Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/dUkDHPgYzGrMhtjCjT5WqiPQHPM.roa
File: dUkDHPgYzGrMhtjCjT5WqiPQHPM.roa (raw, json)
Hash identifier: vPKzxKqVS7XD7TexXzGcGzEfd3RERjZMokO3Konv2FE=
Subject key identifier: 75:49:03:1C:F8:18:CC:6A:CC:86:D8:C2:8D:3E:56:AA:23:D0:1C:F3
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186892566F38B30E8CEA5A2B550796DF873
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/dUkDHPgYzGrMhtjCjT5WqiPQHPM.roa
Signing time: Sat 25 Feb 2023 15:16:15 +0000
ROA not before: Sat 25 Feb 2023 15:16:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:89:25:66:f3:8b:30:e8:ce:a5:a2:b5:50:79:6d:f8:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 25 15:16:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7549031cf818cc6acc86d8c28d3e56aa23d01cf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a8:54:7c:5b:1a:b6:2e:3a:07:83:65:27:6e:
b5:80:2c:0b:05:85:91:7b:8a:ce:13:b6:e2:2a:59:
73:1b:92:2f:49:1b:9c:95:31:dd:c3:4c:ab:ab:b9:
69:bb:61:3d:90:8f:b3:07:06:f0:4e:e2:20:0b:13:
3d:fd:0f:55:52:22:bf:f7:25:c6:fd:e4:cd:7a:cd:
a5:61:3e:5f:e9:85:15:c1:14:35:ed:d0:0c:db:da:
bb:6a:9f:24:50:29:a6:fe:c9:cd:e9:ef:d6:e8:25:
c1:79:a7:ba:6e:25:b2:c4:7f:46:25:60:4f:2c:41:
f4:c9:93:c4:64:6a:f8:ab:ed:e2:02:ae:d2:c6:0c:
7e:bb:e8:e6:d7:27:d6:78:e3:e3:d2:ea:eb:9e:fb:
9b:89:f3:23:6a:0b:bc:6f:37:8f:ae:a0:e7:ac:2f:
2e:d1:ba:f4:1b:36:b1:fc:58:65:be:9e:6f:df:b3:
37:e7:c9:47:d4:b7:ea:c5:75:73:bf:b7:c3:7b:b5:
9c:fb:f7:f9:ae:ec:ab:43:55:f4:4d:1b:e5:06:40:
9f:63:ad:b6:a5:4b:b5:c9:b7:35:c6:df:ae:1f:16:
6f:e8:a7:a4:38:b7:61:f0:fb:88:6e:7d:f2:66:35:
87:54:79:55:fc:69:9a:e0:27:6d:c8:d6:e8:d2:b5:
0b:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:49:03:1C:F8:18:CC:6A:CC:86:D8:C2:8D:3E:56:AA:23:D0:1C:F3
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/dUkDHPgYzGrMhtjCjT5WqiPQHPM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3e:31:6c:54:34:05:c4:70:97:14:e7:f0:fe:05:4f:25:14:51:
08:e4:00:a2:78:a1:f5:70:85:12:56:f6:a8:e9:3e:9d:cc:a8:
73:dd:cf:5c:8c:26:db:92:ff:25:53:11:86:fa:65:32:32:f9:
10:fc:b8:63:20:42:52:64:fa:e2:80:39:a3:60:69:cb:3d:9d:
86:4d:e9:0e:aa:6a:f5:a7:87:3d:7c:2f:bd:e2:b2:1d:46:32:
5f:d5:c3:61:f1:7c:0a:fa:11:db:89:eb:8f:27:bc:08:3e:e7:
92:dd:cb:32:2d:9f:38:cc:b1:ee:0f:fe:90:35:44:d6:30:58:
38:0b:67:c6:7b:ec:c1:6d:82:96:2f:a8:78:81:85:e9:bd:48:
be:7f:8b:f3:1d:b5:6c:f4:9d:69:21:d8:88:ff:4b:da:28:06:
2e:4b:c4:f6:d7:4b:3c:c3:67:af:f1:07:3a:68:09:59:8c:46:
f3:8c:44:dd:ff:ba:28:52:1d:9e:26:9a:16:dd:ac:a4:67:ea:
ad:df:67:7e:21:62:83:87:ab:52:c8:83:56:f5:cc:a1:8f:8c:
e6:8b:ca:a1:7e:bf:fd:8b:e5:a3:78:37:5d:ce:8b:3d:c7:65:
13:f7:ec:5c:f0:e4:7d:13:d6:ad:06:d6:a0:de:a6:fc:ca:fd:
bc:6b:52:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 08:28:11 2025 by rpki-client