Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/dTZYeyx9tup8VVvxe8VdZQZCY_o.roa
File: dTZYeyx9tup8VVvxe8VdZQZCY_o.roa (raw, json)
Hash identifier: G1TTGupkbIYpGuL8m3mJ3R2TzHDwO1TTcqGNyQJOEcw=
Subject key identifier: 75:36:58:7B:2C:7D:B6:EA:7C:55:5B:F1:7B:C5:5D:65:06:42:63:FA
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0182775E9422E9F08CBCE4E275C58C769224
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/dTZYeyx9tup8VVvxe8VdZQZCY_o.roa
Signing time: Sun 07 Aug 2022 08:14:23 +0000
ROA not before: Sun 07 Aug 2022 08:14:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:77:5e:94:22:e9:f0:8c:bc:e4:e2:75:c5:8c:76:92:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 7 08:14:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7536587b2c7db6ea7c555bf17bc55d65064263fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e1:53:01:1e:17:b2:c8:d7:7a:62:a7:f0:91:
3f:c4:f4:5f:3b:76:2a:8e:88:99:9d:1f:65:52:48:
bf:e2:6a:f3:b6:e1:39:fd:09:c3:b6:e5:5b:84:7e:
5e:97:b5:8b:33:49:60:12:fc:c2:a3:2f:63:b4:7a:
1a:3f:9e:dd:bb:c6:6e:69:22:4c:7f:81:0f:21:ab:
19:34:75:8b:72:f3:05:8e:76:94:69:22:ac:5d:97:
ee:fd:ac:23:21:a3:fa:70:35:c3:23:0f:38:08:77:
ac:a3:66:37:82:8b:bd:55:fc:86:60:50:33:88:48:
ae:ad:5a:80:5f:3b:8b:0b:fd:8c:eb:3e:fb:cc:50:
c2:6a:36:cc:62:9e:99:a3:5d:c5:b7:c6:08:ba:04:
f6:2f:d5:63:25:2f:b9:d6:5e:11:61:9a:9e:0b:5f:
c4:ab:51:ea:03:f1:9f:14:1f:29:ac:8e:85:cd:d1:
f8:75:86:da:71:35:d6:17:13:ee:ec:af:f9:ef:fe:
8d:d5:c1:cd:16:1f:0f:e1:53:7b:ce:0a:94:d3:06:
8d:26:a2:42:d4:d6:51:5d:f2:60:1f:22:6c:12:3b:
08:51:0e:7b:de:21:f6:fc:a0:f7:94:be:f9:53:e7:
d3:a1:be:67:b6:27:37:e1:d9:59:ad:67:49:b0:3d:
ae:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:36:58:7B:2C:7D:B6:EA:7C:55:5B:F1:7B:C5:5D:65:06:42:63:FA
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/dTZYeyx9tup8VVvxe8VdZQZCY_o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a6:59:32:a8:3e:e0:72:84:a2:f5:45:45:c8:d6:a5:35:56:a5:
6a:da:5f:22:19:f4:9f:5b:99:0e:9d:29:1c:66:4c:c9:bc:1d:
fc:01:ea:ce:de:ad:01:7d:8c:28:fb:f2:ec:8a:bd:7a:ba:ad:
5e:2b:49:3e:26:1a:ea:c4:4d:7e:ff:7e:c7:a1:4b:36:55:29:
02:ba:00:ee:51:5a:05:cc:64:b7:c4:9e:77:e2:11:e9:c9:28:
33:cf:fc:7b:9c:50:2c:f8:cd:24:94:2c:f8:1f:9c:50:34:77:
70:af:ee:08:56:fc:d8:5d:18:8e:74:e7:b0:07:6a:b9:66:93:
ca:b3:e1:13:84:74:bc:e8:f3:6e:07:14:44:65:cc:49:14:1e:
d8:28:e8:bc:7c:d6:f0:be:ad:52:a7:55:f8:88:31:05:28:44:
15:20:17:14:aa:15:e1:b0:13:49:f0:53:ab:a5:a1:cb:b4:3e:
43:2d:e5:c2:db:15:6a:b0:14:ec:a4:21:fd:a6:94:c4:1f:5d:
31:df:b0:5a:19:1c:22:38:bf:12:a8:82:7a:4e:2d:fd:f0:2f:
6a:8a:9b:59:b3:ec:d8:9f:81:eb:13:ce:7b:dc:5a:29:0b:c4:
96:df:d8:ca:48:2d:4b:c7:dc:2a:81:fe:0b:66:df:c7:2c:8d:
bd:4c:42:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:27:40 2025 by rpki-client