Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Dvy1RDECTWqFSNjpH_-QXSshGGQ.roa
File: Dvy1RDECTWqFSNjpH_-QXSshGGQ.roa (raw, json)
Hash identifier: Oe7SYi8woDCUzo3sgJisLnPr9/r7aElr26xTPcCLk04=
Subject key identifier: 0E:FC:B5:44:31:02:4D:6A:85:48:D8:E9:1F:FF:90:5D:2B:21:18:64
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0182DD4B344F4C896A556B6B9B832069CBFB
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Dvy1RDECTWqFSNjpH_-QXSshGGQ.roa
Signing time: Sat 27 Aug 2022 03:14:29 +0000
ROA not before: Sat 27 Aug 2022 03:14:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:dd:4b:34:4f:4c:89:6a:55:6b:6b:9b:83:20:69:cb:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 27 03:14:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0efcb54431024d6a8548d8e91fff905d2b211864
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:b5:14:12:0b:14:15:b3:27:86:dc:5b:7b:1f:
94:80:2d:4f:17:25:1e:b9:9d:12:d3:07:ab:97:b5:
21:d8:c7:ed:48:a5:4c:2a:0e:a6:39:01:81:66:d1:
c1:d4:b9:17:b3:05:61:a4:97:e8:56:f8:8c:4a:c8:
18:36:87:d1:eb:91:6d:fb:e6:a5:87:e4:82:d9:a8:
b7:04:a1:87:1b:d3:3a:29:4a:af:92:f7:3a:ae:f1:
6a:8f:3d:26:69:44:be:73:1b:0e:f4:4c:8a:87:90:
e2:1f:ed:9d:17:34:d7:02:ae:68:b8:24:81:65:7d:
2c:68:03:76:7b:ff:ba:f7:ed:7d:f8:3b:5d:87:04:
68:8c:8d:1a:9b:2a:c4:9a:b2:0d:ab:ef:f9:5d:0f:
0d:4f:75:ef:e6:be:5e:c2:82:b5:43:84:ec:6f:59:
53:19:b0:a3:f5:62:22:7a:d3:27:a0:73:ba:56:eb:
e6:5c:5a:bd:21:d6:97:8e:4f:05:74:e1:83:bc:a1:
b8:28:83:aa:40:bd:ee:c7:63:9e:4d:4e:0b:9d:6b:
3b:2c:10:21:45:30:56:5b:f5:90:01:7f:19:f1:97:
99:e1:81:ab:f2:25:63:4d:76:76:79:d4:c3:38:94:
b6:97:5d:f7:b2:e7:a7:07:62:f3:dd:a4:a1:c2:aa:
53:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:FC:B5:44:31:02:4D:6A:85:48:D8:E9:1F:FF:90:5D:2B:21:18:64
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Dvy1RDECTWqFSNjpH_-QXSshGGQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7d:66:df:b2:c1:7c:9a:11:56:53:6c:58:49:85:a2:2e:de:f7:
4e:5f:d8:04:41:70:e2:b9:6a:6e:91:4a:0a:aa:ab:99:db:7e:
41:61:21:05:54:7d:8c:32:9e:56:58:83:ea:7b:c9:38:13:a8:
c8:2f:1b:62:9b:c9:d6:0e:4a:d8:28:4a:19:4b:98:8d:71:95:
f4:fa:49:e8:45:02:4c:62:f3:02:59:14:34:13:98:a3:07:1a:
d6:7b:55:df:99:f7:8f:59:de:13:33:df:f0:40:6d:b5:f5:23:
91:a8:33:ec:cb:4e:cb:0e:88:ee:55:78:90:e0:1d:6a:d5:21:
73:8c:e0:1c:06:5f:b7:fa:37:ce:c4:96:12:ba:43:92:06:fe:
4c:0a:8d:ea:14:75:d6:07:c8:60:b7:ae:1a:9f:a6:bd:e0:a8:
1d:f2:ea:80:a5:46:3b:46:d9:24:eb:21:3c:20:6e:f7:bc:c0:
0f:87:f5:6c:05:b7:85:96:96:c9:d7:af:f4:e0:78:c8:ce:57:
d7:b8:30:96:ca:3e:56:98:63:4e:b7:d5:7f:b5:26:07:ac:cd:
de:3e:06:8c:cf:55:be:08:c0:74:6f:65:78:fb:d3:39:fb:46:
e2:ea:8c:5a:49:69:64:e1:1f:19:e7:7b:c0:c2:11:28:58:5f:
75:40:54:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 22:02:40 2025 by rpki-client