Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/dgbkMxVL9YMeuywhTgYZWkWkisI.roa
File: dgbkMxVL9YMeuywhTgYZWkWkisI.roa (raw, json)
Hash identifier: Zhyap2aHNXWhJ8yCMbWs/ussoHUSbyoRVlMiO3kK0cs=
Subject key identifier: 76:06:E4:33:15:4B:F5:83:1E:BB:2C:21:4E:06:19:5A:45:A4:8A:C2
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01895ED7DAF4B0A4DC76814B40C525CFDB0F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/dgbkMxVL9YMeuywhTgYZWkWkisI.roa
Signing time: Sun 16 Jul 2023 13:15:51 +0000
ROA not before: Sun 16 Jul 2023 13:15:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:5e:d7:da:f4:b0:a4:dc:76:81:4b:40:c5:25:cf:db:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 16 13:15:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7606e433154bf5831ebb2c214e06195a45a48ac2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:02:72:93:44:66:79:7a:19:89:1e:8e:a4:1c:
26:72:d2:67:87:28:8e:b6:46:d8:62:f9:1a:88:23:
b3:f4:89:a3:c9:c4:1a:55:3c:11:0f:cf:d2:68:21:
6a:c7:20:2f:5d:b0:44:27:65:da:9d:a5:02:5f:98:
15:bc:86:c4:05:54:a6:c1:c0:af:0e:9b:11:1c:5b:
90:31:14:05:44:24:85:8a:93:a0:8c:a6:85:9e:e0:
02:fd:da:67:30:78:4a:53:b3:8f:3f:97:4a:c6:4e:
cb:29:e6:5d:25:9c:26:40:30:c6:21:80:da:30:2e:
46:1c:46:53:a1:3a:c9:c6:1e:6b:99:92:f2:f2:86:
ec:21:04:ef:08:a6:b5:45:31:e4:cd:33:f2:66:30:
45:7b:3b:fa:60:0d:81:c0:e5:76:3c:df:14:41:d5:
33:31:06:19:95:39:8b:a4:36:e3:6b:92:7a:c8:32:
20:1a:d2:61:65:d7:de:90:b5:cc:01:6b:e7:4c:cf:
7e:d6:9c:c3:b1:c0:47:eb:a1:93:d7:7f:ff:a2:3c:
e9:22:5a:75:a7:a6:a0:a7:3f:05:37:fb:15:10:c8:
af:ff:c3:7d:ff:73:32:45:7f:a6:e1:7e:43:19:14:
1a:82:dd:4f:62:6a:4f:88:78:78:c2:a2:f3:67:4d:
d4:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:06:E4:33:15:4B:F5:83:1E:BB:2C:21:4E:06:19:5A:45:A4:8A:C2
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/dgbkMxVL9YMeuywhTgYZWkWkisI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0a:74:45:a6:2a:d4:83:a2:c2:da:3f:f0:da:01:27:7d:11:f8:
23:15:d7:35:97:ba:7c:23:75:44:ef:32:e2:7a:30:36:f9:88:
c8:81:03:01:cf:92:52:8e:86:4a:6f:f1:79:02:69:21:ef:9c:
03:6a:f5:a1:16:61:e7:3a:29:1a:f1:f9:44:dc:b3:8d:b5:c7:
9d:b9:2c:9d:24:cc:fd:71:d8:e3:32:cc:01:f3:39:7b:fd:e1:
b8:f3:58:32:4c:54:da:b4:25:18:e5:6b:85:85:50:a3:d2:d5:
91:3f:e8:d7:66:0f:a2:9e:54:d1:c0:a5:80:57:be:91:1c:bb:
df:a3:6e:c1:55:a4:ab:ca:ef:a7:10:55:1e:89:eb:6b:7c:90:
3e:a3:9c:60:1f:90:5a:9b:8a:ab:b1:f3:ad:38:1f:49:bd:ce:
9e:cb:1f:2a:4e:79:d1:85:d7:76:bb:91:1f:af:7b:de:63:57:
87:6e:19:a5:81:f1:98:47:2b:3e:01:b2:65:17:e3:e2:82:e1:
39:21:eb:52:f7:ec:e2:b5:6c:a9:de:75:a4:f9:a5:51:ff:df:
41:49:44:1a:39:ae:45:a7:95:97:89:5e:fc:fd:58:86:29:df:
25:4f:17:b4:63:ca:bb:86:40:61:bb:34:ed:6c:46:f2:52:06:
3a:67:6b:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 22:47:13 2025 by rpki-client