Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Dj35BRsS5FLrhC08b5J-1P70iD4.roa
File: Dj35BRsS5FLrhC08b5J-1P70iD4.roa (raw, json)
Hash identifier: VX4FWabkRnSeN/Ri2Ri/eEDxsua9yMDOcoQea/QkuRY=
Subject key identifier: 0E:3D:F9:05:1B:12:E4:52:EB:84:2D:3C:6F:92:7E:D4:FE:F4:88:3E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01876D6EAD1725A431EE05F9A6ACB1B02F6A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Dj35BRsS5FLrhC08b5J-1P70iD4.roa
Signing time: Mon 10 Apr 2023 23:09:42 +0000
ROA not before: Mon 10 Apr 2023 23:09:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:6d:6e:ad:17:25:a4:31:ee:05:f9:a6:ac:b1:b0:2f:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 10 23:09:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0e3df9051b12e452eb842d3c6f927ed4fef4883e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ad:ec:3d:9e:ab:74:f3:69:7e:03:d4:af:3d:
9a:ac:34:d5:50:97:76:b3:6d:82:55:7d:19:b3:3d:
ad:b4:08:80:6c:18:68:9f:a0:4c:dd:02:b4:01:21:
3d:58:0b:3f:33:6d:a5:ea:a3:78:6b:40:3e:b2:a8:
1f:72:63:ae:c1:b7:a0:a9:4f:af:22:88:29:4b:5f:
2d:6b:ac:66:e0:b3:44:7b:63:02:fe:09:b7:c6:48:
67:83:17:44:f5:d0:b4:5b:fb:a9:93:cb:5b:60:69:
87:49:6b:f2:06:d9:e7:dc:4c:71:98:09:e2:e4:c5:
2b:a5:a0:91:cf:f4:f9:d1:c1:7e:aa:6c:10:1e:00:
0c:77:b8:5f:d5:99:ef:8b:66:31:d3:77:cc:5b:ce:
56:df:93:aa:c9:9d:2b:57:20:bf:8b:65:2a:52:70:
34:2a:6e:2c:f4:51:fe:eb:33:4a:98:ec:3b:17:ab:
d8:1a:69:64:18:f0:47:2f:c7:bb:3f:f4:f7:8a:bc:
b1:84:7b:6e:82:b2:f5:8f:b9:e3:bb:f7:9c:11:40:
31:3f:11:c5:a8:88:73:ea:79:ae:24:80:53:64:60:
f3:6a:15:22:49:b3:b1:46:e8:d8:9b:f0:ba:08:92:
bb:69:aa:4f:f5:ce:a8:63:4c:c5:c5:bd:08:ee:38:
1c:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:3D:F9:05:1B:12:E4:52:EB:84:2D:3C:6F:92:7E:D4:FE:F4:88:3E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Dj35BRsS5FLrhC08b5J-1P70iD4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
85:7c:5f:46:1d:8d:b2:52:6b:83:22:e2:d4:a1:f4:d1:40:aa:
d7:08:3f:e0:5e:27:7e:6c:f1:30:52:17:25:79:8d:1f:88:05:
82:6c:da:b8:29:30:e4:a4:b9:85:97:ce:b5:08:e0:80:33:7f:
fe:ba:75:09:5d:41:bd:bf:72:71:af:82:14:12:0f:cb:ef:12:
a2:55:2e:a5:c5:1f:3a:fa:b3:15:2c:7b:cc:fc:fb:27:10:ec:
ea:1d:0f:c3:b6:60:23:2b:47:62:37:e4:ad:03:a5:50:05:e9:
cb:d8:d8:76:38:9b:bb:a1:ac:dd:c2:42:f8:32:35:e3:44:72:
97:73:cd:a1:58:3a:21:15:3c:53:cf:27:d9:0f:08:7d:63:cd:
3d:7d:21:3a:90:7c:c3:60:63:d5:45:b5:79:95:84:a8:62:cf:
83:c4:0d:f6:61:a1:b9:e4:f9:7c:18:ff:f1:c3:86:39:ff:f0:
7f:6e:72:88:40:02:e3:27:ec:d0:b2:26:6c:06:3d:6a:cd:96:
8c:8d:bd:4e:81:2c:bb:a7:52:bc:e6:81:5a:bc:66:40:7d:ab:
45:6c:7d:32:55:a5:83:a8:64:9a:60:98:99:ce:6c:76:a9:b7:
0e:14:04:de:dd:be:79:1f:05:9f:df:c5:a1:a6:33:e9:d2:6f:
21:c6:b4:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 00:09:43 2025 by rpki-client