Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Df0V92b0EhEGMjmu5hivbBeHo8s.roa
File: Df0V92b0EhEGMjmu5hivbBeHo8s.roa (raw, json)
Hash identifier: pWolWlyc/3hXyPRzaH2AOYSbv87kOeVHbyTUBMT4Oco=
Subject key identifier: 0D:FD:15:F7:66:F4:12:11:06:32:39:AE:E6:18:AF:6C:17:87:A3:CB
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189A07BFC8E4BE9481266C312029EF95E74
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Df0V92b0EhEGMjmu5hivbBeHo8s.roa
Signing time: Sat 29 Jul 2023 07:10:27 +0000
ROA not before: Sat 29 Jul 2023 07:10:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:a0:7b:fc:8e:4b:e9:48:12:66:c3:12:02:9e:f9:5e:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 29 07:10:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0dfd15f766f41211063239aee618af6c1787a3cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:84:8e:1f:dd:93:66:4b:2a:95:ab:dc:81:25:
76:1b:67:8c:c5:00:22:7d:72:d9:79:8a:32:a2:3b:
22:42:04:ef:97:da:73:7c:d9:fa:b7:cc:13:5a:27:
27:e5:5e:18:93:d6:90:7f:6b:18:88:d7:c7:a9:99:
0d:6a:f9:4d:9e:1e:7d:27:75:5e:1e:04:5a:7d:c3:
8c:06:46:e3:c7:71:15:8f:85:48:31:83:e3:62:91:
f5:82:52:ad:e3:c2:d1:cb:eb:05:23:e2:38:f3:f7:
78:2b:bd:c7:73:68:5e:49:4e:35:95:e1:c3:81:c7:
27:0e:17:7a:8f:ee:6a:b8:68:10:20:a1:b5:94:a6:
f8:53:19:3e:88:bd:5f:bd:c4:7a:18:e9:4b:df:f5:
f0:c2:49:c3:f9:01:a9:d5:6e:49:4e:74:c8:c1:bd:
55:0b:3c:2a:69:fa:2a:1b:ed:e2:c7:00:26:2f:fe:
be:2a:1a:63:3e:01:a7:23:e2:f1:bc:5a:b7:b9:a3:
3b:69:88:f5:cd:55:ef:b6:5d:cd:75:7f:04:59:97:
dc:64:86:55:39:5e:c0:0e:c0:31:3c:fb:02:02:76:
2c:93:2d:1a:af:cf:02:07:26:00:98:6c:2e:c5:78:
9e:42:6f:5c:66:10:6d:1a:8e:1d:55:df:59:23:c5:
f1:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:FD:15:F7:66:F4:12:11:06:32:39:AE:E6:18:AF:6C:17:87:A3:CB
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Df0V92b0EhEGMjmu5hivbBeHo8s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a2:22:b6:5d:11:35:15:6f:77:73:75:f7:4c:99:91:b3:0f:33:
ce:f6:d5:83:6c:a8:70:01:ef:e1:a0:c1:1c:ba:ec:20:94:3f:
8e:e3:5b:b3:d4:24:c2:1a:46:a5:e5:1e:52:90:8f:e2:ca:21:
1a:37:d3:93:61:6b:45:6c:26:b3:20:47:bb:aa:97:df:3c:e3:
9b:d2:cc:bc:2a:cc:8d:08:3f:dd:8e:c8:b5:e2:f9:35:3d:65:
14:11:46:7c:39:0d:27:76:f7:44:33:f6:8e:55:54:81:67:12:
eb:29:5f:14:f3:39:05:85:44:f5:02:c3:5b:86:34:57:d4:4e:
31:0d:97:3c:79:24:a0:2d:cc:3b:2a:d7:59:34:43:a2:2a:9a:
51:4d:50:82:db:c5:f6:34:98:05:10:89:6e:04:10:4c:98:94:
ee:fc:ab:ec:1c:fd:30:fa:e2:c0:79:84:00:88:93:b2:96:fa:
b2:c5:f5:fd:fa:2c:7d:9f:c0:a5:37:ef:bd:c2:ad:22:80:06:
7b:56:71:7a:39:29:8b:aa:b3:a1:34:c3:71:92:06:17:cb:ec:
8b:66:3a:d3:5c:b2:c9:86:d5:05:1c:f9:ac:01:5c:9c:b1:c6:
78:2f:fc:c7:95:e4:77:16:2f:d0:9a:24:8a:e0:68:18:eb:8d:
aa:2e:19:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 02:52:08 2025 by rpki-client