Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/DZcamZQxbOQFU1JbuQcvRYzQxpU.roa
File: DZcamZQxbOQFU1JbuQcvRYzQxpU.roa (raw, json)
Hash identifier: xUvnohUH+BdIYrQUSc+qaOv1Qkm7PeahwyrmdUrviq8=
Subject key identifier: 0D:97:1A:99:94:31:6C:E4:05:53:52:5B:B9:07:2F:45:8C:D0:C6:95
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188C3AE0F2C9DB0DFE33A23F06C1CB26983
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/DZcamZQxbOQFU1JbuQcvRYzQxpU.roa
Signing time: Fri 16 Jun 2023 10:09:04 +0000
ROA not before: Fri 16 Jun 2023 10:09:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:c3:ae:0f:2c:9d:b0:df:e3:3a:23:f0:6c:1c:b2:69:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 16 10:09:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0d971a9994316ce40553525bb9072f458cd0c695
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:57:7a:39:37:ce:df:fd:96:52:31:79:3e:8b:
a5:e6:be:79:d7:7a:5a:7e:5c:3b:be:72:91:3c:1a:
b6:49:2d:96:42:d6:75:ff:69:ee:a7:e9:1d:01:55:
c6:3e:fb:63:34:36:02:de:b2:0a:06:50:45:6b:69:
9c:f2:5c:b3:54:00:70:f4:e9:31:0e:2f:3c:41:af:
0f:bb:38:86:af:51:6f:e5:9d:e3:d8:49:af:4a:14:
24:7b:7e:7b:cd:70:ef:94:af:00:3e:2f:9d:ba:53:
d8:c5:fa:c6:55:4a:c2:8a:69:3a:95:19:a6:7c:29:
a0:d2:1e:4d:9a:01:4a:51:d7:7c:5c:88:17:0c:14:
57:b4:41:59:d8:e3:1e:da:38:70:9e:14:64:4b:0f:
6a:00:14:c3:75:57:d2:3f:94:bd:41:b2:0e:4d:33:
aa:0c:0b:39:ea:72:e2:ca:e3:57:6c:ad:f7:53:b3:
33:2b:74:f0:62:23:8b:50:90:07:ad:eb:b6:84:1c:
94:ce:af:4d:21:d1:f2:30:ba:4e:23:24:2a:da:68:
f3:0b:62:f1:5b:ad:03:a8:3d:63:c9:20:50:69:bb:
e1:4c:82:06:ba:47:e7:fd:cf:bd:aa:37:a9:18:85:
c2:15:9a:9c:88:d4:d3:97:a0:de:9c:49:c1:94:92:
73:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:97:1A:99:94:31:6C:E4:05:53:52:5B:B9:07:2F:45:8C:D0:C6:95
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/DZcamZQxbOQFU1JbuQcvRYzQxpU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
26:9d:b8:a7:90:79:f6:78:5b:8a:56:05:2b:6a:49:03:cc:3e:
2a:c8:fe:2b:07:63:82:31:e5:a2:6a:7b:f6:db:e5:2c:b6:40:
c7:15:7c:c2:a9:96:c7:5b:30:0b:ac:5f:70:f2:9b:13:74:95:
7d:70:48:26:38:cd:d5:89:cb:a5:c2:05:13:ef:2a:57:ae:df:
90:0a:ad:47:7a:95:ac:10:e3:10:37:23:e7:8a:72:d1:5b:c5:
33:6c:f7:4a:a2:70:f4:75:ad:17:67:22:99:dd:ec:ae:6f:fa:
03:fe:c7:9e:d7:8c:a0:4c:27:e3:86:ba:07:c7:e7:f3:d0:ec:
df:6c:b8:f5:20:79:27:97:c1:d9:ac:43:1d:b7:ab:7d:c2:17:
02:dd:21:62:3c:31:a1:89:6c:7b:2d:7e:86:4d:d9:5b:b8:1d:
de:db:ee:1e:9b:d0:4d:a6:43:da:fb:0c:d0:c6:a0:7f:0f:b4:
e1:eb:7d:13:4c:ff:37:83:68:8c:f3:c0:79:d8:84:2e:c3:89:
b9:25:26:8c:0c:ac:d4:95:c6:44:4e:de:fd:7e:12:28:05:d7:
f0:83:13:d8:0e:f5:af:aa:87:86:f9:44:03:e9:2b:9c:18:39:
e6:a3:c6:f7:0b:cd:e4:51:75:11:a3:6d:8b:73:15:03:c8:c2:
1a:f0:f0:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 19:12:00 2025 by rpki-client