Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/dcBa_Pn_oOc1k5xhrk04B94D3wc.roa
File: dcBa_Pn_oOc1k5xhrk04B94D3wc.roa (raw, json)
Hash identifier: jsHN4jgYNOG4hRSKUPK9T1hSvBWby7XBoJpGAUcYW3s=
Subject key identifier: 75:C0:5A:FC:F9:FF:A0:E7:35:93:9C:61:AE:4D:38:07:DE:03:DF:07
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A0964066538DAFDC436764735C6DA550B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/dcBa_Pn_oOc1k5xhrk04B94D3wc.roa
Signing time: Fri 18 Aug 2023 16:04:24 +0000
ROA not before: Fri 18 Aug 2023 16:04:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18a:964:d1/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:09:64:06:65:38:da:fd:c4:36:76:47:35:c6:da:55:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 18 16:04:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=75c05afcf9ffa0e735939c61ae4d3807de03df07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:4f:fd:9c:55:26:ca:23:06:01:a0:aa:8e:38:
c6:4a:95:7f:d7:f0:4b:74:f5:16:3d:6b:82:41:a7:
fb:89:7e:82:4f:40:3a:8a:ab:c7:d4:df:fa:47:e9:
76:e4:92:f5:21:b7:f9:ed:02:59:91:26:53:a5:20:
af:71:11:dc:2a:69:f8:cc:8d:29:9d:bb:0c:dd:43:
0f:c3:99:8a:3c:e2:92:dd:cb:9d:61:69:0f:c0:99:
8a:65:21:22:18:99:3a:0d:74:32:5e:41:43:16:0b:
c9:ed:66:fa:48:b2:bb:46:9b:44:29:1c:7d:44:66:
d1:6c:b9:c9:5c:04:d7:ca:bb:ed:41:89:76:87:99:
b5:6d:3f:47:f6:7a:27:c7:7b:40:8c:c4:a9:a2:11:
60:57:a6:5d:26:fc:0d:a3:59:b5:6d:3f:94:5e:5c:
60:ea:4b:af:7c:24:ec:06:c6:5c:a9:b3:2a:6d:33:
a4:14:10:49:db:5d:dd:a2:e6:12:6e:91:a0:d2:1a:
b5:a3:c3:10:4d:c8:2a:7a:a0:a3:3a:ab:b3:f8:fe:
1d:fa:be:21:82:73:e2:c0:e7:0f:50:b2:90:8d:c0:
5c:8c:c9:9c:45:84:7f:db:c7:38:cb:92:4f:b0:90:
29:56:27:4b:a1:05:b3:ae:5d:9a:18:ab:0d:e2:78:
de:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:C0:5A:FC:F9:FF:A0:E7:35:93:9C:61:AE:4D:38:07:DE:03:DF:07
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/dcBa_Pn_oOc1k5xhrk04B94D3wc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
41:69:41:75:c6:b1:8f:02:81:b5:75:99:26:d6:c5:fd:7a:ff:
8b:19:38:37:cb:13:29:64:67:d1:c4:30:d5:2b:9b:b0:cc:ab:
2a:e3:db:26:4d:38:58:76:6b:82:e0:4c:5b:56:f1:1c:06:20:
ca:22:73:46:cf:e8:33:6e:c7:51:5e:d9:46:de:e7:a1:df:bd:
db:4c:dc:78:99:f0:c5:5a:3b:f8:0a:33:03:c6:75:5a:75:df:
3f:0d:eb:8b:5e:0c:b2:b5:d0:4d:06:a2:76:7a:66:42:a3:b3:
d3:e0:65:85:b4:c2:e9:39:74:52:b9:73:99:ad:19:e7:cf:4a:
5e:24:7c:f9:7f:10:8f:ab:f7:3b:52:0e:2e:bb:65:cc:5a:40:
63:15:fe:e0:b0:c4:02:c7:81:fd:aa:a6:ae:1d:3a:1d:bb:a7:
dc:99:48:58:14:5c:dd:22:88:c4:13:4a:23:f4:bc:95:ed:3e:
2d:f7:75:1e:f3:c3:8e:07:97:1a:c6:9b:bc:46:5a:b1:00:3b:
1c:78:91:46:6b:e2:b9:fe:d7:81:b3:0c:c9:4d:78:e2:bf:43:
b5:f4:b2:b6:80:42:f2:d2:e6:e9:2c:b3:b4:d7:6b:cc:ea:bb:
7a:fd:b9:91:79:4f:08:1a:20:cf:1c:45:c4:73:32:ca:f2:1f:
d5:98:b6:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:26:43 2025 by rpki-client