Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/DPunZ5UWbM3AfRO4m6C3GEBl8T8.roa
File: DPunZ5UWbM3AfRO4m6C3GEBl8T8.roa (raw, json)
Hash identifier: y4PQOFl5uIfVan07Gfh2Xpl97suU/OyQhkweNgwvf5M=
Subject key identifier: 0C:FB:A7:67:95:16:6C:CD:C0:7D:13:B8:9B:A0:B7:18:40:65:F1:3F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189A157B77953B89D8BF2BE0E95002E28A1
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/DPunZ5UWbM3AfRO4m6C3GEBl8T8.roa
Signing time: Sat 29 Jul 2023 11:10:27 +0000
ROA not before: Sat 29 Jul 2023 11:10:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:a1:57:b7:79:53:b8:9d:8b:f2:be:0e:95:00:2e:28:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 29 11:10:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0cfba76795166ccdc07d13b89ba0b7184065f13f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:4a:2d:80:08:a5:f4:0e:fe:fb:2b:60:77:3a:
73:93:1b:01:69:bb:ca:55:d3:5d:b4:cd:c7:84:a9:
5c:2a:c0:e1:3f:e7:40:a0:1c:a7:92:2f:e8:50:ec:
5d:20:74:83:ae:33:c9:2a:6a:69:dc:da:0a:c4:37:
de:b6:29:88:4b:58:44:01:49:d8:91:28:fd:1c:a4:
b3:db:cf:f9:a8:d9:91:2d:49:b9:04:6b:00:ab:7f:
d6:c9:83:c4:b5:e1:43:f1:26:f9:8f:b0:b5:07:4a:
52:15:d0:98:95:25:c8:01:ae:86:06:8a:5e:ee:a5:
a0:c2:7c:12:4a:ed:8e:58:5c:d0:72:81:68:4e:7a:
72:df:80:80:7c:86:46:ce:7e:2d:68:04:2a:77:c6:
37:e1:39:88:5b:eb:e2:13:9a:7e:6c:4f:62:9b:9c:
c4:b0:a5:91:56:49:f0:9d:88:e2:8f:22:6a:44:69:
77:c7:52:bf:de:ec:45:e0:ed:d2:5e:66:ba:bb:2f:
ab:a8:40:1b:fb:29:b6:b7:86:a5:76:0b:b9:83:3e:
be:93:5d:c2:eb:90:69:d7:1a:c0:93:60:a0:db:0d:
54:ae:8f:72:76:7c:e4:62:d0:cd:3c:12:4f:ef:f1:
50:a9:97:98:2e:12:96:c1:28:6c:4b:1b:7a:34:eb:
ee:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:FB:A7:67:95:16:6C:CD:C0:7D:13:B8:9B:A0:B7:18:40:65:F1:3F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/DPunZ5UWbM3AfRO4m6C3GEBl8T8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
73:c9:2d:25:4a:e5:97:48:19:e0:95:7a:9a:16:be:ae:92:1f:
6e:20:f0:ed:bd:99:16:2e:a1:ce:93:ac:85:71:b5:29:66:36:
d6:25:1d:19:ad:32:ab:d8:2c:53:aa:94:a3:b6:72:2d:e8:ac:
ca:f0:91:42:04:50:6b:41:d9:79:8e:c4:29:16:a1:d7:51:ee:
74:c8:24:d4:6a:6a:bc:90:ad:a1:de:eb:73:26:44:4e:3f:1a:
ef:f9:f8:91:ae:7f:ed:27:85:bd:11:95:ac:5b:1a:44:b4:52:
5d:93:fb:4d:24:d0:7a:c7:76:d8:26:02:9f:fa:b8:d9:25:f5:
98:f2:9f:af:ed:e2:16:71:b7:71:66:a5:3e:45:39:91:58:e9:
fa:5f:0b:4a:24:44:6e:3d:35:27:ac:58:98:db:83:9e:c6:31:
c0:04:e7:4d:50:f4:49:a3:9f:eb:67:88:16:27:f7:54:eb:b8:
b7:3f:fd:f8:50:ff:70:17:5c:6d:64:8a:96:e3:1b:22:c6:f6:
3c:a2:bb:0f:d8:dc:11:78:86:0d:c3:99:46:99:d8:a5:8d:cd:
bc:34:da:3d:16:aa:21:5b:21:0e:b2:a4:4e:6f:08:4b:4c:46:
ad:43:5e:a7:d7:41:3d:fa:50:e6:47:c3:d7:38:4c:be:59:99:
c6:c9:24:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:35:01 2025 by rpki-client