Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Dknk_cGj4CWgSA2UZWeos4b4MVU.roa
File: Dknk_cGj4CWgSA2UZWeos4b4MVU.roa (raw, json)
Hash identifier: P6CHCnHQbq1EMp7GBYBfFGYUtTnA2Ik47IwnAXp1KF0=
Subject key identifier: 0E:49:E4:FD:C1:A3:E0:25:A0:48:0D:94:65:67:A8:B3:86:F8:31:55
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018690385109315EB39DC982CA6D3196DE9E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Dknk_cGj4CWgSA2UZWeos4b4MVU.roa
Signing time: Mon 27 Feb 2023 00:14:15 +0000
ROA not before: Mon 27 Feb 2023 00:14:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:90:38:51:09:31:5e:b3:9d:c9:82:ca:6d:31:96:de:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 27 00:14:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0e49e4fdc1a3e025a0480d946567a8b386f83155
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:34:67:d9:97:43:0d:c6:52:6d:c2:e4:0a:a8:
ad:62:dc:bb:df:e4:55:09:e9:7f:72:47:a1:6d:47:
74:04:94:82:16:56:b3:f8:89:88:63:90:35:36:05:
21:87:f6:63:fb:22:cd:6e:11:00:e5:6d:62:84:60:
b3:84:b1:ba:ec:05:1c:17:cf:a0:05:3c:48:af:b8:
26:f7:31:3f:fb:9f:fb:b0:5a:1a:47:91:5a:ff:00:
16:79:32:d1:87:f2:30:93:33:a1:ef:05:b8:dd:57:
47:73:b2:f4:c6:4b:70:64:42:76:93:38:c5:50:f7:
22:ae:72:83:48:92:50:32:c8:78:d3:26:c4:08:27:
c7:71:f8:8f:7d:d7:76:e4:56:55:cd:19:d2:f4:b3:
5b:58:6f:13:dc:d8:ef:3f:7c:e7:b5:9c:42:fa:d9:
c9:2d:74:d4:47:88:63:f6:1c:36:28:e4:6c:1f:a0:
4e:80:a4:95:9a:0d:15:57:9b:70:34:a7:9f:f9:cb:
ca:6f:82:28:ad:8a:bb:74:4a:67:e3:27:23:e5:bb:
c2:90:e8:6e:3f:f4:36:4d:19:21:2a:1a:d8:81:37:
bd:30:65:ec:16:4d:80:34:dc:e9:d0:79:3a:86:73:
59:e1:1d:40:90:71:4c:15:e7:55:82:1c:71:80:a6:
64:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:49:E4:FD:C1:A3:E0:25:A0:48:0D:94:65:67:A8:B3:86:F8:31:55
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Dknk_cGj4CWgSA2UZWeos4b4MVU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
53:38:f6:8f:f2:67:2a:9e:43:cf:c8:ef:e8:13:42:99:13:b9:
44:6d:8d:f0:e9:33:9d:f7:d2:7b:60:0f:b9:34:0b:63:07:00:
e8:4e:fe:aa:79:78:d3:65:61:84:fa:16:0f:21:f7:7c:27:4b:
79:3c:fb:fe:7c:01:e7:15:88:67:fe:5e:ba:08:9e:d2:43:aa:
15:1c:7b:8f:ee:82:48:ba:fe:a9:02:a1:a4:3e:26:e8:f9:d5:
a4:1c:b1:65:0f:b0:c9:47:ec:db:87:e2:11:79:62:23:01:72:
14:08:04:5a:c1:3e:1d:2d:5a:c9:a1:8c:10:c4:c9:5e:d4:1b:
f2:de:1c:27:0f:bf:b6:32:fd:53:89:04:6c:bd:57:a1:ca:7b:
ca:15:db:2e:7e:5f:12:6f:e7:31:9b:9f:55:76:e4:d5:13:f3:
a8:02:eb:ee:76:a6:fd:75:4d:5a:01:b8:14:07:6c:95:b2:e7:
01:ee:d7:24:a7:64:c0:40:47:75:fe:ea:96:95:17:79:8c:58:
6d:20:3a:22:8c:32:f8:49:2a:7d:af:3e:0d:04:68:2b:01:8b:
6c:3d:84:ad:18:80:8c:1f:8b:51:14:34:95:f1:1f:bb:36:aa:
67:7d:79:7f:49:18:c1:a9:a7:de:c6:77:24:0f:e9:89:fd:3e:
a6:ae:f7:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 02:53:24 2025 by rpki-client