Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/DVwFMcG0rFWKt9yJ77kDqT05suk.roa
File: DVwFMcG0rFWKt9yJ77kDqT05suk.roa (raw, json)
Hash identifier: VmEUKnV0FZdZB7ZvjKK7BDVNpT3dydMJd8wYkw+JZ4Q=
Subject key identifier: 0D:5C:05:31:C1:B4:AC:55:8A:B7:DC:89:EF:B9:03:A9:3D:39:B2:E9
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0182EE3CDE491E9D7272055119E3A0F1F973
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/DVwFMcG0rFWKt9yJ77kDqT05suk.roa
Signing time: Tue 30 Aug 2022 10:12:22 +0000
ROA not before: Tue 30 Aug 2022 10:12:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:ee:3c:de:49:1e:9d:72:72:05:51:19:e3:a0:f1:f9:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 30 10:12:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0d5c0531c1b4ac558ab7dc89efb903a93d39b2e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:c6:95:ec:b7:c4:a2:48:a5:c4:66:a6:cb:f8:
2c:51:62:2f:cb:dd:07:93:3a:3c:27:5e:de:55:11:
e7:ac:c3:9f:61:b8:42:ca:b3:ce:22:b9:81:8c:e1:
fc:0d:d4:24:f5:b5:69:63:5a:d9:fb:4f:ba:61:ae:
98:05:12:08:00:5b:88:99:77:4f:5e:85:e7:8f:22:
c6:c2:56:28:42:31:ec:7e:9d:67:d6:e2:72:0a:69:
22:8d:dd:00:0b:ac:93:69:56:b7:36:3b:3a:76:8b:
cf:40:98:a7:b3:4f:79:5e:1e:b7:1b:a4:88:6e:21:
2e:91:61:1e:79:b9:7d:c2:62:11:b9:66:76:ba:f3:
0b:86:6b:ae:15:c1:d2:b9:39:26:79:f1:b0:bb:1d:
64:3b:43:38:6e:d1:33:99:e7:c1:d6:d1:9b:e8:49:
79:56:7d:bb:d8:5e:57:e1:3f:5a:fc:fc:41:c9:f7:
d9:ea:63:30:f4:27:c1:9a:cd:0c:19:02:5e:95:43:
bb:28:b7:a3:14:c3:f3:40:40:ba:ec:11:0c:55:58:
fa:95:55:4f:fb:9f:90:a3:bc:29:c5:44:fd:d0:00:
7b:12:bf:02:ef:7a:75:c9:f2:be:f7:f6:36:4f:45:
ff:d7:05:db:fa:77:c2:7d:28:83:77:4d:ac:04:f7:
4f:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:5C:05:31:C1:B4:AC:55:8A:B7:DC:89:EF:B9:03:A9:3D:39:B2:E9
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/DVwFMcG0rFWKt9yJ77kDqT05suk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
62:0d:8c:84:0d:7d:94:9d:f0:b2:09:8d:ac:53:f3:ab:ec:7b:
7c:6e:e9:18:7d:e6:96:7e:cb:62:3c:4e:25:17:a8:85:bd:be:
3b:ef:85:cb:7f:f5:bc:51:63:91:5b:ae:07:18:e1:b4:96:14:
7b:a2:fd:75:cb:62:3f:71:73:fe:38:a4:ca:75:78:4f:b2:b8:
13:2b:c2:3b:d0:cc:70:37:91:73:50:4a:51:98:79:37:75:c6:
e0:fb:4e:72:12:f9:ba:06:80:41:b5:4a:c5:af:35:bf:b4:90:
65:aa:f4:7d:ba:b9:01:bd:76:87:86:cd:ed:3c:90:5a:b4:75:
3b:66:ab:71:db:7c:34:de:e9:f6:0a:80:67:cd:01:48:82:48:
ba:c0:bf:ae:0e:14:14:1f:8d:e1:2a:5c:33:ee:0c:68:20:24:
fe:01:18:6f:c7:0d:36:6d:bf:a8:5e:22:0b:c4:8a:3a:f8:a6:
dc:cc:45:57:b5:1b:ff:0b:3f:d9:b1:b6:49:db:6d:9b:10:d0:
1e:9b:bf:ba:8a:7f:26:de:c5:ba:6e:bf:f8:fd:a4:23:b6:17:
db:7c:6e:92:23:71:9d:cf:13:eb:50:e9:8c:e7:36:4a:74:12:
bf:e9:70:a7:33:78:b6:3c:4d:65:64:5b:5a:47:59:9e:b2:80:
70:5e:80:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 04:43:23 2025 by rpki-client