Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/DMDbS0aJw_Ws5AoDZuZhq_xkDEI.roa
File: DMDbS0aJw_Ws5AoDZuZhq_xkDEI.roa (raw, json)
Hash identifier: tvX+YqEYYJOCp8GYLhqXUri8kHdzuiwotQp9Br45Is0=
Subject key identifier: 0C:C0:DB:4B:46:89:C3:F5:AC:E4:0A:03:66:E6:61:AB:FC:64:0C:42
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189481A06959043AF18E5A82923D0C2ED7E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/DMDbS0aJw_Ws5AoDZuZhq_xkDEI.roa
Signing time: Wed 12 Jul 2023 03:16:52 +0000
ROA not before: Wed 12 Jul 2023 03:16:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:48:1a:06:95:90:43:af:18:e5:a8:29:23:d0:c2:ed:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 12 03:16:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0cc0db4b4689c3f5ace40a0366e661abfc640c42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:6c:f0:d9:c3:26:8f:74:bd:9d:3c:9e:3e:75:
f5:d4:f8:7c:60:da:19:76:8e:ed:d6:c7:d7:60:1d:
db:5f:62:31:75:13:68:7e:50:2d:c0:41:3c:27:7b:
57:da:d5:c1:86:27:8f:ee:1b:3e:a5:62:f1:2c:9e:
f7:5e:9d:f9:55:76:80:5f:67:c6:f2:10:43:5c:be:
13:51:a7:ef:9c:0f:8c:a6:6d:49:c2:35:1e:1b:06:
6c:78:88:45:81:89:ff:f5:74:60:11:14:c0:0b:b8:
52:74:b3:9e:81:c5:4c:8f:f6:26:08:42:3b:c0:3d:
ae:27:ee:89:b6:b6:1e:5f:26:4b:0e:89:c3:92:95:
55:98:de:eb:7f:76:56:dc:c9:7f:7d:51:6f:79:fd:
ab:c5:a8:f7:d4:2b:a5:91:bf:e6:02:0e:fc:6a:ad:
9b:a7:5e:f9:1e:25:78:51:b9:a9:a8:10:94:ca:d2:
ed:41:6a:e6:d7:db:eb:89:90:64:63:f6:7e:09:4f:
46:6a:4a:0d:c5:b9:69:c6:45:fd:34:26:aa:0f:39:
dd:b5:1f:fb:f1:3d:08:59:dc:0c:71:09:d0:5f:54:
14:58:28:ad:47:2a:bb:5d:fe:cd:b7:9a:5a:8f:c8:
ee:11:0c:07:3c:d1:46:ed:f0:c6:ce:e8:50:d2:0c:
fa:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:C0:DB:4B:46:89:C3:F5:AC:E4:0A:03:66:E6:61:AB:FC:64:0C:42
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/DMDbS0aJw_Ws5AoDZuZhq_xkDEI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
35:53:9b:f7:93:da:81:48:af:a7:84:f8:ce:da:5f:05:10:3e:
8d:3f:27:20:89:a8:4f:44:28:0d:9b:6d:9c:32:f9:7e:25:47:
35:ba:bf:c2:c0:9c:56:d6:f5:85:7c:54:bf:40:87:48:87:e1:
70:40:31:03:fd:1a:5f:65:c3:8a:a2:98:73:b8:fd:1e:0f:6f:
5b:0d:05:03:31:bf:b6:c0:32:c7:dd:65:9d:97:b2:35:70:c1:
b1:91:19:c1:c0:09:8f:6d:ee:25:65:ec:b6:2e:ee:d6:4b:3c:
9f:30:be:bd:95:ed:8e:5b:22:4c:f8:b7:d7:3b:e8:fe:bb:78:
5e:f1:70:d3:d3:21:ff:48:8c:36:56:60:b0:12:7d:a8:f4:f4:
f2:a8:3c:82:56:ab:6d:4f:41:87:ec:d5:04:29:e2:20:66:08:
03:04:02:05:0f:50:cf:b3:e2:5c:4d:ea:d8:f2:11:e4:0b:c6:
78:c8:e0:57:6e:a3:6b:f6:f9:81:68:6e:41:83:45:d5:d8:5c:
5e:e8:24:21:b9:fc:cb:ac:98:41:fd:de:cd:d9:32:43:ab:47:
6f:d4:10:65:5a:b4:5a:07:47:9d:08:a8:c0:ce:45:18:01:3d:
64:10:5d:90:96:4d:6f:a9:c4:77:5c:c1:04:d3:d8:fa:98:9d:
2d:8c:48:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 12:00:55 2025 by rpki-client