Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/dVe286SBHjUxG5ZoZMXIthZrrVQ.roa
File: dVe286SBHjUxG5ZoZMXIthZrrVQ.roa (raw, json)
Hash identifier: LnH0njhabGLRvjprHTKqf0eecMu+/2GO9ZuoBqevLB4=
Subject key identifier: 75:57:B6:F3:A4:81:1E:35:31:1B:96:68:64:C5:C8:B6:16:6B:AD:54
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187F845A091B3C9564B55A9374A49C92C6B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/dVe286SBHjUxG5ZoZMXIthZrrVQ.roa
Signing time: Sun 07 May 2023 22:12:05 +0000
ROA not before: Sun 07 May 2023 22:12:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:f8:45:a0:91:b3:c9:56:4b:55:a9:37:4a:49:c9:2c:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 7 22:12:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7557b6f3a4811e35311b966864c5c8b6166bad54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:52:d0:7f:2a:d7:c9:4c:de:29:1f:fa:be:93:
d9:cc:9c:db:7e:10:69:bd:2b:04:54:19:8a:7b:ac:
7c:7e:3a:73:09:a4:13:c5:71:8c:06:d8:a8:7c:12:
d8:91:a4:09:b1:39:d0:58:90:5f:9b:99:61:4b:ae:
f1:ae:f2:8f:9c:d4:94:29:46:30:27:5f:86:d7:7b:
0d:d7:95:69:7b:4f:a5:01:71:c1:07:04:57:c5:ec:
bb:66:f5:c8:d5:26:12:cf:d0:5d:0d:01:48:1d:92:
b0:c0:6b:da:7b:22:8e:3e:0d:f2:cd:f5:1f:6e:bf:
40:3e:03:11:fa:ca:42:2c:48:bc:41:27:3b:b0:98:
a8:e7:45:6b:9a:53:ed:be:68:cb:ee:00:a7:70:ce:
1a:a5:87:ac:b6:5b:2a:70:7f:15:fb:09:37:4e:9e:
f6:2e:cf:84:b1:3b:46:0a:95:5f:a1:1b:4c:c7:60:
e0:f7:5d:15:51:e1:13:cd:15:ff:df:ce:f9:cc:43:
da:23:6d:8f:f5:cc:7a:d7:2c:a1:c7:b4:c5:e6:c8:
fa:a9:23:f8:d5:d1:4f:56:7e:66:7e:01:cf:e0:2e:
d5:9d:4d:f8:da:a0:5f:b5:59:0f:61:94:4b:58:15:
66:dd:c8:35:02:cb:cd:70:b1:e2:78:b5:2a:8c:61:
a2:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:57:B6:F3:A4:81:1E:35:31:1B:96:68:64:C5:C8:B6:16:6B:AD:54
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/dVe286SBHjUxG5ZoZMXIthZrrVQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
38:84:1d:19:85:b3:9a:a3:07:d8:5f:be:1a:7f:87:5a:4e:f0:
36:b0:9e:20:ac:02:d3:13:ef:64:d8:11:07:1e:6c:d2:01:a2:
69:3b:89:e4:23:c2:71:e7:ff:98:1e:62:10:83:d8:07:1a:a5:
82:f6:51:90:4b:96:07:39:60:33:42:c1:21:15:4f:40:d4:60:
6f:ba:f5:ef:f7:40:6c:c4:47:48:0e:2d:71:cb:e3:ca:ce:0e:
52:d2:19:23:00:1b:42:2d:f3:00:6d:be:6b:ba:07:ca:ff:10:
fd:21:ff:fe:b0:94:da:de:98:a9:9c:31:26:c6:43:81:98:99:
29:06:74:bf:f5:d3:ad:f5:16:56:5e:84:09:40:60:9d:9b:6a:
91:59:e7:e6:3b:f2:4f:9d:bf:f1:90:64:db:14:89:b1:18:1b:
4c:9a:85:71:41:e3:5e:22:52:48:80:ba:eb:2c:76:17:e3:49:
12:20:c4:db:b9:70:79:a9:d9:44:45:81:7c:3a:3c:50:ff:71:
85:ca:36:e5:a9:8b:e1:d9:74:ab:9c:bc:3a:b6:63:f3:93:0f:
81:21:74:35:99:03:6a:f1:46:48:60:84:f0:57:08:84:a2:4a:
09:85:6f:7f:f7:08:a9:99:10:ad:20:36:80:5a:1b:a8:1d:47:
20:d8:2d:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 17:59:09 2025 by rpki-client