Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/dRXF9cnsCoiLjScYid8_xELeWH8.roa
File: dRXF9cnsCoiLjScYid8_xELeWH8.roa (raw, json)
Hash identifier: +6og3ZiQDtKhOxCqB6XXIWxZmlzwaCQ9xSitIEESKZU=
Subject key identifier: 75:15:C5:F5:C9:EC:0A:88:8B:8D:27:18:89:DF:3F:C4:42:DE:58:7F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01873C861B65EB5FE6843FE28BC958A9AB42
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/dRXF9cnsCoiLjScYid8_xELeWH8.roa
Signing time: Sat 01 Apr 2023 11:13:54 +0000
ROA not before: Sat 01 Apr 2023 11:13:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:3c:86:1b:65:eb:5f:e6:84:3f:e2:8b:c9:58:a9:ab:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 1 11:13:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7515c5f5c9ec0a888b8d271889df3fc442de587f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:52:23:73:51:5e:2d:fd:7c:8a:be:f4:2c:2b:
c2:a1:97:20:39:74:75:5f:e3:f2:f3:33:d3:82:45:
f3:f8:0e:4e:97:aa:e3:75:42:cc:6c:04:14:25:1b:
a3:1b:ce:68:54:73:95:3b:06:8f:6c:49:59:21:2b:
1d:b5:27:f5:c5:95:a3:e4:7d:4c:3d:d7:7d:b2:ff:
9a:54:c6:18:36:d0:0d:5f:e6:61:cf:2c:0c:56:6b:
9f:ce:4f:0b:76:9a:89:d5:29:6e:5b:99:34:b3:71:
51:fa:ef:eb:d1:88:ac:1f:15:15:22:66:fc:68:f6:
55:db:e4:ac:ae:a9:be:9b:05:5a:9d:57:9b:c0:42:
ba:ad:2e:3a:c9:36:ce:00:21:90:63:d8:b7:c7:84:
ef:ab:db:f3:64:3c:a1:06:81:2f:3f:bf:92:e4:cb:
53:7b:9f:b5:1c:7a:a5:06:bd:56:4c:68:64:30:5b:
89:3a:57:c8:7a:7a:c3:58:f2:5b:ee:ed:10:2d:56:
51:2e:b5:87:ea:ac:c7:bd:ea:12:a5:27:59:35:6b:
2f:79:a0:8a:3c:2c:be:1d:ed:27:60:34:8c:f5:fe:
60:b0:8f:41:dc:4c:33:53:f5:28:fb:98:4c:76:c3:
7c:c7:df:d6:05:14:e1:32:cc:19:31:9c:17:ae:c9:
fc:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:15:C5:F5:C9:EC:0A:88:8B:8D:27:18:89:DF:3F:C4:42:DE:58:7F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/dRXF9cnsCoiLjScYid8_xELeWH8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
14:63:f4:8a:9d:19:ed:fd:f3:73:97:7d:12:ce:bc:52:00:fb:
79:b5:ea:a7:0a:35:87:09:36:48:9b:a2:95:b1:9d:6c:74:a3:
23:0e:8d:a0:62:68:f9:0e:06:f8:ed:c8:94:a0:67:8c:e2:82:
d3:1e:2c:29:fb:ab:31:49:af:b6:21:3a:69:be:4b:13:ef:7d:
3a:e6:ba:bc:b8:8b:5f:19:1e:38:58:e4:df:12:77:4d:3b:74:
3a:a8:96:a6:a0:c9:46:ef:46:99:67:b3:bb:d6:d8:3f:80:43:
c1:b0:4a:9f:2a:dd:aa:55:11:42:ec:6c:e7:e0:be:8d:70:bd:
0d:ca:97:ff:5b:64:73:ce:6d:36:80:cc:ac:19:42:7a:03:99:
e2:e3:bd:6e:76:a5:90:d8:b9:bb:8c:18:5d:4b:4c:02:fc:d3:
37:bc:5d:b3:aa:d4:40:0a:69:4e:92:ba:f4:76:66:e6:97:fb:
21:6f:4e:46:05:95:05:5c:b5:52:b6:5b:dc:94:06:77:23:4e:
de:aa:78:fd:82:f5:77:8f:1b:54:c5:18:74:9c:b9:ed:e3:18:
7b:fe:3d:33:ed:a8:13:88:b1:06:28:5d:c8:bc:51:f2:e8:c3:
c5:50:40:ec:af:c5:4c:1a:3e:eb:2f:78:16:20:c8:bc:a9:bd:
26:2e:10:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:19:37 2025 by rpki-client