Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/DNhq4m-r-xUO_r4IAV55DSEoAmM.roa
File: DNhq4m-r-xUO_r4IAV55DSEoAmM.roa (raw, json)
Hash identifier: NPDhK9WvguiWDatzwqduLvHddsJY/VzmXh+ofENcA20=
Subject key identifier: 0C:D8:6A:E2:6F:AB:FB:15:0E:FE:BE:08:01:5E:79:0D:21:28:02:63
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187EB95BEF5F4400F2D9B8BE178F5429BB8
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/DNhq4m-r-xUO_r4IAV55DSEoAmM.roa
Signing time: Fri 05 May 2023 11:04:32 +0000
ROA not before: Fri 05 May 2023 11:04:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:eb95:a01e/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:eb:95:be:f5:f4:40:0f:2d:9b:8b:e1:78:f5:42:9b:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 5 11:04:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0cd86ae26fabfb150efebe08015e790d21280263
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c1:9a:03:1c:b9:5e:eb:1a:6c:94:44:99:d2:
1f:14:60:81:34:b1:c2:07:7f:76:dc:fc:2b:a5:57:
57:18:1c:2d:5e:e1:6f:2c:f5:a0:0a:30:d4:72:81:
fc:12:20:6e:1a:5c:98:f0:cc:50:8e:eb:05:98:f5:
61:f4:ab:e7:f2:42:46:8d:5f:a1:8b:25:56:15:ee:
8d:bf:58:48:c3:28:fd:63:d7:b3:45:a2:bb:38:61:
f7:7a:f5:26:e0:15:44:fd:19:83:bb:8f:e7:54:50:
2b:26:80:72:74:27:f7:32:cb:3b:70:de:ff:a5:2c:
5f:3d:8e:c2:3f:4f:f6:b5:88:f7:be:92:9f:9e:90:
7c:27:9a:cd:02:8f:96:a0:e9:27:06:a8:23:e4:a4:
12:dd:fa:f7:d8:c4:78:5a:5d:57:5c:78:88:2c:bc:
9c:6a:bd:af:93:7e:b4:c5:a8:7c:1b:60:3c:ac:5d:
4b:51:46:a7:30:93:e1:a3:e7:84:ad:a0:b6:2d:30:
58:c3:6d:22:41:75:70:d0:3e:cf:c1:21:9d:3a:cf:
61:cf:1e:5a:6f:c1:d3:5b:d7:d6:80:08:b1:9f:3a:
8a:69:d9:63:ad:1b:25:45:a1:2c:3f:53:e6:69:ce:
cd:b8:a6:c5:c8:74:2d:66:f3:0d:4e:be:0d:f2:bf:
70:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:D8:6A:E2:6F:AB:FB:15:0E:FE:BE:08:01:5E:79:0D:21:28:02:63
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/DNhq4m-r-xUO_r4IAV55DSEoAmM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
69:d3:c0:26:15:92:9c:70:60:b0:d6:2c:31:d0:3e:6a:03:07:
6f:6a:1e:05:79:4b:18:2b:fa:0b:8d:a9:89:06:9e:ee:db:ec:
a0:67:9a:6b:e0:8d:7f:65:be:10:9a:3d:3b:d7:61:6b:36:38:
9d:15:43:7f:8e:53:d4:ee:dc:21:fd:cd:3b:88:35:f8:de:ba:
05:e9:5d:f1:f5:a7:3e:1a:a3:e7:d3:d6:77:2d:c4:62:9d:21:
71:9c:b3:0c:81:29:57:d7:ea:c9:26:d6:d5:15:09:29:43:4f:
e3:ca:98:d5:cf:e2:13:2d:d1:ad:0f:d4:40:ef:85:97:5c:39:
cf:f4:0d:d2:6d:5b:d1:26:21:ac:7f:31:c8:95:be:24:9d:22:
4f:f7:04:58:66:04:4b:1b:d8:3c:28:81:ad:b7:77:b0:0b:0a:
83:8f:5b:43:2e:8a:84:eb:eb:6b:3a:74:3e:96:66:a0:3b:03:
bb:e6:27:4c:e7:99:2e:f5:99:21:07:db:8b:ca:0a:fd:86:a9:
64:0c:28:80:8a:b8:dc:e8:1a:5f:d0:d4:54:d1:ce:53:a7:1f:
14:90:ba:41:aa:7e:26:b2:6a:fa:fa:5d:82:be:4f:58:14:40:
2f:35:0e:af:91:c3:74:c7:6b:3a:f0:4a:1a:10:bc:71:93:88:
52:ec:94:08
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYfrlb719EAPLZuL4Xj1Qpu4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNTA1MTEwNDMyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwY2Q4NmFlMjZmYWJmYjE1MGVmZWJlMDgwMTVlNzkwZDIxMjgwMjYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApMGaAxy5XusabJREmdIfFGCBNLHC
B3923PwrpVdXGBwtXuFvLPWgCjDUcoH8EiBuGlyY8MxQjusFmPVh9Kvn8kJGjV+h
iyVWFe6Nv1hIwyj9Y9ezRaK7OGH3evUm4BVE/RmDu4/nVFArJoBydCf3Mss7cN7/
pSxfPY7CP0/2tYj3vpKfnpB8J5rNAo+WoOknBqgj5KQS3fr32MR4Wl1XXHiILLyc
ar2vk360xah8G2A8rF1LUUanMJPho+eEraC2LTBYw20iQXVw0D7PwSGdOs9hzx5a
b8HTW9fWgAixnzqKadljrRslRaEsP1Pmac7NuKbFyHQtZvMNTr4N8r9wFwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFAzYauJvq/sVDv6+CAFeeQ0hKAJjMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvRE5ocTRtLXIteFVPX3I0SUFWNTVEU0VvQW1NLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAGnTwCYVkpxwYLDWLDHQ
PmoDB29qHgV5Sxgr+guNqYkGnu7b7KBnmmvgjX9lvhCaPTvXYWs2OJ0VQ3+OU9Tu
3CH9zTuINfjeugXpXfH1pz4ao+fT1nctxGKdIXGcswyBKVfX6skm1tUVCSlDT+PK
mNXP4hMt0a0P1EDvhZdcOc/0DdJtW9EmIax/MciVviSdIk/3BFhmBEsb2Dwoga23
d7ALCoOPW0MuioTr62s6dD6WZqA7A7vmJ0znmS71mSEH24vKCv2GqWQMKICKuNzo
Gl/Q1FTRzlOnHxSQukGqfiayavr6XYK+T1gUQC81Dq+Rw3THazrwShoQvHGTiFLs
lAg=
-----END CERTIFICATE-----
Generated at Wed Apr 30 20:02:44 2025 by rpki-client