Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/dRkFJkIvlIlAAvXg7S7KUpKbWts.roa
File: dRkFJkIvlIlAAvXg7S7KUpKbWts.roa (raw, json)
Hash identifier: gfhPOqEug5Db+q5ptmqvfR7G1rHgBbRqx3Y6WRdG7Bw=
Subject key identifier: 75:19:05:26:42:2F:94:89:40:02:F5:E0:ED:2E:CA:52:92:9B:5A:DB
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01865E6D75B87153831E2027673FDF1AC97B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/dRkFJkIvlIlAAvXg7S7KUpKbWts.roa
Signing time: Fri 17 Feb 2023 08:11:17 +0000
ROA not before: Fri 17 Feb 2023 08:11:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:5e:6d:75:b8:71:53:83:1e:20:27:67:3f:df:1a:c9:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 17 08:11:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=75190526422f94894002f5e0ed2eca52929b5adb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:8b:f1:14:15:fc:ca:9b:f2:71:b7:f4:85:47:
94:40:77:c9:4a:77:70:0f:7c:72:b0:37:ae:f7:6e:
6f:fb:f4:f5:cc:d6:95:c0:c0:50:f4:2e:7f:3d:ce:
5f:40:d4:00:01:fc:ee:20:eb:3b:7e:de:5d:f3:05:
22:f0:f3:9c:69:fa:46:07:81:44:40:d6:35:2f:de:
a8:d4:df:31:af:64:1b:49:e5:ce:ed:bb:6a:bc:ca:
b7:85:77:ff:9e:3a:f7:aa:f5:7b:e1:bd:4e:a7:0d:
b5:99:c6:02:89:6d:29:34:ce:55:7a:be:28:d6:c6:
bf:2c:25:f8:98:1a:90:bd:5b:a1:90:56:ff:db:72:
2d:9e:96:db:19:72:00:84:51:91:66:53:b2:c3:75:
63:93:af:4a:46:42:a5:98:61:64:a7:e2:9b:4e:eb:
7a:b9:7d:37:eb:51:04:bf:43:dc:5d:95:d3:d9:a0:
fe:bb:5d:18:ff:91:98:02:60:d0:73:21:7d:e6:0e:
90:a2:f0:b9:63:57:5f:5c:9b:03:2f:c9:c5:cf:f3:
fb:76:14:72:08:2f:3b:96:32:b0:4d:a7:40:24:2d:
47:8d:6a:b6:f5:80:41:6d:3b:72:e4:7c:2e:43:4b:
dd:be:4f:d0:b7:b4:1c:0b:31:60:35:91:e8:5a:b0:
cb:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:19:05:26:42:2F:94:89:40:02:F5:E0:ED:2E:CA:52:92:9B:5A:DB
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/dRkFJkIvlIlAAvXg7S7KUpKbWts.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
17:0b:1f:b5:ad:76:66:8c:ff:65:bd:94:2e:b5:53:aa:68:3f:
2b:e0:58:77:8e:75:cb:18:61:a7:b1:a7:ed:2a:83:fd:52:02:
2e:1c:b0:aa:13:32:cb:5b:8c:42:0b:cc:77:00:68:3c:66:33:
35:bb:7f:92:f5:a8:79:16:f6:fd:fa:c8:e6:ca:65:94:09:aa:
73:25:d6:87:77:43:26:bb:3a:8d:a3:9d:4e:3e:d0:6b:1a:b1:
3d:04:0d:6b:67:5a:24:8f:ab:fd:86:c2:fc:99:c9:42:43:e3:
63:2e:cd:32:c2:c9:30:17:86:92:89:28:0e:71:e4:3b:00:e3:
d5:cb:e6:2c:69:7f:10:25:dd:e4:de:59:c8:0a:4b:7b:88:2d:
11:c4:e3:75:1f:79:a2:f3:3a:4a:14:3c:98:e8:32:71:e8:3c:
e2:5f:43:07:22:1e:97:49:4c:02:cf:a9:89:5e:e0:cb:40:0f:
20:81:18:58:ff:3e:26:9b:0b:f9:e2:8e:db:60:c8:6f:4d:5a:
05:ab:8b:37:2b:a3:e0:97:14:ed:d7:59:ad:bd:da:6a:92:c8:
1c:fb:bb:18:9f:9a:e3:53:6d:1b:d8:d1:78:af:d1:37:8c:b2:
cb:d5:bc:af:45:52:53:25:5a:61:0a:3d:ff:89:ef:bd:fa:bc:
52:18:97:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:36:12 2025 by rpki-client