Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/daqMXEU-J-iKgIz_xEtg3znvx1Q.roa
File: daqMXEU-J-iKgIz_xEtg3znvx1Q.roa (raw, json)
Hash identifier: HHAowEa1u8OPCBr9UurJ+A+0ck2kGnI9BaCkMKbblYo=
Subject key identifier: 75:AA:8C:5C:45:3E:27:E8:8A:80:8C:FF:C4:4B:60:DF:39:EF:C7:54
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188446EFDD8951DC059B8C59A0960AC3EC1
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/daqMXEU-J-iKgIz_xEtg3znvx1Q.roa
Signing time: Mon 22 May 2023 17:08:24 +0000
ROA not before: Mon 22 May 2023 17:08:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:44:6e:fd:d8:95:1d:c0:59:b8:c5:9a:09:60:ac:3e:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 22 17:08:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=75aa8c5c453e27e88a808cffc44b60df39efc754
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:76:a4:07:bd:5e:1a:3f:06:c3:0c:89:33:64:
9c:43:65:f5:50:73:66:d9:a7:e6:b2:0f:5a:65:1f:
80:a2:1d:67:12:61:9e:a1:ef:17:d2:6f:6e:ae:73:
98:b9:27:d6:a2:c0:f7:93:43:34:06:a0:28:ba:1a:
22:22:e0:e5:96:9d:69:82:c1:97:d7:2c:d2:1b:d0:
b8:81:d3:c7:20:1e:09:3f:7d:22:ab:5c:76:5a:ff:
5a:8e:89:cb:84:6d:51:78:9e:b7:92:3d:2d:b5:6c:
6f:c0:ee:d2:3f:59:61:f8:5e:96:24:8c:14:c5:91:
ba:77:06:90:9c:df:86:c7:c8:49:e6:59:41:66:c8:
bb:1f:4a:97:17:32:53:b8:b4:67:de:e9:37:7b:c5:
f4:16:73:a5:8b:14:77:55:3e:25:ef:a6:30:13:4e:
46:26:26:17:64:5e:96:ea:d2:08:a0:2f:72:27:f3:
cc:43:4c:aa:34:5a:ea:98:6f:ba:78:40:a2:6e:58:
56:1a:40:46:d5:49:e5:c1:d2:38:1f:1d:fe:69:46:
d8:a6:63:4c:67:65:72:51:54:fd:a0:64:8d:1b:75:
78:fb:9e:3d:5a:6a:97:0a:79:3d:1a:09:f4:1c:38:
4e:70:7e:b1:28:08:e1:5b:82:8d:42:d1:58:bb:3f:
89:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:AA:8C:5C:45:3E:27:E8:8A:80:8C:FF:C4:4B:60:DF:39:EF:C7:54
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/daqMXEU-J-iKgIz_xEtg3znvx1Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
48:e7:43:38:44:f0:c7:09:ad:23:2e:7a:a9:e2:12:0f:d1:e9:
19:43:d4:7f:d1:39:b3:d3:4e:55:e1:62:ee:4a:91:f4:43:c4:
67:c5:71:d8:61:55:1a:4b:2e:8c:76:aa:03:e9:3a:b2:24:a5:
f3:2e:d3:8e:9d:93:40:bd:71:9c:89:dc:b7:a5:3e:f6:6a:87:
9e:f9:12:13:84:40:a0:e5:09:e2:e6:1a:3a:61:07:b2:86:58:
fd:c8:f8:8c:bf:57:bc:72:e5:69:44:b5:60:7c:2c:13:57:4a:
06:d2:01:68:49:6f:96:6e:9a:14:a8:99:42:93:64:fc:50:6e:
61:de:1e:3b:dc:f0:bf:51:29:e1:1a:c3:60:04:a7:4e:ea:49:
12:03:ca:76:62:88:ea:47:fb:c1:0b:cc:96:9a:59:8e:ea:bc:
03:fd:a4:7f:44:3f:8c:1e:32:24:57:5b:ba:8a:a2:2a:a0:a7:
7e:04:26:25:a3:bb:ab:e6:05:8a:bc:28:57:d8:75:71:d8:39:
1d:fd:53:e6:29:a5:d3:01:ba:9e:f6:d7:2e:e9:03:de:a0:4a:
48:db:46:86:5e:b9:66:46:93:f2:6a:e0:82:3b:55:8d:0e:88:
80:16:95:c0:fa:c4:ac:41:44:9b:a0:89:7f:ae:61:37:27:0e:
4b:79:a5:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:38:57 2025 by rpki-client