Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/dbKUxXehFEOcFUrOH8GUd1Eq5ZI.roa
File: dbKUxXehFEOcFUrOH8GUd1Eq5ZI.roa (raw, json)
Hash identifier: vnjmMHcy67xKW/hb6TaP4hVLJZ+bG3bi9oP4MLxT42A=
Subject key identifier: 75:B2:94:C5:77:A1:14:43:9C:15:4A:CE:1F:C1:94:77:51:2A:E5:92
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01881CBE3DE72B8F2FD75298A3878F7BAB5B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/dbKUxXehFEOcFUrOH8GUd1Eq5ZI.roa
Signing time: Mon 15 May 2023 00:10:09 +0000
ROA not before: Mon 15 May 2023 00:10:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:1c:be:3d:e7:2b:8f:2f:d7:52:98:a3:87:8f:7b:ab:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 15 00:10:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=75b294c577a114439c154ace1fc19477512ae592
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:02:81:79:51:a6:ac:31:e0:5c:77:98:fb:60:
d5:c0:1a:9d:46:47:7a:96:a5:c0:3a:74:f5:cb:f0:
44:bc:1a:58:c3:64:6d:a4:13:5e:70:7d:d6:e4:67:
fa:43:65:a0:fb:72:10:db:c3:db:4f:99:e9:5f:64:
1c:9c:92:b0:7b:64:62:70:82:89:73:75:71:54:04:
bc:c5:2c:fd:5a:d1:20:d0:70:6d:58:27:00:ca:ae:
ee:29:83:a0:a4:23:9f:7b:a1:ca:1f:fc:2a:9c:e8:
d3:0d:a3:8b:f0:c0:10:9f:b4:d3:8e:a6:a6:be:2f:
a8:32:05:b3:41:24:be:01:1f:95:63:e7:64:e2:d1:
61:33:98:99:df:24:c9:48:46:4b:37:0c:4d:d7:85:
93:b0:df:2e:67:d1:84:a4:38:ec:8f:05:fd:73:bb:
2e:0c:f3:34:f6:14:0c:61:f4:ca:a5:a7:d0:9f:84:
b6:31:33:13:27:59:78:b6:2b:d6:81:0f:5a:e7:f4:
0d:1a:22:af:a7:c6:57:7c:7a:2b:31:db:7b:76:41:
58:bb:20:e1:b5:97:14:a6:ab:14:07:e7:92:fc:3c:
79:39:41:f9:c8:6e:07:a7:e5:9f:96:3d:12:32:59:
ca:00:88:6b:1a:4c:57:c1:3d:03:ae:69:8c:a4:2e:
08:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:B2:94:C5:77:A1:14:43:9C:15:4A:CE:1F:C1:94:77:51:2A:E5:92
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/dbKUxXehFEOcFUrOH8GUd1Eq5ZI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
66:c9:78:0c:17:f4:a8:bf:ef:a7:e6:94:9d:9f:e0:db:f4:7a:
84:08:ec:16:91:5a:8d:be:f4:81:2e:82:8e:29:90:41:ea:ab:
d9:49:85:ca:ea:49:ea:47:98:f5:92:98:b2:4e:a3:ed:75:bc:
3b:ad:52:ff:75:35:75:f7:8c:3d:52:6d:8d:d3:4f:7a:21:21:
08:89:c3:9e:4f:0e:7c:d1:a8:d8:96:fe:5e:e3:b4:99:da:3a:
1a:2d:91:1f:a5:41:4b:a4:ae:4d:c6:b5:70:4d:7e:4a:f3:85:
b6:44:e2:f8:aa:b9:28:5d:47:cf:ec:b3:05:c5:aa:61:49:90:
67:6b:a0:bd:33:ea:f4:6e:01:32:48:06:e7:ea:b5:85:5e:85:
94:57:49:3b:a0:90:8d:31:27:c2:15:4d:fc:30:6e:60:df:9d:
96:e2:10:3b:ae:dc:c8:f2:10:b4:21:85:8e:c9:50:06:b7:d3:
5b:bf:33:ca:fb:34:b9:a5:d3:b1:e4:1f:23:38:a8:97:82:56:
c4:c0:3b:cc:38:83:4f:72:e5:e9:02:03:b8:c7:8f:29:b4:1d:
c5:85:37:52:35:de:e9:f8:92:d1:3d:61:17:3f:99:85:81:fa:
b2:c4:7f:3d:73:76:86:a0:0a:8b:7f:2b:3a:25:21:6d:5d:b8:
d4:ce:6a:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:14:39 2025 by rpki-client