Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/dbDpch7Xzx9kaQJgLInW6BGofH0.roa
File: dbDpch7Xzx9kaQJgLInW6BGofH0.roa (raw, json)
Hash identifier: zzzgJ0nWFKE3YaIkI9nGqFwdGdDTka/Q1AIhMV8fqaQ=
Subject key identifier: 75:B0:E9:72:1E:D7:CF:1F:64:69:02:60:2C:89:D6:E8:11:A8:7C:7D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189C8A056ACCD0695DB00637E7D8356DB60
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/dbDpch7Xzx9kaQJgLInW6BGofH0.roa
Signing time: Sun 06 Aug 2023 02:14:58 +0000
ROA not before: Sun 06 Aug 2023 02:14:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:c8:a0:56:ac:cd:06:95:db:00:63:7e:7d:83:56:db:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 6 02:14:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=75b0e9721ed7cf1f646902602c89d6e811a87c7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:63:41:ac:41:3d:a5:8e:91:13:fd:17:dc:41:
0f:0f:4a:d7:6e:fc:84:73:d1:01:f6:77:8a:9c:f6:
3e:55:84:ee:95:dd:91:45:95:0b:db:e1:46:30:36:
67:3e:78:f0:72:33:d3:92:2f:84:06:6b:3d:87:85:
bd:86:0f:7f:a2:3c:ec:15:04:75:d3:e9:05:61:21:
64:ac:81:16:83:78:dc:9d:0c:0f:bb:86:5f:75:a0:
56:d5:c9:37:88:72:dd:52:31:57:b7:36:be:f2:8c:
ae:8a:6a:44:83:6a:5f:8e:d2:99:fd:5e:47:e3:82:
cb:6d:c4:4d:9b:04:77:b3:ca:02:91:a4:ed:f8:6a:
ab:df:e4:d8:f8:9c:25:76:ba:c0:ba:95:7a:23:4a:
26:9d:64:33:6f:82:2d:06:3f:94:ab:f1:1a:11:2d:
1e:d1:f5:d2:11:2b:8c:c6:7a:fd:1d:59:49:a3:ab:
c7:12:5b:9d:67:03:34:66:b9:c5:bb:70:9d:9e:2d:
35:15:bf:a5:7a:63:f3:03:28:ab:69:47:f7:32:03:
45:d0:32:bc:e5:07:b1:16:28:ac:27:6f:94:d8:6b:
73:35:09:88:ef:df:1b:45:98:7a:f6:7b:ff:ed:52:
91:b4:55:e5:63:a9:04:54:d9:16:be:7d:5b:e2:9a:
b6:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:B0:E9:72:1E:D7:CF:1F:64:69:02:60:2C:89:D6:E8:11:A8:7C:7D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/dbDpch7Xzx9kaQJgLInW6BGofH0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
82:24:76:7e:63:73:ec:4f:8e:76:2d:29:cb:04:4c:c6:84:01:
03:cb:9b:a5:ac:e9:38:7c:2f:6e:1b:a7:e6:4a:1a:13:57:05:
df:64:7a:5a:79:a8:88:15:0e:7f:b5:93:12:74:57:a9:2c:86:
9e:11:51:0b:7a:5c:db:bd:73:29:da:da:63:be:1a:13:c0:94:
84:58:b5:11:ab:3f:9e:02:69:26:1c:9c:15:50:f9:15:46:2f:
56:7f:75:74:ce:c3:7e:70:20:d3:6a:cc:4a:61:e3:6c:c4:86:
e6:da:bd:6f:1c:c7:81:2e:57:a7:1f:2f:44:c7:6f:6a:42:c6:
61:2e:d7:7e:78:ca:05:f6:f9:69:95:73:0e:20:49:27:ad:3e:
cb:07:4b:98:56:e0:49:ca:00:fb:18:f1:e4:0b:9e:80:55:06:
b9:ef:8e:5d:4a:bd:87:65:d0:0c:80:27:8b:ed:40:28:c2:9e:
fd:b6:d5:ce:9f:15:8d:75:2d:83:2d:6f:9c:90:09:03:7b:00:
84:54:7a:c7:8a:bf:15:83:93:af:e1:75:76:d7:bd:50:32:51:
82:6f:02:a8:06:10:ba:41:60:c7:b0:2a:d6:cb:61:45:e4:fa:
62:0d:77:b8:54:9f:50:da:b2:54:5d:8e:02:98:25:43:de:6a:
7d:38:42:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:18:44 2025 by rpki-client