Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/dfswR-gnTRefRaHOSkB609AUux4.roa
File: dfswR-gnTRefRaHOSkB609AUux4.roa (raw, json)
Hash identifier: Bhm/kueTXrm+lXgk5CtP8t930m1aHXHQyea9C61E18k=
Subject key identifier: 75:FB:30:47:E8:27:4D:17:9F:45:A1:CE:4A:40:7A:D3:D0:14:BB:1E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188958CCC908EB39DE324642D383F62CAAF
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/dfswR-gnTRefRaHOSkB609AUux4.roa
Signing time: Wed 07 Jun 2023 11:10:12 +0000
ROA not before: Wed 07 Jun 2023 11:10:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:95:8c:cc:90:8e:b3:9d:e3:24:64:2d:38:3f:62:ca:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 7 11:10:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=75fb3047e8274d179f45a1ce4a407ad3d014bb1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:8f:e9:c2:ff:5d:17:99:4d:fd:1a:09:8f:0f:
84:12:77:e1:61:a0:90:d4:c6:4f:52:27:aa:ba:7b:
7e:68:d9:64:b5:91:e9:f5:69:c1:1d:88:7d:2a:93:
49:0f:2f:68:c2:a0:6e:2d:3f:b6:6c:6c:9b:7f:54:
55:d8:e8:1b:f6:e9:b2:5b:c5:e8:dd:61:9b:66:58:
dd:e6:de:71:da:1d:89:d0:84:4d:6f:91:5a:bd:b3:
41:6b:fb:c9:3a:c5:ff:df:36:b0:fc:42:8a:60:ae:
b8:b5:c8:36:b7:a2:84:cc:05:e3:36:cb:2f:c2:be:
4b:b8:e8:f7:35:5b:7e:ea:91:38:54:88:e9:5d:58:
f4:ed:2a:e1:86:1d:d8:3a:62:62:76:41:4c:53:22:
c6:5e:61:87:23:1d:be:41:e7:1e:55:71:79:7b:6f:
73:f8:ef:a1:a3:67:73:a9:dc:6e:ee:bc:34:8b:4c:
8a:0c:3b:57:a4:96:45:02:19:b9:8f:1f:af:3b:63:
48:32:ae:6f:68:70:f1:b3:78:ff:22:27:85:2a:bc:
a8:f6:9c:d0:ac:5a:82:bc:5a:ad:60:a3:75:92:29:
e7:61:78:38:25:98:b3:30:77:14:ef:34:b5:87:6e:
2f:4d:01:a1:52:c7:75:20:e7:36:da:dd:ba:74:98:
6a:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:FB:30:47:E8:27:4D:17:9F:45:A1:CE:4A:40:7A:D3:D0:14:BB:1E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/dfswR-gnTRefRaHOSkB609AUux4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
75:a2:bb:2d:c6:11:56:9c:27:1e:84:d4:a6:54:66:62:23:8f:
32:76:4b:65:34:20:c8:78:0c:79:bb:0e:38:47:84:e1:43:74:
da:21:39:4f:a4:55:dc:17:27:56:68:0a:83:e8:7a:fb:bc:c3:
d5:44:52:68:c3:a2:1d:63:f0:77:2c:fe:83:36:45:ff:47:04:
75:96:02:15:87:d0:b6:dd:21:8d:a6:8e:90:04:e1:e3:aa:b1:
df:b5:05:09:2c:07:f4:9d:f4:49:97:2e:b3:5f:85:fd:d9:60:
97:91:a6:6b:5c:0b:72:c7:da:ff:57:5d:11:0d:30:78:87:ef:
7e:3b:9f:1e:c6:28:6d:2d:b0:76:5c:aa:ef:1a:3e:49:30:99:
9f:b5:39:0b:07:62:56:0c:10:0a:d7:04:82:1f:9d:71:7a:5f:
43:39:c3:46:e6:e3:be:69:51:d5:31:fb:1f:cf:5f:4f:82:dc:
1b:76:1d:c7:4b:b8:d0:51:86:74:69:87:d0:12:24:44:a7:55:
b3:fc:09:20:db:57:cf:0d:f8:fb:05:2f:1e:30:10:87:2b:b6:
e2:f4:20:9e:ea:b4:fa:e1:f4:6b:04:95:30:2c:f7:e2:5b:12:
f2:92:d9:25:4b:1a:eb:93:e6:5b:db:67:23:a2:61:95:ec:0e:
06:60:eb:15
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYiVjMyQjrOd4yRkLTg/YsqvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNjA3MTExMDEyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NWZiMzA0N2U4Mjc0ZDE3OWY0NWExY2U0YTQwN2FkM2QwMTRiYjFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt4/pwv9dF5lN/RoJjw+EEnfhYaCQ
1MZPUiequnt+aNlktZHp9WnBHYh9KpNJDy9owqBuLT+2bGybf1RV2Ogb9umyW8Xo
3WGbZljd5t5x2h2J0IRNb5FavbNBa/vJOsX/3zaw/EKKYK64tcg2t6KEzAXjNssv
wr5LuOj3NVt+6pE4VIjpXVj07Srhhh3YOmJidkFMUyLGXmGHIx2+QeceVXF5e29z
+O+ho2dzqdxu7rw0i0yKDDtXpJZFAhm5jx+vO2NIMq5vaHDxs3j/IieFKryo9pzQ
rFqCvFqtYKN1kinnYXg4JZizMHcU7zS1h24vTQGhUsd1IOc22t26dJhquwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFHX7MEfoJ00Xn0WhzkpAetPQFLseMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvZGZzd1ItZ25UUmVmUmFIT1NrQjYwOUFVdXg0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAHWiuy3GEVacJx6E1KZU
ZmIjjzJ2S2U0IMh4DHm7DjhHhOFDdNohOU+kVdwXJ1ZoCoPoevu8w9VEUmjDoh1j
8Hcs/oM2Rf9HBHWWAhWH0LbdIY2mjpAE4eOqsd+1BQksB/Sd9EmXLrNfhf3ZYJeR
pmtcC3LH2v9XXRENMHiH7347nx7GKG0tsHZcqu8aPkkwmZ+1OQsHYlYMEArXBIIf
nXF6X0M5w0bm475pUdUx+x/PX0+C3Bt2HcdLuNBRhnRph9ASJESnVbP8CSDbV88N
+PsFLx4wEIcrtuL0IJ7qtPrh9GsElTAs9+JbEvKS2SVLGuuT5lvbZyOiYZXsDgZg
6xU=
-----END CERTIFICATE-----
Generated at Wed Apr 30 23:12:27 2025 by rpki-client