Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Dm8cdtqAlylFagQ9nsF1xtiWQk0.roa
File: Dm8cdtqAlylFagQ9nsF1xtiWQk0.roa (raw, json)
Hash identifier: poybJs4egSuvBAvR+k4k8X/Mrp2kmxW1jgEWZY+wIec=
Subject key identifier: 0E:6F:1C:76:DA:80:97:29:45:6A:04:3D:9E:C1:75:C6:D8:96:42:4D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01845D6226B98ACAC01B52761F0166559961
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Dm8cdtqAlylFagQ9nsF1xtiWQk0.roa
Signing time: Wed 09 Nov 2022 17:13:44 +0000
ROA not before: Wed 09 Nov 2022 17:13:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:184:51c3:ad7c/128 maxlen: 128
2001:67c:64:ffff:0:184:3fbd:71f7/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:184:4250:a4df/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:5d:62:26:b9:8a:ca:c0:1b:52:76:1f:01:66:55:99:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Nov 9 17:13:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0e6f1c76da809729456a043d9ec175c6d896424d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:3e:32:94:7e:88:1e:41:a5:06:b9:bf:a1:e8:
43:6f:83:6f:aa:d4:be:1a:e9:32:6f:82:45:8e:35:
ce:bf:e2:b8:c5:54:ae:7f:38:7c:24:0e:5f:47:3e:
aa:3e:89:8d:a9:ad:19:86:6c:3f:9a:54:3e:7b:be:
75:b3:3a:53:18:5e:52:6d:62:5c:37:7e:dd:32:d1:
27:6f:e5:24:e0:53:cc:18:89:49:cc:66:b6:c4:41:
3f:43:f8:1e:a4:65:69:b1:6c:82:44:5d:ba:a4:8c:
b1:92:c4:64:3b:b6:16:2e:a5:ed:4e:10:d9:eb:0d:
e2:35:4d:1a:44:b0:7a:4c:72:45:9f:00:d3:1a:ce:
6d:ec:6d:20:21:1b:ca:57:bb:cd:6e:b3:f0:59:fe:
6f:86:36:59:45:f9:a3:42:4d:d0:b1:58:5f:40:44:
41:c8:80:76:81:2f:b4:7a:1b:ff:58:e7:f0:74:51:
17:5f:37:c7:1d:45:3a:d0:8f:49:d9:59:e1:7b:43:
5b:92:c0:86:69:05:f5:ab:fa:9b:76:3e:11:27:0f:
38:96:15:79:51:ed:b6:be:26:7b:50:0a:15:e5:4a:
c1:7e:0f:74:05:49:06:bb:3a:0c:57:3b:7c:c3:ac:
ed:f3:65:07:e1:6f:b3:05:63:d0:16:f3:dc:0e:9b:
59:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:6F:1C:76:DA:80:97:29:45:6A:04:3D:9E:C1:75:C6:D8:96:42:4D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Dm8cdtqAlylFagQ9nsF1xtiWQk0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4a:74:30:69:ac:9e:49:fc:7b:7c:c7:27:a3:f1:1f:d2:e4:c4:
4b:8b:ee:22:ae:16:18:ba:f3:89:6e:13:75:65:2e:60:47:0f:
c0:8d:2c:32:aa:48:13:cd:1e:05:b9:44:63:9d:28:58:eb:2b:
9f:be:bd:94:23:e5:0f:5c:33:af:64:68:c8:5d:63:74:fe:11:
ad:97:7a:19:7b:c2:15:10:7a:27:57:1d:b6:36:a6:a5:17:c7:
e0:b3:e6:7c:54:7a:56:aa:e8:f5:fb:ef:ff:26:c0:53:7e:dd:
ee:31:fb:d7:ca:14:63:8e:50:84:5e:bf:00:61:71:1a:0d:26:
36:c1:24:6b:74:a8:06:6c:fa:2f:23:b9:ed:18:96:df:b0:76:
3e:4b:b9:d7:59:8b:1d:b1:18:79:41:b2:b7:a0:77:94:2a:0d:
96:1e:e0:c1:cf:8b:1d:f6:3d:56:e0:06:37:6f:e0:17:97:0d:
73:f6:fe:ba:b5:cc:03:21:22:45:0a:cd:00:7e:6e:96:61:85:
60:d8:3a:1f:cf:3b:e8:38:e3:3c:ff:84:18:e9:e7:bf:ba:9a:
d4:16:a5:9b:3b:47:53:2b:01:3d:26:2e:0e:83:9c:e3:b0:fc:
b1:87:23:68:22:04:13:48:5e:10:fe:1d:ce:d3:05:55:de:d7:
fd:f6:18:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 16:15:23 2025 by rpki-client