Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/DKxA8K1tJLh4tsRwFqS21RuHBs8.roa
File: DKxA8K1tJLh4tsRwFqS21RuHBs8.roa (raw, json)
Hash identifier: mhoVjC/wBnHDzFI6Ovz/l7BenWcCUafbqhfBFUT2JzE=
Subject key identifier: 0C:AC:40:F0:AD:6D:24:B8:78:B6:C4:70:16:A4:B6:D5:1B:87:06:CF
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186E4837B9DAE83EB5AC30EE592B3AFE505
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/DKxA8K1tJLh4tsRwFqS21RuHBs8.roa
Signing time: Wed 15 Mar 2023 09:04:27 +0000
ROA not before: Wed 15 Mar 2023 09:04:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:e483:715d/128 maxlen: 128
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:e4:83:7b:9d:ae:83:eb:5a:c3:0e:e5:92:b3:af:e5:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 15 09:04:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0cac40f0ad6d24b878b6c47016a4b6d51b8706cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:17:04:d6:90:62:a8:c0:d7:e9:32:6d:6f:1f:
d1:2c:dc:40:93:90:22:16:55:15:fe:43:d4:94:2c:
74:9a:27:01:12:4d:ac:d1:de:67:4d:b2:9a:d5:34:
c7:0a:b9:a4:54:4a:2d:42:d8:b7:11:f9:6a:c5:a5:
18:7a:46:d0:07:49:9a:7d:76:0f:cf:dd:5e:3d:87:
bf:18:79:6c:89:6a:46:d8:5b:70:e3:16:a3:5b:2b:
38:8c:52:2c:82:36:fd:e5:32:49:5e:59:c4:48:0e:
3d:6b:89:06:f1:74:49:e1:03:4a:2d:4d:d1:d8:ed:
09:b6:d6:4f:2a:63:a3:2a:e7:55:78:ea:53:28:a0:
13:06:5d:eb:33:15:e6:6d:ee:17:a9:01:26:12:2a:
5d:86:28:43:16:28:ba:07:36:9b:c1:75:e5:e5:a9:
bf:cc:a8:03:b7:d8:92:01:69:d0:40:d3:74:98:12:
3f:98:12:2b:56:1f:d1:22:1a:42:9d:9b:53:1e:e6:
76:35:81:a5:03:14:cf:39:f8:82:dd:c9:20:53:c2:
54:3e:50:55:47:0a:34:b1:50:7d:73:8f:a6:95:1f:
12:dc:54:6b:3f:b4:9e:21:7d:cf:c7:6f:88:a1:70:
d1:f4:f9:c5:a0:a6:ca:a0:dd:ec:8d:f9:5f:57:31:
5d:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:AC:40:F0:AD:6D:24:B8:78:B6:C4:70:16:A4:B6:D5:1B:87:06:CF
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/DKxA8K1tJLh4tsRwFqS21RuHBs8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
91:f0:0e:b9:31:c8:45:04:fc:c5:82:3f:05:90:6d:8b:65:44:
e1:41:70:3e:23:ac:cd:b3:76:d6:36:86:15:46:db:b6:c8:04:
42:c4:64:8b:87:20:95:26:95:5a:4f:ae:d3:07:16:51:fe:1c:
89:9c:c1:76:f4:bc:61:68:ec:39:26:b3:b4:fb:e4:a7:41:96:
bf:ea:fe:5a:66:05:99:76:ae:0c:c9:0a:87:22:0b:a3:7e:e5:
c2:57:a5:39:dd:91:51:cd:7e:bb:da:3d:10:d4:15:9f:d3:d1:
c6:8d:5d:bd:d8:6b:d9:46:b7:1c:d4:ed:9e:14:9f:ea:cf:d4:
d7:d8:2a:b9:4d:2b:91:d8:24:9b:22:ac:76:1d:9d:ee:76:77:
ef:77:1a:0f:f8:94:38:98:10:37:5a:b6:d9:eb:f8:5e:04:00:
25:02:ea:3a:38:1c:f5:06:b3:70:09:7b:d1:69:aa:c9:da:83:
28:1d:26:91:84:c8:0b:e6:b9:6d:68:93:cb:80:3f:5a:03:61:
29:26:d2:4f:6a:97:6f:2e:a7:89:78:55:51:cc:f6:86:8f:44:
b8:f3:b1:77:f2:d4:cd:42:fb:2a:1a:74:40:89:b1:16:bf:7a:
bb:76:dd:a1:7f:1c:4f:e4:44:94:b3:bb:9e:21:8e:77:0c:3d:
61:81:ef:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 19:55:33 2025 by rpki-client