Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/DbwSB7cLxXwyzfEvm1hOyzajO5w.roa
File: DbwSB7cLxXwyzfEvm1hOyzajO5w.roa (raw, json)
Hash identifier: km/C1fVWB9skihzlXve9YCVvUis2BRGrG8wHCXzHk0o=
Subject key identifier: 0D:BC:12:07:B7:0B:C5:7C:32:CD:F1:2F:9B:58:4E:CB:36:A3:3B:9C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01871C220F4455796F64FE5D956CF9AF3A0E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/DbwSB7cLxXwyzfEvm1hOyzajO5w.roa
Signing time: Sun 26 Mar 2023 04:16:46 +0000
ROA not before: Sun 26 Mar 2023 04:16:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:1c:22:0f:44:55:79:6f:64:fe:5d:95:6c:f9:af:3a:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 26 04:16:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0dbc1207b70bc57c32cdf12f9b584ecb36a33b9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:11:46:fd:e9:19:80:08:17:18:28:72:04:bc:
f3:a7:b8:b1:64:24:a0:dd:4e:ae:72:6b:d8:d7:7b:
84:1a:03:2c:eb:c2:88:11:25:36:ee:74:2a:4a:f6:
3d:00:aa:72:96:73:9e:e3:60:0c:a1:ee:d6:8c:d7:
bf:b4:fd:dd:52:1e:47:68:13:c5:3c:ea:db:73:7a:
e7:6f:d3:47:66:f5:50:c3:9c:c9:14:82:1f:37:ee:
b5:06:8a:57:ff:b4:c1:83:4c:7a:d4:dc:3b:36:43:
60:0a:c2:28:55:07:bc:99:3c:eb:a1:43:3c:c7:22:
1d:5c:50:da:bf:38:c2:fb:2b:13:5d:22:1f:a5:5d:
09:6f:84:15:e0:46:b7:70:81:5c:f0:b3:b3:d9:0c:
1a:bc:d4:14:f6:08:aa:db:9c:c8:dc:a4:e8:dd:93:
07:2d:b0:9a:a5:2b:95:3f:58:23:f2:ac:92:40:55:
96:84:cd:ef:85:0b:f7:95:02:a1:75:e4:63:38:3a:
94:72:29:33:ef:52:62:6a:1e:9a:24:05:10:b3:8a:
72:3c:6f:f7:27:fe:39:44:a4:a2:e8:3e:c3:5c:5a:
82:a5:73:0b:84:55:57:71:b7:db:f8:81:19:9b:f0:
c3:e3:08:1c:15:67:ec:9e:ff:75:7a:de:af:6a:46:
db:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:BC:12:07:B7:0B:C5:7C:32:CD:F1:2F:9B:58:4E:CB:36:A3:3B:9C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/DbwSB7cLxXwyzfEvm1hOyzajO5w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
33:74:94:3b:69:45:ef:ff:3c:a4:8f:a4:af:40:04:3f:1b:69:
c0:33:3d:39:85:de:5d:57:7c:5b:98:a8:55:26:b4:fd:5e:33:
87:42:9e:fc:d7:8f:08:df:4f:a2:6d:3d:94:ab:5a:71:17:99:
35:81:f6:c3:96:27:9c:8e:04:14:b2:9d:c0:ac:93:51:88:ef:
b1:98:71:ef:fa:bc:e8:22:eb:4e:76:6f:0e:0c:8c:85:ad:b9:
f6:02:d7:59:e1:d4:7d:5d:23:00:ce:f9:25:ff:23:41:2e:63:
d5:32:16:e5:e4:14:c5:f8:ad:bc:33:33:2e:63:2c:1b:c0:22:
7d:e7:d4:9c:46:b2:de:ba:fd:c8:b8:bf:be:82:d4:4e:cc:10:
6a:dd:a4:04:c4:85:33:29:57:70:30:f8:67:86:72:f1:e7:5a:
63:10:e0:e5:2a:d8:5f:7e:88:bc:53:6f:a6:f3:89:c6:26:4a:
c7:5c:06:82:c7:e6:a1:e3:d4:41:a6:89:f7:ec:19:bd:60:85:
b4:56:01:b5:05:78:bd:43:93:cc:aa:ce:13:cf:13:07:a4:52:
0a:2c:64:4e:52:07:37:7e:0c:44:4f:bc:a3:5f:73:92:f1:dd:
c6:fa:f2:29:b8:5d:13:7f:dc:6e:42:cb:26:19:3a:42:79:11:
de:f0:c3:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 03:11:57 2025 by rpki-client