Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Dmlw6RDaeffF5qSOHN7Z2vSx2ls.roa
File: Dmlw6RDaeffF5qSOHN7Z2vSx2ls.roa (raw, json)
Hash identifier: pmJMcvIBakf8syk5cDAJDSOv6Z2cM2afBdRTfdQhyp4=
Subject key identifier: 0E:69:70:E9:10:DA:79:F7:C5:E6:A4:8E:1C:DE:D9:DA:F4:B1:DA:5B
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189F541A8B1ACD2DC49619CCDE76665BA03
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Dmlw6RDaeffF5qSOHN7Z2vSx2ls.roa
Signing time: Mon 14 Aug 2023 18:14:28 +0000
ROA not before: Mon 14 Aug 2023 18:14:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:f5:41:a8:b1:ac:d2:dc:49:61:9c:cd:e7:66:65:ba:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 14 18:14:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0e6970e910da79f7c5e6a48e1cded9daf4b1da5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:60:13:27:75:7d:09:d1:93:22:b8:6a:6b:83:
24:10:15:0e:51:dd:9a:95:d8:02:12:fe:35:e0:b9:
70:2b:fb:1f:09:32:10:a8:4e:0a:ca:f7:c1:38:49:
52:3c:45:8d:0e:03:59:9e:cb:db:d7:6a:8a:6d:1c:
d6:87:e6:e8:c2:77:fe:cc:13:d6:5b:19:6d:4b:99:
89:24:2e:c8:8e:bd:f2:75:32:fc:cd:7f:3d:f7:e3:
79:83:bd:81:cd:35:9a:9f:19:6d:44:11:2e:b9:61:
9d:a4:70:60:20:2d:a6:de:a2:60:f7:a9:53:2c:25:
29:a0:51:09:a9:53:7d:c4:69:2f:1e:3b:40:d5:ec:
13:ed:91:a7:21:30:f0:11:93:64:b5:f1:05:e8:e7:
3f:aa:be:ea:37:b0:85:18:85:1e:98:68:f6:ba:88:
b5:81:72:d2:99:7e:ac:db:5a:32:f1:7c:f4:b8:3e:
de:7f:df:4c:87:00:24:8d:e0:78:e4:5a:65:4d:43:
fc:51:68:6c:b8:02:bd:e8:55:41:4e:fc:bf:41:65:
ef:79:28:41:3f:1d:9b:74:8c:b6:4d:9d:58:33:54:
e8:f6:74:84:9a:d3:8c:3b:e0:04:c4:4b:0c:4d:09:
8d:48:0f:38:94:c8:a5:3e:25:1e:d0:f2:93:d9:ea:
c3:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:69:70:E9:10:DA:79:F7:C5:E6:A4:8E:1C:DE:D9:DA:F4:B1:DA:5B
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Dmlw6RDaeffF5qSOHN7Z2vSx2ls.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
ad:a8:65:59:d1:37:58:5f:4a:0e:ea:ef:13:f3:f0:0d:6c:62:
32:85:ac:f9:b1:4a:17:05:33:ff:36:de:df:dc:b2:e5:03:69:
b9:50:b0:d1:3e:90:bb:86:fb:30:35:e1:e2:ce:7f:32:fd:84:
3e:94:db:e1:0f:ee:50:25:f5:da:48:2f:63:82:e6:d2:c9:a1:
94:6e:21:1e:22:9c:82:a9:af:cf:78:16:ee:a6:5a:09:3b:86:
60:92:9c:36:77:01:d3:2e:68:9a:44:81:1a:a2:cb:56:e2:c0:
f0:5d:f9:95:46:b7:80:03:88:fd:af:44:52:ce:54:c5:f5:9c:
89:b6:ac:e8:b8:0e:54:66:77:82:78:67:fc:60:8e:c6:c4:19:
c3:74:1b:32:5e:81:43:be:66:71:50:be:ae:d4:04:06:0a:c6:
9c:c6:07:92:a6:9e:9c:9f:eb:40:c9:ad:4c:e4:91:63:f5:dc:
c7:bc:08:22:c9:ce:d3:97:a8:bf:c6:49:ae:26:3a:40:16:0e:
ac:80:21:67:f2:4d:09:64:e3:5c:00:12:3e:a8:b0:47:05:9c:
e3:5c:53:9b:72:9e:f2:49:57:7f:2b:12:e1:5a:88:47:68:35:
24:35:56:75:3d:ea:43:7d:ee:eb:92:2c:76:8d:ee:4d:8e:d7:
67:bf:44:73
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYn1QaixrNLcSWGczedmZboDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwODE0MTgxNDI4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZTY5NzBlOTEwZGE3OWY3YzVlNmE0OGUxY2RlZDlkYWY0YjFkYTViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhWATJ3V9CdGTIrhqa4MkEBUOUd2a
ldgCEv414LlwK/sfCTIQqE4KyvfBOElSPEWNDgNZnsvb12qKbRzWh+bownf+zBPW
WxltS5mJJC7Ijr3ydTL8zX899+N5g72BzTWanxltRBEuuWGdpHBgIC2m3qJg96lT
LCUpoFEJqVN9xGkvHjtA1ewT7ZGnITDwEZNktfEF6Oc/qr7qN7CFGIUemGj2uoi1
gXLSmX6s21oy8Xz0uD7ef99MhwAkjeB45FplTUP8UWhsuAK96FVBTvy/QWXveShB
Px2bdIy2TZ1YM1To9nSEmtOMO+AExEsMTQmNSA84lMilPiUe0PKT2erDxQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFA5pcOkQ2nn3xeakjhze2dr0sdpbMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvRG1sdzZSRGFlZmZGNXFTT0hON1oydlN4MmxzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAK2oZVnRN1hfSg7q7xPz
8A1sYjKFrPmxShcFM/823t/csuUDablQsNE+kLuG+zA14eLOfzL9hD6U2+EP7lAl
9dpIL2OC5tLJoZRuIR4inIKpr894Fu6mWgk7hmCSnDZ3AdMuaJpEgRqiy1biwPBd
+ZVGt4ADiP2vRFLOVMX1nIm2rOi4DlRmd4J4Z/xgjsbEGcN0GzJegUO+ZnFQvq7U
BAYKxpzGB5Kmnpyf60DJrUzkkWP13Me8CCLJztOXqL/GSa4mOkAWDqyAIWfyTQlk
41wAEj6osEcFnONcU5tynvJJV38rEuFaiEdoNSQ1VnU96kN97uuSLHaN7k2O12e/
RHM=
-----END CERTIFICATE-----
Generated at Thu May 1 02:20:50 2025 by rpki-client