Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/dAWHRRtHMmnBBVn0nRoQuXje7AM.roa
File: dAWHRRtHMmnBBVn0nRoQuXje7AM.roa (raw, json)
Hash identifier: Zjx/mbUp7M2WPtKWKSXXNzbWGS2v6TY8C7SWNQ0J0U0=
Subject key identifier: 74:05:87:45:1B:47:32:69:C1:05:59:F4:9D:1A:10:B9:78:DE:EC:03
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01870CDAED1A85AF74436140707B5DA79487
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/dAWHRRtHMmnBBVn0nRoQuXje7AM.roa
Signing time: Thu 23 Mar 2023 05:04:46 +0000
ROA not before: Thu 23 Mar 2023 05:04:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:187:cda:9bd4/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:0c:da:ed:1a:85:af:74:43:61:40:70:7b:5d:a7:94:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 23 05:04:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=740587451b473269c10559f49d1a10b978deec03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:bd:eb:94:ce:35:45:0f:18:b5:8b:b5:21:d3:
0d:16:7d:26:ec:da:3b:16:d3:b9:59:dc:2a:23:d5:
77:71:1a:3d:c3:8b:1a:41:50:82:d8:66:6a:1d:71:
44:ef:de:ff:28:48:ce:0f:ab:59:4c:a9:68:67:a9:
87:1d:74:82:06:7d:2e:1a:2e:b0:4b:76:a9:e6:64:
38:72:bc:3e:09:4e:ff:92:0c:21:c3:a7:3b:3d:15:
a6:a6:d5:9f:ec:4b:c4:dd:20:4f:6a:1c:44:22:c1:
a5:fa:be:31:88:47:d5:21:67:9b:b7:44:e1:ab:a4:
39:8e:81:ad:fa:03:5f:b5:71:03:a6:98:12:da:ee:
ec:2f:5d:1f:87:87:2d:3b:47:1a:8c:85:2d:7f:43:
59:79:97:11:55:76:cb:ed:a1:4c:74:67:f3:19:c7:
08:cc:f4:58:12:a7:83:95:90:cf:9f:a1:5a:43:fe:
44:81:3e:da:48:ab:e1:46:35:18:60:7a:49:cf:93:
e1:83:2c:e0:f4:d9:bd:59:26:2d:0d:32:7c:f5:58:
1a:6d:73:42:c9:18:d7:f0:a9:13:aa:7a:ff:bb:aa:
42:2d:07:ec:8e:67:dd:67:38:f1:84:cb:07:91:51:
7a:3f:fb:44:bb:b1:2c:b5:b4:df:b0:65:e0:25:72:
d0:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:05:87:45:1B:47:32:69:C1:05:59:F4:9D:1A:10:B9:78:DE:EC:03
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/dAWHRRtHMmnBBVn0nRoQuXje7AM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a2:cc:33:3a:40:f8:18:99:87:e4:fc:7d:ef:08:53:c6:ae:1f:
c1:5e:7d:cb:7b:55:6c:22:c4:21:63:58:16:a6:e7:42:27:e3:
b4:d0:91:79:8b:da:d5:99:0e:89:28:a1:bd:b8:5d:4c:e3:9f:
98:65:8a:e4:50:9a:76:3f:66:5a:3e:04:82:4f:77:f8:ce:07:
27:21:f9:c0:50:e0:6b:dc:b9:38:63:fa:9d:2a:20:5e:4e:56:
a8:c2:ab:e8:43:97:05:0d:4c:7d:ed:ce:ba:ba:c4:4c:93:4b:
ca:4b:a0:46:bc:fc:0b:c5:5f:ae:fb:db:3c:08:93:35:39:f7:
fa:28:d5:22:c2:e9:95:9a:b5:30:0b:e4:f1:b2:cf:2a:ad:46:
24:a0:c7:fa:b3:2a:ea:c6:9c:2e:c9:5e:c6:30:da:24:c0:50:
00:e5:fd:89:95:c0:68:74:d0:9f:69:21:b6:d9:63:76:dd:a9:
23:c0:d7:98:cd:20:a4:27:30:45:a7:11:bb:cc:a1:76:5d:02:
77:21:3f:7f:97:ec:6c:d2:18:da:8f:f6:0d:e5:ab:24:55:b9:
18:bc:a7:b0:30:8b:74:ad:6c:44:14:28:c9:d3:db:58:f1:e3:
4a:ba:df:75:45:98:5a:c6:21:39:b1:5b:b6:2b:60:dc:7b:77:
11:b2:43:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:35:44 2025 by rpki-client