Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/DxOLZanJJcUeFPS8_r33rVY0Fdc.roa
File: DxOLZanJJcUeFPS8_r33rVY0Fdc.roa (raw, json)
Hash identifier: TGm6iPMuskzAYHTn7ED+R1iMKH8PquVkc6Kr3W8SJwk=
Subject key identifier: 0F:13:8B:65:A9:C9:25:C5:1E:14:F4:BC:FE:BD:F7:AD:56:34:15:D7
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 89087697
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/DxOLZanJJcUeFPS8_r33rVY0Fdc.roa
Signing time: Wed 01 Jun 2022 15:18:22 +0000
ROA not before: Wed 01 Jun 2022 15:18:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:181:22f:7a99/128 maxlen: 128
2001:67c:64:ffff:0:180:ff9c:1e7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2299033239 (0x89087697)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 1 15:18:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0f138b65a9c925c51e14f4bcfebdf7ad563415d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:be:9c:a3:ae:bc:e1:fd:4a:84:c8:5e:d4:c9:
47:5e:cc:06:59:38:18:33:61:5c:fb:bc:48:67:f1:
d8:92:db:3f:30:1b:20:1e:84:f2:d7:d1:6f:00:d4:
c6:71:bd:6c:e9:c2:7c:21:9a:74:50:9a:61:e2:d8:
b9:bf:5c:4d:87:fa:9b:34:72:a0:c4:22:40:8b:a6:
0d:08:99:6f:16:fc:4b:0e:6e:c4:65:98:41:ef:2c:
ad:9a:35:58:b3:05:74:56:e6:38:90:0a:01:21:dc:
fe:8b:0e:79:2f:86:62:23:67:a8:dd:5b:04:38:37:
e5:fc:16:ce:7b:c4:98:3a:61:f7:7d:2f:2a:fc:7f:
a0:bb:b2:73:54:0c:74:de:81:18:9d:82:7e:87:cf:
06:1f:94:2a:21:c3:8c:b4:5c:c2:f1:c4:9e:02:04:
f7:dc:82:9c:15:25:67:f8:be:18:56:b9:ef:f6:17:
e4:48:0e:03:a4:a1:62:c3:5e:a4:f1:1f:c5:4e:5e:
db:ed:5f:00:37:1a:5f:95:9e:1f:3a:64:f6:3b:84:
6f:01:7e:73:5f:f7:64:f9:7b:ae:0b:8b:21:4e:de:
ab:6b:06:93:23:fd:f4:c7:78:65:01:47:66:72:7c:
61:5b:77:d7:b9:15:f1:7d:ee:01:7a:ce:b6:57:8b:
83:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:13:8B:65:A9:C9:25:C5:1E:14:F4:BC:FE:BD:F7:AD:56:34:15:D7
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/DxOLZanJJcUeFPS8_r33rVY0Fdc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
62:75:d0:d0:39:ae:bf:3a:0c:6c:fc:da:8f:29:a0:1a:63:56:
99:ee:b1:48:38:c0:e1:b8:51:c3:4e:47:c9:71:8c:fd:0f:26:
a7:ab:0a:ea:c6:ab:46:54:9b:56:d7:14:d5:87:6b:61:99:d1:
b5:19:e4:f8:f9:07:c6:f7:75:5c:de:a2:19:b0:42:83:dc:64:
de:fa:a5:ac:a4:61:f8:d4:88:4a:fa:3b:b0:0b:93:b5:37:81:
59:f8:37:44:61:b2:d8:2c:40:63:aa:7e:df:0b:d0:7a:1b:ae:
0d:78:4a:22:74:d5:33:56:b7:d7:e2:c3:e5:a4:74:5a:c5:72:
e6:61:d8:16:76:b3:33:08:2f:5e:cb:f8:99:d0:d8:b5:77:43:
a5:08:29:43:e6:eb:93:93:d9:30:6d:00:25:1f:c1:f9:2c:67:
2a:01:b5:14:04:8f:32:e2:dc:d3:24:2b:17:bb:02:aa:cd:ad:
19:db:97:9f:c7:db:29:66:ac:5a:65:95:af:f0:a6:e4:fb:b3:
24:96:f8:70:ef:e9:03:83:fc:fd:b2:05:08:3a:86:e5:20:e6:
19:7b:f7:c7:d4:9c:ad:e8:fc:ce:ec:bf:15:bf:db:69:fe:b4:
1d:5f:64:9b:b1:fa:45:0e:87:51:05:ec:8c:08:a1:57:6f:bb:
58:36:4f:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 01:15:06 2025 by rpki-client