Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/DjTtG39CgEBT9Wfi6LiqnJsRBo4.roa
File: DjTtG39CgEBT9Wfi6LiqnJsRBo4.roa (raw, json)
Hash identifier: qQRHcQjfRzzTxqwBZcROd/xlf7MeWAXLfKwwOigvBPg=
Subject key identifier: 0E:34:ED:1B:7F:42:80:40:53:F5:67:E2:E8:B8:AA:9C:9B:11:06:8E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01873D5997A6417C74F99DD7256A8EAF96EE
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/DjTtG39CgEBT9Wfi6LiqnJsRBo4.roa
Signing time: Sat 01 Apr 2023 15:04:54 +0000
ROA not before: Sat 01 Apr 2023 15:04:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:187:3d59:290e/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:3d:59:97:a6:41:7c:74:f9:9d:d7:25:6a:8e:af:96:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 1 15:04:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0e34ed1b7f42804053f567e2e8b8aa9c9b11068e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e4:eb:f7:43:99:a4:d6:cb:4c:5e:68:3f:25:
ca:8e:2d:51:05:70:7a:b3:24:c3:c4:c2:62:5c:3d:
87:31:bc:55:36:9a:ca:d1:d5:45:fb:7c:c0:7f:a3:
70:d1:f9:3e:72:04:1c:1a:4b:06:39:0f:b3:88:ff:
86:a5:6a:70:13:4c:59:92:c3:fe:90:94:69:17:2e:
fb:0f:05:ad:4b:32:0a:47:ca:23:f9:fc:cf:33:57:
f7:46:f5:71:eb:0f:f1:10:64:d8:b8:b0:b3:fd:f3:
42:18:b9:f8:b6:09:89:80:66:aa:7d:74:0c:d3:da:
bb:fd:c7:56:a8:20:5d:7d:5d:0a:6d:eb:9f:a7:b5:
20:b4:20:da:d6:dc:a9:1a:75:b9:14:16:83:25:36:
fc:8e:17:3a:e1:66:8f:9a:3f:3c:40:4c:aa:a7:6e:
e2:cb:5b:1b:26:db:c7:0e:6a:c6:b1:87:cd:d2:c0:
28:0f:4c:f8:99:09:44:7d:f9:bc:7b:fe:f8:0a:01:
3a:05:c0:c2:2e:04:c6:c5:fd:8b:cc:6f:81:c0:c1:
46:c4:93:ac:2c:f7:9d:97:eb:44:3d:b5:87:e4:22:
5e:c5:42:0c:f1:ce:bf:2d:9b:c3:84:ca:ce:3d:09:
76:8c:13:fc:b0:3d:ec:f5:74:7a:4c:9d:ea:42:99:
90:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:34:ED:1B:7F:42:80:40:53:F5:67:E2:E8:B8:AA:9C:9B:11:06:8E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/DjTtG39CgEBT9Wfi6LiqnJsRBo4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a5:95:ef:66:9f:1e:3f:59:6d:d3:df:89:d9:3e:a3:6c:38:cc:
83:16:46:45:1f:15:0c:8a:48:52:2e:14:be:95:13:6a:9d:8d:
ee:d7:b8:49:3f:51:16:2b:bc:97:d8:14:c7:f1:fd:5b:19:e9:
c4:a1:3d:5a:74:cc:81:57:a5:8e:a2:a3:7c:e9:80:bd:97:a8:
5d:26:47:14:b1:a5:96:9f:46:d0:2e:d6:b4:75:37:a0:b8:b6:
40:0d:cf:f6:50:58:b3:e7:64:d9:5b:a5:a4:2b:eb:2b:46:22:
c9:a9:e6:31:34:e2:bc:82:ac:aa:3e:81:97:ac:e2:c2:9d:22:
90:fb:e1:10:02:d9:04:7b:be:0d:18:02:5e:14:16:e1:7b:66:
58:d2:89:78:ae:e6:d8:5f:e8:6c:f8:95:1e:84:07:d9:e9:6b:
76:66:14:f9:82:09:e3:66:05:8c:59:97:e5:22:f4:5b:7e:f5:
00:43:bc:5e:d0:2e:e5:f7:62:ff:24:f4:9f:10:67:af:98:9a:
4d:96:b5:ed:0c:82:b8:ae:29:64:7c:49:e1:4a:69:6b:40:ee:
2a:e2:b8:a7:40:48:d3:06:e9:37:f0:0f:13:fa:3b:0c:b2:11:
75:75:0b:fe:1c:d6:1c:85:a0:bc:82:fa:8b:81:fd:32:44:b5:
10:03:5b:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 12:02:10 2025 by rpki-client