Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/dXgowei0V_4A8qAO9jspAS4Ug_I.roa
File: dXgowei0V_4A8qAO9jspAS4Ug_I.roa (raw, json)
Hash identifier: aCF9AGf3Xcy/6Z0nxkzZmeN/sOx7I4ffgnNMjNxu7WU=
Subject key identifier: 75:78:28:C1:E8:B4:57:FE:00:F2:A0:0E:F6:3B:29:01:2E:14:83:F2
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186FC54E42C6C9E6798B97C4F78AB0FAC39
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/dXgowei0V_4A8qAO9jspAS4Ug_I.roa
Signing time: Mon 20 Mar 2023 00:04:27 +0000
ROA not before: Mon 20 Mar 2023 00:04:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:fc54:c795/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:fc:54:e4:2c:6c:9e:67:98:b9:7c:4f:78:ab:0f:ac:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 20 00:04:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=757828c1e8b457fe00f2a00ef63b29012e1483f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:3e:16:51:77:c9:57:0c:f7:2a:a0:e7:3f:ab:
73:9f:d3:c5:5a:0d:0e:0a:0a:46:3a:7f:97:d2:7f:
bc:b7:f6:d9:d8:99:23:9f:61:9b:19:4f:20:46:1c:
54:a6:81:f8:0d:24:37:4a:d4:20:eb:bd:71:9f:48:
28:0a:8b:04:ee:ba:4c:11:ba:70:e0:b4:52:fd:e0:
66:11:a2:3d:8d:2e:42:07:93:75:b8:54:9b:b0:4a:
cd:04:2c:06:ef:44:1f:77:1a:63:13:5a:57:42:2b:
fd:bc:60:25:f6:51:4a:c5:d5:b5:3c:d5:71:24:f2:
cc:81:8f:ca:4f:de:53:58:63:09:cd:13:75:6c:77:
c2:1b:b5:c6:69:59:7a:79:62:fc:ce:46:7c:93:b0:
6b:8f:ad:73:32:cd:03:89:99:d9:73:ee:fa:fc:3f:
63:a3:6f:b0:fc:dc:d7:40:ed:1e:df:c0:35:26:75:
d8:ce:69:85:28:cb:fc:2b:a0:21:5c:d1:56:9d:76:
0a:ad:78:8b:29:c5:72:59:aa:ae:56:7e:7c:f1:af:
97:43:16:1f:44:8f:38:b8:99:61:88:ae:52:4a:8e:
df:1d:8c:da:74:dc:52:3c:98:fd:86:29:93:05:7e:
d3:f4:e7:ba:d8:44:81:bf:88:1d:fa:72:9b:1f:3f:
46:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:78:28:C1:E8:B4:57:FE:00:F2:A0:0E:F6:3B:29:01:2E:14:83:F2
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/dXgowei0V_4A8qAO9jspAS4Ug_I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a4:29:92:80:e6:b4:dd:46:b5:b9:40:b5:f9:4e:aa:58:37:bf:
96:db:53:50:14:d5:3c:7a:82:80:b7:30:56:8e:0c:ec:68:68:
bf:02:62:53:f5:aa:ca:61:84:bf:6e:46:f4:db:71:9a:5b:9c:
d5:c0:25:82:bd:93:42:ab:63:5c:f2:00:a5:a1:62:25:ad:1a:
d0:4c:eb:4c:a0:fa:56:de:eb:44:d6:25:9d:8f:28:a8:11:41:
e7:1a:10:ec:67:3a:aa:02:7b:1a:82:d5:36:ed:33:bc:51:2a:
c0:2f:53:d8:08:b0:ca:35:ab:b3:1f:c5:3e:b0:97:ee:4d:fa:
1d:62:1d:5c:ef:dc:2a:ed:55:3a:47:08:a3:8d:87:95:76:42:
bf:61:42:c1:74:f5:ad:10:6b:74:dc:26:a2:7d:f9:6f:a8:e0:
3c:ab:25:7f:0e:4e:3c:cc:78:46:e5:76:28:de:ee:db:4a:f2:
f5:04:f5:92:bc:1f:ec:7a:53:53:12:fb:a1:63:a6:af:b9:a7:
e5:4e:27:9a:a5:3e:11:5d:da:ec:79:e0:75:5b:b2:66:0f:5f:
96:0d:4e:bc:86:bf:f2:33:ec:fa:2d:9b:82:b1:9a:c6:5c:78:
dd:7f:5a:86:3a:0e:0f:a9:76:0e:1a:3b:5c:fa:6e:00:70:63:
0d:9e:8d:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:39:24 2025 by rpki-client