Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/dNbOboVTw-jMVEVBGXvFIIyTGss.roa
File: dNbOboVTw-jMVEVBGXvFIIyTGss.roa (raw, json)
Hash identifier: QnVHIWEDUZWbZKJ/5Cx79luZenZj/QkiK6Cqx/SzbbM=
Subject key identifier: 74:D6:CE:6E:85:53:C3:E8:CC:54:45:41:19:7B:C5:20:8C:93:1A:CB
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189BE138828ED6B02851A72213647A0D40E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/dNbOboVTw-jMVEVBGXvFIIyTGss.roa
Signing time: Fri 04 Aug 2023 01:04:58 +0000
ROA not before: Fri 04 Aug 2023 01:04:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:be12:db79/128 maxlen: 128
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:be:13:88:28:ed:6b:02:85:1a:72:21:36:47:a0:d4:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 4 01:04:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=74d6ce6e8553c3e8cc544541197bc5208c931acb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:5f:01:d4:6c:46:e1:ba:c1:51:c9:cb:08:c9:
8a:98:39:1d:ca:96:66:87:5d:9a:bc:6a:ca:71:2f:
d8:83:a8:a7:4b:71:84:dd:81:d4:7a:8a:c1:e9:4a:
73:70:38:61:28:b3:82:96:ac:df:ed:35:63:92:66:
e4:3b:e6:ea:24:fb:15:25:65:69:0d:a7:38:4b:8b:
88:42:4d:d4:dd:00:fc:26:e5:2e:53:0c:22:b4:55:
2f:d1:f8:72:99:78:5a:be:5a:0c:aa:81:39:4a:98:
98:a4:a2:3c:f5:31:56:01:bc:d3:9b:91:6f:db:93:
e9:d8:0f:f3:96:92:5b:8b:3d:26:82:8c:56:0a:20:
e4:b8:1c:7d:7c:59:7e:7b:69:b4:b5:48:12:22:6b:
0c:39:ca:2f:d7:b6:25:b5:3b:47:51:f0:71:fd:dc:
2a:7e:bd:70:2c:44:9a:5c:fa:3c:cf:cb:c9:d6:1c:
c7:47:1e:45:8e:27:45:6c:d3:c7:aa:62:55:16:47:
66:a1:b2:bb:e5:ea:5c:49:f9:82:a6:a1:a9:92:d7:
97:ff:72:3c:07:cc:f6:a1:24:11:66:d9:4e:35:65:
0e:7b:32:8e:57:1d:c4:3f:de:5a:0a:ec:db:c3:1d:
48:12:2d:ab:ca:e1:d3:c2:ba:13:3a:1f:a4:95:49:
62:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:D6:CE:6E:85:53:C3:E8:CC:54:45:41:19:7B:C5:20:8C:93:1A:CB
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/dNbOboVTw-jMVEVBGXvFIIyTGss.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7c:69:25:3a:79:b4:f1:eb:0b:7b:62:43:af:c0:9e:0f:57:77:
b6:bb:aa:45:85:7f:17:18:63:bd:a2:07:b4:7d:9e:9d:8d:83:
2d:0f:9d:cb:71:23:4c:a3:ec:a6:8f:8a:8d:d8:04:a8:ad:8b:
05:6a:d4:9c:db:c8:bf:5d:42:30:32:a5:8b:bb:e6:b6:4b:f1:
a1:1a:18:7d:b0:5d:ae:65:79:c6:3d:06:eb:c3:6b:bb:fc:c9:
46:85:d4:73:42:3a:96:25:1f:66:cd:ba:2f:52:89:34:6c:f5:
98:98:26:a7:89:39:bd:f1:40:4d:ac:94:6f:14:a5:cd:55:a8:
e1:94:75:79:3b:ac:0c:b9:60:55:77:3c:19:25:15:8f:79:c4:
b9:33:81:2b:f4:9d:aa:29:f0:40:f8:50:ff:de:ac:6d:9f:96:
73:66:8a:6c:95:d6:86:af:9f:fa:c1:71:39:82:7b:5e:e1:e3:
a0:f7:7c:2b:e1:17:74:4f:e2:61:d4:0f:fe:bd:1a:90:ac:73:
40:18:68:78:4f:d6:24:98:6c:b3:5f:11:9a:09:1f:76:f8:4a:
9f:d4:9e:e5:1f:45:a9:e4:98:52:65:cf:60:ce:6c:9b:c2:c1:
9a:96:91:a6:34:0d:dc:a4:ec:8d:94:e3:ee:ed:29:81:7d:1b:
00:79:b5:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 00:43:23 2025 by rpki-client