Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/DvAY62wO0mTE_leECUV54q3DTbU.roa
File: DvAY62wO0mTE_leECUV54q3DTbU.roa (raw, json)
Hash identifier: XVAF+bK7SUgO80cqDq37agP9eAH6KTJLs1a/6zyZffg=
Subject key identifier: 0E:F0:18:EB:6C:0E:D2:64:C4:FE:57:84:09:45:79:E2:AD:C3:4D:B5
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189AB6F55840802102F440D42949C461914
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/DvAY62wO0mTE_leECUV54q3DTbU.roa
Signing time: Mon 31 Jul 2023 10:12:27 +0000
ROA not before: Mon 31 Jul 2023 10:12:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:ab:6f:55:84:08:02:10:2f:44:0d:42:94:9c:46:19:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 31 10:12:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0ef018eb6c0ed264c4fe5784094579e2adc34db5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:0b:94:0c:6a:bc:71:91:26:29:e4:37:87:7f:
2d:c2:08:28:70:2d:a1:68:bf:78:af:80:e9:c9:74:
b4:5f:2e:7b:a0:86:3e:0a:a7:29:e1:59:e4:5a:ad:
90:bd:c7:34:c0:cc:e9:1e:d7:71:23:9b:25:97:ed:
17:24:50:dd:88:cf:64:19:d7:e3:74:c2:c5:de:74:
59:67:81:33:30:fa:a5:e4:66:7f:a5:3b:d4:83:76:
fe:3f:35:34:3a:87:40:db:cf:67:36:9e:7c:8e:fc:
8d:96:22:6b:37:66:85:4e:33:ac:e9:06:f3:da:93:
1c:ae:cf:ac:43:93:f0:dd:e3:7d:1b:29:6c:c1:70:
47:21:bd:90:ac:c7:80:56:46:e3:bf:7d:d4:b4:95:
61:d2:5f:e2:90:a8:f6:7b:f2:2e:66:2a:69:e3:92:
33:86:0b:5c:c2:20:1c:bd:17:39:1a:bb:b1:75:56:
cb:f7:cb:ff:6c:e3:aa:90:da:62:88:24:fc:99:a8:
e9:a5:27:97:f0:18:0d:e7:64:bb:f9:59:9b:96:d6:
09:1f:83:19:3c:c5:9d:cd:80:13:d3:5a:89:52:9e:
9c:f3:be:98:95:be:01:38:bb:54:eb:23:76:52:4f:
7b:35:d3:4a:73:97:44:91:f0:c3:72:6c:9d:56:75:
f2:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:F0:18:EB:6C:0E:D2:64:C4:FE:57:84:09:45:79:E2:AD:C3:4D:B5
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/DvAY62wO0mTE_leECUV54q3DTbU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4d:e6:e5:d4:69:43:64:0c:b1:34:89:46:eb:8f:9f:fb:34:6a:
71:67:65:8e:2c:a2:89:c8:d4:a6:a3:4d:f4:00:29:a1:47:f4:
76:23:f6:2e:ad:74:ed:9a:99:e8:41:1b:7c:81:67:6d:67:bb:
a0:78:ca:78:b4:64:bb:21:31:3a:2c:77:4a:b3:d3:40:60:e8:
a4:ef:77:9e:14:f8:51:75:73:19:58:db:8d:39:b5:a9:51:3f:
ab:1e:56:8a:d6:b6:c2:04:7b:c9:5d:f4:33:c5:3f:a3:80:f9:
c9:87:5a:37:c5:04:b6:8a:44:3c:0a:52:53:c4:d8:49:c4:52:
95:e8:b6:58:46:48:d6:92:70:75:c9:4e:03:7b:1b:7f:a3:25:
28:b8:05:b2:be:47:ec:22:d1:03:0a:c6:4e:84:0a:e8:09:86:
45:d8:18:05:b3:63:18:d1:64:be:23:6a:4f:a5:b0:b7:a1:bf:
50:99:06:82:94:3f:0b:85:72:a0:9c:78:6f:76:d8:e6:42:16:
a7:62:b3:59:6a:51:1b:5d:84:70:16:f6:69:73:b6:f8:4b:d2:
0e:20:f4:cf:96:c2:97:7f:cc:ff:dc:bd:1f:6d:27:b5:d9:db:
9e:ae:61:e4:40:71:7b:1e:8c:4d:52:25:5e:3a:4a:a1:72:8e:
50:80:4f:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 14:48:15 2025 by rpki-client