Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/DNA47wzaHKprv1pwunHcr-zTUkI.roa
File: DNA47wzaHKprv1pwunHcr-zTUkI.roa (raw, json)
Hash identifier: JR+guhUeg/ao/KTQ5JPw6Kr1ZjM766Va++g1ER7Pr7Q=
Subject key identifier: 0C:D0:38:EF:0C:DA:1C:AA:6B:BF:5A:70:BA:71:DC:AF:EC:D3:52:42
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 8D23ED45
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/DNA47wzaHKprv1pwunHcr-zTUkI.roa
Signing time: Thu 16 Jun 2022 05:09:44 +0000
ROA not before: Thu 16 Jun 2022 05:09:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:181:56ba:5b78/128 maxlen: 128
2001:67c:64:ffff:0:181:22f:7a99/128 maxlen: 128
2001:67c:64:ffff:0:181:477e:58d8/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2367941957 (0x8d23ed45)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 16 05:09:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0cd038ef0cda1caa6bbf5a70ba71dcafecd35242
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:e8:70:ea:2e:1d:c3:9c:4f:e8:d0:ca:43:2e:
e5:d3:19:24:bb:d0:e0:94:d8:8f:23:4e:3a:28:c6:
8c:b6:ce:d7:e2:c4:03:52:99:4a:8c:ee:5f:a2:69:
0a:ef:86:65:ee:2f:53:0b:78:be:2d:67:88:37:81:
2c:0e:e1:65:47:99:be:e9:af:8a:25:07:90:c6:ec:
e2:01:4f:8b:c6:1d:4b:5b:d5:f9:7d:aa:f6:19:06:
e4:4d:43:39:38:58:01:9d:03:77:c1:e2:59:a0:b6:
96:a1:1a:32:3a:7c:04:74:18:7c:58:de:1e:1c:d3:
a4:b7:04:34:05:ad:0f:b5:05:76:1a:a3:f2:cc:59:
fb:04:5e:6b:7f:c5:61:d1:83:54:d8:22:84:5d:7b:
2c:9a:f2:8b:e1:56:d1:31:22:c2:28:11:23:4a:62:
9d:c8:0f:ce:ab:fe:da:8d:bd:d7:a8:c0:00:de:c4:
d7:04:35:e0:a1:a6:48:d8:0f:ae:4e:37:82:4f:cb:
ef:de:12:9a:2b:eb:80:70:f6:cd:a3:dc:2b:82:cc:
1c:46:a5:c8:17:03:41:8b:0e:6d:60:5c:52:52:22:
61:46:80:ac:d2:43:41:f4:6b:3d:14:2a:65:ba:77:
c3:05:2e:96:81:50:36:a1:8a:f1:fd:7e:a2:5e:45:
a0:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:D0:38:EF:0C:DA:1C:AA:6B:BF:5A:70:BA:71:DC:AF:EC:D3:52:42
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/DNA47wzaHKprv1pwunHcr-zTUkI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
61:f9:78:a1:5f:8e:1d:62:0e:77:68:df:c0:c2:2e:a6:79:ba:
1f:bb:f1:1d:dd:45:6e:49:5c:26:49:73:bf:a4:6e:69:ca:f7:
0e:6e:33:52:ad:d4:bb:32:ea:a0:fc:18:c0:60:e0:7a:90:99:
00:df:31:c2:67:4f:24:d3:e9:4b:79:2d:52:14:d8:25:b3:11:
66:8b:88:cd:37:be:72:b9:1d:d5:6c:82:a2:1c:b6:2f:80:da:
34:e8:4c:50:c8:4e:d6:d1:77:c0:7b:09:b2:51:6c:3a:03:db:
05:87:f7:84:94:d5:a1:9d:b6:fa:00:be:d9:fd:2a:04:00:80:
82:d6:4f:e3:66:0e:75:b1:f3:a5:cb:47:33:d3:a4:59:ee:ec:
da:df:0f:4b:01:34:5e:1b:60:0f:18:e5:31:4d:c5:5f:6e:1e:
a8:2e:8a:69:cd:da:b1:f0:9c:d5:79:c0:6e:77:38:69:15:af:
89:3d:cc:e5:03:a0:31:66:7d:e5:90:88:6f:8a:ed:60:7d:a6:
91:28:c7:f4:33:97:23:ac:ab:2b:8c:10:62:07:35:49:ec:c9:
79:63:5c:06:4b:0b:3e:40:0b:07:a1:c3:f6:b1:f9:1a:68:39:
8a:ad:53:0c:62:d0:64:c9:01:c9:9f:0f:fc:34:6a:e9:92:10:
37:54:76:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:13:26 2025 by rpki-client