Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Dmchd1zIrloRs5z3HL9h3ic1vPI.roa
File: Dmchd1zIrloRs5z3HL9h3ic1vPI.roa (raw, json)
Hash identifier: Hp0FD1rgxUXKzJ2/RViBydlIXm27ks+czN/K9P1rwI8=
Subject key identifier: 0E:67:21:77:5C:C8:AE:5A:11:B3:9C:F7:1C:BF:61:DE:27:35:BC:F2
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018954525F777ADE23104699C829E7826F62
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Dmchd1zIrloRs5z3HL9h3ic1vPI.roa
Signing time: Fri 14 Jul 2023 12:13:51 +0000
ROA not before: Fri 14 Jul 2023 12:13:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:54:52:5f:77:7a:de:23:10:46:99:c8:29:e7:82:6f:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 14 12:13:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0e6721775cc8ae5a11b39cf71cbf61de2735bcf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:0d:b5:11:b5:2d:2c:97:a5:c7:16:43:4e:17:
29:30:d7:ae:1f:c2:68:2a:27:5b:19:ff:c0:7e:61:
b7:ca:77:aa:dd:20:88:85:e6:4d:f8:70:96:72:4d:
04:5f:7c:0d:61:e4:36:2e:7a:f9:10:27:05:ec:a2:
d3:9f:ae:8c:70:1d:2a:de:75:9b:80:f8:ca:d0:05:
85:a7:2f:33:a8:7c:93:9e:e9:e3:bc:72:ae:00:f7:
20:53:2a:a1:56:88:ff:ff:bc:2d:6a:7e:90:1d:2c:
e1:16:e0:e5:31:a8:3b:a4:6a:1f:36:fa:93:7d:45:
ce:4b:83:60:ae:b4:d7:fc:56:32:eb:ea:9c:cd:3c:
29:6c:da:88:56:70:6d:7a:21:3d:e3:96:0d:92:4d:
c2:9f:eb:0d:fd:00:b1:31:4a:1a:2c:68:cd:4b:3c:
7f:0f:38:76:94:9a:76:c9:f4:de:3c:f8:9c:98:b9:
16:d5:55:d3:be:d8:d0:c9:4c:e3:c0:47:f0:54:61:
37:66:9c:16:5e:f0:d6:3b:4e:2d:b9:c8:b3:15:dd:
75:63:80:29:e6:b9:fb:00:6d:58:e0:ad:2f:80:b4:
ad:29:8a:66:1e:10:70:c1:47:cc:55:04:a5:20:5a:
3a:fb:69:5d:02:19:0d:dd:36:10:76:c1:e6:8e:9d:
46:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:67:21:77:5C:C8:AE:5A:11:B3:9C:F7:1C:BF:61:DE:27:35:BC:F2
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Dmchd1zIrloRs5z3HL9h3ic1vPI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
af:84:7d:2d:50:71:94:dd:fd:ed:dd:23:46:2c:96:b9:af:70:
72:e9:62:72:30:9d:e3:00:b2:4b:bc:01:1e:3b:19:81:11:5b:
a7:3c:5c:41:80:70:60:9a:11:b8:78:c8:32:1a:d8:a5:21:38:
69:30:f4:ea:30:f2:be:56:49:b0:bf:c9:26:e7:04:18:08:de:
11:07:3b:68:89:7a:29:bb:5b:8d:93:49:47:91:87:ba:d9:5d:
85:2b:87:8f:1d:f7:2f:13:04:27:e0:89:07:dd:58:be:37:aa:
67:0c:b5:5d:eb:eb:30:5e:f2:e0:8a:f1:9a:7b:3e:3a:c5:a4:
4c:ec:5d:86:32:5e:63:0b:bc:a2:c6:be:37:a9:fc:64:c9:fa:
84:15:b2:c3:f4:46:20:aa:60:8a:a9:f0:8c:4a:e4:60:6a:50:
d8:c8:c2:01:57:0c:77:a7:22:c7:19:be:e1:52:0c:20:13:47:
43:39:41:ea:51:8a:dd:2f:c7:7f:f3:8a:cc:ff:6d:8f:dd:3f:
4d:e4:a3:b7:b2:68:c1:d1:0d:3f:a0:0d:b2:95:7d:dd:e8:6c:
27:a6:d9:ed:9d:92:90:ac:34:29:35:db:a9:51:e3:60:df:d1:
96:c3:a5:46:47:09:01:91:42:3f:b0:2c:d9:ec:dd:1f:7f:e9:
fe:62:1c:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 22:57:25 2025 by rpki-client