Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/DMAYHP7yMtUSSZFZ3B7Dm31u5-8.roa
File: DMAYHP7yMtUSSZFZ3B7Dm31u5-8.roa (raw, json)
Hash identifier: LHr0hnrCmsFqscnG/tl9CX3KfufOfhbM2GDQw3XSdjM=
Subject key identifier: 0C:C0:18:1C:FE:F2:32:D5:12:49:91:59:DC:1E:C3:9B:7D:6E:E7:EF
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A07ECCEA1A16C25E1D529E8358DADEF42
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/DMAYHP7yMtUSSZFZ3B7Dm31u5-8.roa
Signing time: Fri 18 Aug 2023 09:14:34 +0000
ROA not before: Fri 18 Aug 2023 09:14:34 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:07:ec:ce:a1:a1:6c:25:e1:d5:29:e8:35:8d:ad:ef:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 18 09:14:34 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0cc0181cfef232d512499159dc1ec39b7d6ee7ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:19:79:ce:53:f1:c6:d7:20:89:2b:32:b1:42:
0c:48:a3:db:36:0f:4a:db:ea:6e:76:fe:4f:92:7c:
db:c1:70:83:16:47:74:81:51:ef:51:02:5e:1b:42:
46:0d:09:bc:04:de:71:cb:c2:a5:37:aa:2a:89:24:
93:c0:0e:71:22:d5:4b:39:b1:f1:64:98:28:df:4a:
db:e0:08:f8:70:27:0f:b8:63:b2:b1:48:9f:6c:fb:
80:0c:23:63:60:bf:6b:12:85:d7:cb:4b:05:67:6e:
ed:b4:87:f5:40:6e:2f:c6:2a:3a:11:ae:c8:aa:a1:
44:cb:41:4b:a0:8d:5e:99:77:be:b6:bf:cb:ed:4a:
53:b9:bc:b8:a7:bc:e2:83:60:4a:8a:0c:6e:44:a8:
99:72:de:d7:90:c7:e7:40:c8:87:99:30:59:95:c0:
d8:4d:d5:3e:33:78:71:96:00:49:24:64:19:1d:e8:
bc:d4:7c:46:ae:ba:b4:05:41:5a:e7:52:42:e9:1e:
49:6f:00:32:d5:22:65:58:b7:c0:8d:f3:0e:23:1f:
94:81:8c:ab:af:b0:97:a1:d4:1a:42:dc:ec:96:af:
5a:2a:c2:9c:1c:89:e2:52:67:4c:6e:bd:7e:75:0e:
f9:13:bf:3b:9e:ae:ac:4a:09:25:72:0e:77:78:db:
e6:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:C0:18:1C:FE:F2:32:D5:12:49:91:59:DC:1E:C3:9B:7D:6E:E7:EF
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/DMAYHP7yMtUSSZFZ3B7Dm31u5-8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6f:d3:19:54:e3:47:b2:2d:68:b8:14:a1:f7:d6:29:52:de:01:
f7:0b:50:aa:fa:85:89:17:41:37:68:6c:eb:80:fe:79:28:ef:
fa:ef:eb:7a:85:a5:fe:36:b8:c7:52:7e:53:2c:8a:8a:95:3f:
1d:d6:a5:e9:16:a7:8d:83:f5:7a:e7:af:6e:65:76:53:3c:44:
04:b4:5a:29:62:6a:0e:c1:45:c0:6c:28:7f:34:01:7d:11:ed:
2d:06:4b:28:8c:c4:dc:56:d4:47:51:a6:a3:43:e4:8b:8d:c4:
2c:24:bb:3c:ec:a6:a0:bb:e3:c8:82:99:f6:d3:8d:e1:34:7a:
d1:c8:06:57:a3:be:b4:fd:c7:a1:04:99:0c:9d:bc:49:21:05:
04:eb:22:e1:8b:02:2f:ad:ee:1b:f6:a6:43:d9:51:02:03:cf:
10:27:85:41:60:a6:47:6d:09:04:47:d2:14:cb:34:00:0a:d6:
2d:88:96:31:05:2e:54:78:23:a3:1d:13:2b:21:3e:51:b2:5d:
9d:ac:6d:da:58:42:2b:75:ea:5b:21:ea:5f:51:fd:f4:4f:51:
ed:98:d1:4a:98:e1:36:e9:4e:e2:f1:d2:66:6b:71:eb:46:19:
4e:52:2b:97:3e:06:73:84:a4:2d:aa:46:3a:a7:cc:d7:69:d9:
aa:9d:83:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 22:01:09 2025 by rpki-client