Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/dRT-sitCyLK1AJarboctHstux4A.roa
File: dRT-sitCyLK1AJarboctHstux4A.roa (raw, json)
Hash identifier: I1FPzVQCluatFA+WDOS8lyct1MerGHMnJ8tIMyfsfZE=
Subject key identifier: 75:14:FE:B2:2B:42:C8:B2:B5:00:96:AB:6E:87:2D:1E:CB:6E:C7:80
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189B7E2C09EB24A150258F0B0E5BA3A8E0B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/dRT-sitCyLK1AJarboctHstux4A.roa
Signing time: Wed 02 Aug 2023 20:13:58 +0000
ROA not before: Wed 02 Aug 2023 20:13:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:b7:e2:c0:9e:b2:4a:15:02:58:f0:b0:e5:ba:3a:8e:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 2 20:13:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7514feb22b42c8b2b50096ab6e872d1ecb6ec780
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:06:63:7d:e4:80:19:42:a8:af:17:9f:0b:5c:
b4:73:9f:0c:04:c7:cb:69:36:40:69:a4:88:3f:c7:
79:70:f9:6d:42:bd:92:25:f6:e0:9e:ec:53:de:08:
ef:ec:d9:bc:64:1b:31:03:6d:58:77:fa:b7:be:c9:
a9:24:5d:17:ba:3e:b6:66:7d:bc:85:3a:30:3c:8a:
39:51:1a:3d:01:87:fa:d9:ad:2b:ac:19:de:07:bf:
3d:33:b0:25:66:3f:3a:92:1b:63:2b:a1:a7:34:f7:
ac:69:36:00:33:8a:1e:b5:62:c5:e3:a5:73:9f:1f:
87:39:e1:3f:97:67:d1:fb:65:27:05:5f:b1:de:1c:
6e:c3:fe:22:bf:05:0f:3a:90:55:fb:d8:94:d6:d2:
71:bd:24:7e:cb:9b:89:93:70:4d:7e:bc:7a:15:f0:
e4:61:7e:6e:f4:d6:1b:05:44:87:5e:bd:14:ee:91:
7e:d9:44:45:78:94:ae:77:8c:3b:ec:62:71:39:04:
31:fc:c9:95:72:d8:af:c1:ac:6d:0e:50:8a:4c:22:
f9:ba:3d:22:39:89:d8:a7:a1:08:24:10:a2:79:72:
20:ab:29:d7:42:1b:8c:82:aa:6c:2f:df:58:ca:95:
80:1a:b9:a4:2d:13:c7:c8:a7:47:3e:e3:1d:b9:1e:
62:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:14:FE:B2:2B:42:C8:B2:B5:00:96:AB:6E:87:2D:1E:CB:6E:C7:80
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/dRT-sitCyLK1AJarboctHstux4A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
18:8a:98:90:1b:6b:f7:11:a0:91:50:09:86:d0:c5:82:99:43:
90:63:57:74:29:06:38:ca:72:6b:96:ba:55:c2:c6:ef:e3:b1:
2d:e8:a0:34:16:af:7c:52:9d:30:e6:80:fe:9e:53:95:4d:1b:
23:37:a7:7c:95:be:6b:34:ca:23:00:78:6d:12:8c:53:55:c3:
51:50:7a:1e:ec:7a:9e:66:12:61:1f:5d:06:43:50:3c:e5:25:
af:69:86:c8:b1:ae:0c:e7:72:b5:a7:18:f3:03:4d:8a:0e:d0:
87:28:98:cb:69:70:17:9b:14:20:85:a9:99:12:e1:59:bb:15:
f8:e6:51:b8:2d:01:a8:77:9f:6e:dc:66:5a:57:9d:cd:6e:1e:
1a:8c:e8:b9:bd:80:ac:61:36:55:a5:7d:8c:9f:db:13:e6:ac:
a9:0d:82:07:34:51:c7:df:75:20:5a:23:64:41:5d:ea:8d:cd:
b6:dd:da:a4:c3:b8:a0:0c:6e:d7:52:cc:6d:1e:cb:c9:ea:4a:
18:f7:df:17:d5:cb:51:ea:a3:fc:09:bc:dd:df:76:04:4e:7c:
62:ef:76:79:dc:e1:04:e3:15:97:0c:94:40:89:28:82:ab:46:
c6:79:37:5c:f3:9c:33:7a:eb:59:8e:b6:1e:b3:cb:b5:3e:a2:
0e:49:49:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 00:42:04 2025 by rpki-client