Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/dlaHSc4vrXTwAe3aCO8l8rsCOOg.roa
File: dlaHSc4vrXTwAe3aCO8l8rsCOOg.roa (raw, json)
Hash identifier: ygsOtlrucVIs7DV/zpzZlVrmhyb90fHeyumfYm8FCDg=
Subject key identifier: 76:56:87:49:CE:2F:AD:74:F0:01:ED:DA:08:EF:25:F2:BB:02:38:E8
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186DA4274064E32FB01D369B8C776F19FA7
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/dlaHSc4vrXTwAe3aCO8l8rsCOOg.roa
Signing time: Mon 13 Mar 2023 09:17:13 +0000
ROA not before: Mon 13 Mar 2023 09:17:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:da:42:74:06:4e:32:fb:01:d3:69:b8:c7:76:f1:9f:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 13 09:17:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=76568749ce2fad74f001edda08ef25f2bb0238e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:3a:48:57:4b:45:56:68:e0:ea:f6:c9:6f:70:
8d:8c:a2:3d:7c:3b:ea:ab:bb:9e:cc:f4:fe:f0:77:
bc:e2:63:44:52:fb:34:e4:12:d8:ad:0a:f2:5b:7a:
53:e1:f4:af:32:e1:90:eb:6a:41:47:da:37:7a:ff:
be:23:21:17:03:89:ed:7a:94:4f:80:84:ba:bf:e7:
3c:f8:ab:17:92:c6:49:c5:67:2f:7b:8e:99:76:01:
63:3e:20:1a:9e:21:02:f4:b9:5e:ed:bc:15:0d:bb:
56:82:0c:64:83:51:81:cb:cd:a1:f4:75:fb:76:30:
81:b9:85:3b:9f:83:51:b5:32:9c:76:36:d4:32:11:
55:5b:54:5a:66:80:8f:34:4c:08:23:dd:fa:4b:24:
02:14:7a:19:4b:13:61:73:bf:5d:b7:cc:62:61:bd:
07:76:37:dc:4b:70:34:11:45:93:ac:27:60:6c:95:
bf:be:64:f3:d0:74:5f:5b:9a:fc:18:69:c8:39:37:
3b:52:5d:11:d9:7e:86:83:66:92:87:a1:c4:c8:7f:
5f:ea:f6:7e:d6:29:65:15:ae:ba:ac:24:5d:65:2d:
bf:c9:3c:05:9d:64:81:ec:e9:2e:fa:0c:7e:6a:3a:
80:cb:70:02:f7:8c:bf:f7:b5:e3:1a:84:88:8d:57:
c1:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:56:87:49:CE:2F:AD:74:F0:01:ED:DA:08:EF:25:F2:BB:02:38:E8
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/dlaHSc4vrXTwAe3aCO8l8rsCOOg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
35:ea:0b:ef:af:dd:d2:91:c0:7a:bf:37:de:65:ec:96:ee:f7:
9c:29:47:3b:67:06:49:4d:00:23:7e:18:a8:2e:2e:a2:15:ff:
c2:e4:2c:c0:df:d5:61:ce:49:9f:c2:d1:5c:e7:7b:0e:e7:20:
52:3e:18:f0:48:5e:dc:d6:80:11:04:d1:ca:07:6a:73:64:3d:
5a:e9:b1:c7:ce:68:df:0e:70:5a:8a:58:57:9f:41:f7:c2:92:
41:3f:23:ec:35:93:ba:6e:36:e7:80:f6:e3:68:4a:2d:a6:a4:
81:b2:0c:a6:29:b6:f3:51:a3:0c:be:7b:20:97:a1:4c:5b:df:
9f:79:a2:ba:d4:dc:cd:49:09:d8:ac:1b:31:c7:b9:4f:16:56:
65:82:3b:c4:9b:a1:4e:5a:61:68:3b:42:53:4c:f7:7e:3c:45:
db:7c:db:18:f5:b0:01:d0:76:d2:c7:b0:bb:0a:37:bb:c2:31:
11:8f:a1:6e:f5:aa:71:d0:82:38:64:0e:a9:b1:3a:49:39:ee:
fc:1a:f3:15:22:2b:db:e9:50:77:9c:30:61:e6:09:8b:ae:ec:
2a:b9:ba:b3:14:96:d3:a9:d1:6f:b3:dc:54:3f:7c:6f:f2:5a:
6a:57:3e:fc:e9:b7:9a:71:b4:c9:16:14:59:89:0a:c5:3c:6a:
40:85:02:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:54:08 2025 by rpki-client