cb:04:bd:6b:b3:fa:eb:61:37:cb:4f:
d9:e7:81:7e:63:c4:75:cd:41:84:eb:b0:bc:a1:e4:8c:70:48:
82:4b:5a:a8:16:87:7e:05:45:44:9a:1c:15:e3:fe:f0:35:94:
5b:68:8f:d8:5f:2f:54:9c:e0:15:d0:b5:52:2b:24:36:0f:2e:
74:ec:f8:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 20:10:21 2025 by rpki-client