Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/dHV0XK4Js52L_9afae9IjaonHRI.roa
File: dHV0XK4Js52L_9afae9IjaonHRI.roa (raw, json)
Hash identifier: ODDNDYZJknBBXV5Eq3MLZhWwKGTHM0i1TbyGoavUrXI=
Subject key identifier: 74:75:74:5C:AE:09:B3:9D:8B:FF:D6:9F:69:EF:48:8D:AA:27:1D:12
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01866A02DD68EEE4D88AE0E34103AE23B346
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/dHV0XK4Js52L_9afae9IjaonHRI.roa
Signing time: Sun 19 Feb 2023 14:10:17 +0000
ROA not before: Sun 19 Feb 2023 14:10:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:6a:02:dd:68:ee:e4:d8:8a:e0:e3:41:03:ae:23:b3:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 19 14:10:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7475745cae09b39d8bffd69f69ef488daa271d12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:83:55:ee:f7:95:00:b9:f3:2f:d7:fa:b3:23:
f8:b7:ae:88:ca:14:ef:c5:21:da:d2:ec:14:37:d6:
96:41:b5:6c:48:5d:65:86:a5:ba:dd:3f:37:22:c3:
8f:50:78:d1:4a:60:18:5c:d3:0e:8d:76:40:ab:3a:
2a:9b:bf:55:e8:cb:1e:90:2a:13:2d:0c:66:e6:e6:
be:54:36:ec:38:7b:9a:26:77:15:c1:b9:ee:c5:fb:
0a:8b:46:b4:1b:12:10:4d:05:2b:23:e7:43:06:1f:
5b:1d:f1:cc:4f:ea:ee:56:ca:6d:12:d3:70:08:fe:
0d:da:47:de:29:c1:f3:54:dc:b1:44:02:06:74:7c:
3e:39:49:4d:a0:09:40:b2:7e:2b:6e:d6:ea:45:1b:
4c:46:38:da:1b:fa:2d:ae:06:0a:58:e6:ca:98:ef:
8c:c7:fa:e8:d3:d8:b3:39:61:b3:c8:87:2a:25:c2:
86:c7:c8:60:af:eb:e1:7e:ca:a2:1e:7e:ca:62:8e:
4d:fb:4b:3e:56:1e:cc:58:4a:62:c0:ff:8b:e8:8a:
7a:6f:a8:c0:99:eb:b0:f8:fb:91:8e:d7:6a:80:5a:
31:a4:37:a8:4c:83:f6:05:50:e9:7e:ac:d0:17:c9:
43:e2:a7:ea:dd:eb:84:3f:30:81:fe:d1:f8:d0:4b:
a5:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:75:74:5C:AE:09:B3:9D:8B:FF:D6:9F:69:EF:48:8D:AA:27:1D:12
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/dHV0XK4Js52L_9afae9IjaonHRI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4a:08:6d:9a:99:02:49:c5:8b:cb:e6:2c:ec:69:93:2c:69:53:
81:98:8d:84:fe:a4:25:28:3f:92:15:2d:7c:b5:c5:fd:ac:40:
e7:9c:dd:31:e0:b7:7d:5f:4f:d4:a1:c9:6b:bd:a3:4e:ca:77:
1e:6c:ea:c6:aa:f0:57:64:85:e5:a4:63:ab:39:20:32:27:d1:
44:00:cb:8f:2f:ae:43:d8:53:e7:11:a7:a0:eb:b8:2a:2c:95:
87:99:c7:60:0f:cc:05:ab:ce:a5:22:97:3e:c1:19:6d:7e:14:
55:37:a1:75:2a:e0:3c:39:46:2e:e3:ec:4c:1b:06:34:08:f6:
fb:06:9a:db:06:c7:54:19:7e:00:ee:e2:1d:c3:5d:ad:3e:7c:
30:8b:b1:81:e4:05:b1:b3:67:fe:6f:12:f2:43:6a:eb:91:1e:
22:58:80:f5:56:e6:b5:d9:a0:7d:d2:9a:f8:84:ae:e8:24:7d:
c0:0d:d4:04:d1:d9:b7:85:37:89:db:44:06:83:94:d0:29:25:
ea:ed:b9:7d:a7:65:a3:ad:c1:ee:a3:6f:3c:c0:a5:ef:ad:d6:
b9:32:e6:cb:01:6a:35:84:b2:fa:cb:4a:51:6d:35:69:68:4c:
75:fc:0b:8f:19:7f:d9:0e:cd:89:62:0b:09:5a:0b:51:2e:7d:
1c:cb:5b:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:28:45 2025 by rpki-client