Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Dxc-1Gir60BljI_Ke9gLwOpt5b8.roa
File: Dxc-1Gir60BljI_Ke9gLwOpt5b8.roa (raw, json)
Hash identifier: t7dNWyqlGo9/SYcWlNWd6pVhAGSC1Ina150bow9iYtI=
Subject key identifier: 0F:17:3E:D4:68:AB:EB:40:65:8C:8F:CA:7B:D8:0B:C0:EA:6D:E5:BF
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185488B8713EC0001E1260C676354AE2CF7
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Dxc-1Gir60BljI_Ke9gLwOpt5b8.roa
Signing time: Sun 25 Dec 2022 09:09:41 +0000
ROA not before: Sun 25 Dec 2022 09:09:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:48:8b:87:13:ec:00:01:e1:26:0c:67:63:54:ae:2c:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 25 09:09:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0f173ed468abeb40658c8fca7bd80bc0ea6de5bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:fe:9f:67:35:62:f5:00:90:9d:ce:85:b0:a1:
34:e2:3e:45:93:b5:c5:43:ab:9d:14:78:24:77:69:
08:75:23:bd:6c:60:b5:07:52:cd:c8:80:a6:c5:23:
e8:de:e8:df:1c:38:79:47:63:10:c8:e9:50:5a:ff:
49:8c:18:9c:c3:c8:f6:cc:e0:98:cc:cf:2f:06:d7:
80:e1:4f:26:f9:94:3a:5a:90:b6:6b:2a:63:e9:2f:
ee:6f:28:c8:f0:fa:37:f3:b7:ee:76:7b:9b:e3:33:
e6:a8:aa:b7:c6:bb:de:6f:85:bb:2d:20:db:fc:05:
2e:19:59:bd:80:ab:1b:44:cc:d9:1c:56:68:de:be:
08:fd:d6:d9:fe:aa:85:08:2e:14:fa:8c:2b:28:86:
f1:58:82:48:8a:84:9d:1d:af:9b:37:dd:50:72:30:
3e:f7:d1:47:a3:53:8d:b6:c4:fc:cd:c9:13:25:d8:
8c:5a:42:96:1e:8c:3d:0d:32:a3:56:0f:7c:67:c6:
ca:96:d8:86:7a:4d:a1:78:dd:af:4d:46:15:eb:71:
ec:2f:e4:98:31:d7:28:68:e7:d5:c7:7e:d5:b9:9b:
93:f7:95:c3:8f:e0:d1:b2:03:bb:5f:34:12:39:2f:
66:b0:2e:1f:04:71:a5:04:a8:9d:b7:2c:b0:e4:bc:
97:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:17:3E:D4:68:AB:EB:40:65:8C:8F:CA:7B:D8:0B:C0:EA:6D:E5:BF
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Dxc-1Gir60BljI_Ke9gLwOpt5b8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
02:25:28:1d:bf:46:95:18:34:bb:4c:c1:91:80:ae:13:1f:5b:
c6:54:93:33:78:2f:e6:f8:9c:f0:57:6a:1c:5e:88:ee:f7:9d:
e3:e0:a4:80:cf:15:a5:69:38:7f:eb:2e:14:bc:17:ee:e6:c3:
e8:48:cd:41:b7:61:4e:05:b6:83:7a:04:a5:cb:3b:d7:aa:4c:
bf:3f:d4:38:da:54:b2:f4:3f:81:a0:23:28:4d:3b:b9:21:f9:
ed:7b:9d:d8:9a:8a:bc:43:ad:93:1a:a3:c2:11:cc:b5:22:6e:
bd:fe:ac:98:a8:d6:97:d9:b3:db:8d:c0:70:50:c4:f4:01:75:
a6:a1:3b:76:c5:3e:5c:6c:67:d1:cb:a8:c9:f2:09:fd:b6:86:
cd:be:ed:a3:b9:59:1e:7d:2f:2f:a9:fa:52:4d:e3:5c:dc:54:
a8:88:fc:b9:5f:03:88:fc:66:8a:25:d2:d6:5d:fb:2c:29:26:
6f:0e:96:03:95:27:9f:76:be:0a:cd:dc:ae:4f:96:cf:2a:51:
f1:a8:b3:fb:4b:2c:90:96:3d:11:58:13:c9:43:0a:e3:c1:68:
8c:60:cf:73:7b:a9:88:b1:81:08:a9:57:7a:41:98:d4:8c:2e:
fe:db:6a:21:da:a8:7d:b7:92:84:82:0c:93:97:6e:6c:c1:b2:
84:c0:09:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 15:39:27 2025 by rpki-client