Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Dkks9tu5qjT-2Yf_5ZS6Foc1Up8.roa
File: Dkks9tu5qjT-2Yf_5ZS6Foc1Up8.roa (raw, json)
Hash identifier: A7uDq9fDpWWhEkhtyn2YSNHKcd2it0O/7h1lmU7Qon8=
Subject key identifier: 0E:49:2C:F6:DB:B9:AA:34:FE:D9:87:FF:E5:94:BA:16:87:35:52:9F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189E1F3324CF4CFD0A78C6770DAF3A9BCE0
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Dkks9tu5qjT-2Yf_5ZS6Foc1Up8.roa
Signing time: Fri 11 Aug 2023 00:15:59 +0000
ROA not before: Fri 11 Aug 2023 00:15:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:e1:f3:32:4c:f4:cf:d0:a7:8c:67:70:da:f3:a9:bc:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 11 00:15:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0e492cf6dbb9aa34fed987ffe594ba168735529f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:c2:99:78:41:4a:2b:ff:e4:b7:17:40:c0:35:
79:0a:fc:2d:9a:21:7d:cd:a7:28:d8:a0:bb:bd:a0:
cd:19:4e:34:17:e4:eb:d8:30:90:08:b5:88:d0:da:
50:a2:55:b2:4f:13:f0:81:b7:f7:10:69:63:24:b1:
1c:58:91:0d:dd:99:f5:45:cc:0c:88:fa:95:07:28:
ce:6e:b7:78:68:93:cb:00:e1:55:2f:aa:ef:e4:69:
26:a0:87:29:39:c6:89:02:ba:b8:21:12:63:4b:1a:
34:95:39:25:46:ca:e6:de:31:8b:f4:e3:a3:aa:97:
ca:1c:bf:e3:cf:85:4b:73:28:2b:e3:a8:23:a6:e1:
66:e7:fa:ac:62:e1:14:18:72:89:69:c0:61:54:bd:
67:79:00:1f:37:8f:24:92:d8:4f:02:7c:9f:84:b1:
f0:6c:9c:1a:04:cd:ce:cd:69:02:4b:a5:92:9d:63:
27:11:c3:0b:d3:be:9a:f3:5c:e6:23:92:be:34:ad:
fb:91:32:f1:7e:84:d3:67:ef:a3:18:da:43:d9:23:
3e:b3:63:6e:49:46:fa:8a:3d:15:42:f4:19:a0:8f:
eb:ae:1c:48:d4:cb:2c:d5:2c:99:9e:b4:6f:84:fb:
ed:a1:ca:c7:10:4d:d8:ac:77:f4:20:96:d3:71:d6:
35:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:49:2C:F6:DB:B9:AA:34:FE:D9:87:FF:E5:94:BA:16:87:35:52:9F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Dkks9tu5qjT-2Yf_5ZS6Foc1Up8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
36:02:f4:b6:18:93:fe:36:3c:1a:57:a4:e3:73:2b:9c:d3:06:
41:47:8b:f3:0d:46:37:f5:b5:0b:3f:85:c5:b7:36:eb:24:1f:
e1:49:60:82:58:b3:41:00:c2:c3:18:a7:ef:e7:27:f5:a6:eb:
02:44:b2:82:59:f1:69:65:4c:3d:93:7c:92:d1:3e:b1:e8:13:
51:de:e1:36:6b:43:d2:71:ac:4f:01:3f:1f:c3:78:ea:09:bb:
4a:e7:d6:d0:fd:72:ac:e9:6e:74:3a:6e:09:68:1d:5f:4f:0a:
a2:30:d2:a6:3c:16:ea:6f:5c:06:d9:18:32:2a:38:20:74:b4:
7a:df:41:f2:7a:fd:41:bc:22:fc:cc:13:d2:42:ec:68:0a:da:
e6:87:93:e1:c8:62:54:2b:13:46:f3:be:12:a3:e1:e6:35:f6:
fb:d7:78:6c:f5:93:d5:c4:1a:c2:46:ae:07:f3:42:05:e3:0c:
d9:a8:47:e1:65:a0:f6:c5:3e:fc:1b:4f:fb:07:f5:a9:5d:1f:
01:f8:59:ae:e8:97:98:4b:89:79:7c:ec:4b:9e:6f:40:ae:f8:
c0:60:2b:15:31:37:fa:15:c8:a9:bb:2f:68:15:d6:a4:de:30:
7b:a6:bc:f3:59:ac:0e:5f:ee:40:29:8c:01:6e:a5:e9:8c:c2:
b8:0e:fe:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 13:24:21 2025 by rpki-client