Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/dEVzBkrMbXJaHDReFQv3Io5AEVM.roa
File: dEVzBkrMbXJaHDReFQv3Io5AEVM.roa (raw, json)
Hash identifier: KhzbmVx0FTinFBB+y9138Hcg8LaNSgX0D0R+o5qiJLA=
Subject key identifier: 74:45:73:06:4A:CC:6D:72:5A:1C:34:5E:15:0B:F7:22:8E:40:11:53
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01868506B649C025CBF2EB8296538A787593
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/dEVzBkrMbXJaHDReFQv3Io5AEVM.roa
Signing time: Fri 24 Feb 2023 20:04:14 +0000
ROA not before: Fri 24 Feb 2023 20:04:14 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:8506:b0e1/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:85:06:b6:49:c0:25:cb:f2:eb:82:96:53:8a:78:75:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 24 20:04:14 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=744573064acc6d725a1c345e150bf7228e401153
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:5f:c9:1d:02:73:a5:ed:16:63:20:9c:39:cb:
d8:bb:e1:7c:66:d4:34:f8:f6:f5:0b:11:07:b0:21:
e1:95:74:b5:dc:08:78:e3:05:c4:ac:ac:5d:ec:d3:
7a:de:57:07:12:62:cc:d8:2e:aa:19:84:b6:a3:75:
af:6a:fa:51:a6:ff:6b:b2:d3:d5:7c:96:98:4b:f4:
b6:43:1c:4d:77:fe:33:97:99:98:04:c0:21:6d:e2:
a6:10:67:87:f7:c4:4a:f7:0f:b3:6f:81:b0:1b:c5:
23:f4:5c:76:ce:3a:2c:bd:e3:74:8d:78:70:f5:ff:
38:94:6e:b5:d3:63:82:16:38:7d:87:42:cc:71:e6:
5a:20:95:75:50:b3:8f:da:d6:14:ff:11:09:60:c8:
9a:c3:fa:3c:04:af:37:c3:51:7b:7b:5f:df:3e:9c:
9b:33:23:35:7e:9c:21:2a:32:cc:77:59:36:ea:4b:
49:2c:ee:32:f2:04:f2:65:36:bd:e3:24:51:38:e1:
ca:25:fa:a1:17:8b:16:c0:21:4c:06:81:31:88:7e:
2f:40:9e:8f:08:0d:a0:85:61:e5:34:8a:f9:80:4d:
5a:bf:93:75:00:bd:4f:22:c9:3f:03:20:0a:e2:86:
ce:5c:26:0e:d7:c7:35:72:a6:81:46:8f:3d:b8:d7:
55:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:45:73:06:4A:CC:6D:72:5A:1C:34:5E:15:0B:F7:22:8E:40:11:53
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/dEVzBkrMbXJaHDReFQv3Io5AEVM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
aa:8b:03:dd:ef:b9:90:cc:2b:e4:82:a4:0b:64:11:31:00:4d:
fe:48:2a:33:2e:54:79:99:8e:29:8c:d3:ba:c9:a0:da:e0:00:
af:4e:36:21:ab:c3:fd:37:73:93:e9:fc:6e:86:1a:f9:f1:7d:
87:85:9f:56:44:81:b0:80:51:7c:91:61:03:41:5a:a7:7e:5d:
b6:d4:a3:d5:c8:e0:17:8d:e3:7c:14:8b:e0:46:a8:d5:0b:cb:
94:b0:92:5c:28:7a:d1:e4:17:d1:ab:15:ee:38:e4:d6:1e:65:
b4:c6:d1:c2:43:f4:8d:23:fc:bd:d8:59:5d:5f:1c:26:5c:5a:
1c:c6:70:fe:77:8e:a1:74:e9:5f:ce:26:73:17:98:6a:60:29:
20:c9:d0:c1:57:bb:6b:2f:60:46:70:18:92:2f:2a:4b:4c:7e:
9f:d1:96:5f:1c:1e:d1:12:ae:8b:61:c4:2d:66:d9:71:7d:ab:
49:f4:55:5e:08:e4:82:de:b8:0f:42:cc:c1:6d:ec:05:17:2d:
3f:2e:49:c0:94:b8:74:b0:e6:32:b3:c7:64:bb:4a:4c:58:8b:
69:ca:07:4e:41:a7:68:00:92:23:70:a3:cc:0d:b2:9d:a3:fa:
e5:4f:1a:59:9e:70:b6:34:96:cc:5e:9e:ba:76:9f:33:25:6e:
3d:a1:ee:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:27:40 2025 by rpki-client