Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/dpzywLx5BaHN1s3W9wsGP63xWfg.roa
File: dpzywLx5BaHN1s3W9wsGP63xWfg.roa (raw, json)
Hash identifier: QkkU4zJ9JPaGwJo0skDRXB4yh4KuDIiDVvHcRKVuQec=
Subject key identifier: 76:9C:F2:C0:BC:79:05:A1:CD:D6:CD:D6:F7:0B:06:3F:AD:F1:59:F8
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01872587E8B1FF5053B24D2A9E49E683551E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/dpzywLx5BaHN1s3W9wsGP63xWfg.roa
Signing time: Tue 28 Mar 2023 00:04:36 +0000
ROA not before: Tue 28 Mar 2023 00:04:36 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:2587:9889/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:25:87:e8:b1:ff:50:53:b2:4d:2a:9e:49:e6:83:55:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 28 00:04:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=769cf2c0bc7905a1cdd6cdd6f70b063fadf159f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:c7:2c:e8:c9:9b:c4:e1:43:92:76:b7:15:6e:
39:35:64:da:cb:40:35:19:01:66:6b:41:ac:1a:87:
b9:c5:36:f4:06:50:99:87:ed:fa:33:88:32:d0:7f:
76:25:5c:53:4c:f8:e9:e9:c4:d6:54:25:a5:e0:be:
f6:11:78:9c:f1:4b:95:c7:d8:1b:c6:6d:f1:99:35:
8c:4d:e9:cd:5c:24:70:c8:c0:37:0f:33:74:48:b5:
64:26:91:4a:a5:ec:cd:2d:24:17:4a:ae:73:38:ad:
21:fa:a9:f8:17:7b:c7:a2:d3:57:b4:f5:02:9e:d4:
53:a8:38:f1:a2:7c:75:58:0a:2c:41:f9:17:72:b9:
4f:28:f3:da:d9:2e:f2:c9:2a:1e:54:31:44:ad:82:
20:82:0c:89:94:16:13:02:ed:73:25:1b:a0:e1:fe:
7f:17:01:c4:6a:ce:14:f4:a4:6c:f9:89:20:3f:8b:
5b:da:04:29:31:e1:76:11:85:42:b0:41:e9:37:e3:
f5:3c:4f:a5:82:21:38:ab:b2:6b:e4:83:39:89:97:
bd:fc:f1:22:9a:8c:df:f2:83:c4:1a:de:c8:7e:c9:
84:8a:fc:32:b0:26:51:32:cf:0e:04:76:13:77:f4:
25:76:27:2f:fe:f3:66:9c:54:b1:11:02:0a:4e:e2:
91:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:9C:F2:C0:BC:79:05:A1:CD:D6:CD:D6:F7:0B:06:3F:AD:F1:59:F8
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/dpzywLx5BaHN1s3W9wsGP63xWfg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
64:22:57:a6:a4:1b:14:ad:48:fb:1c:9f:a8:5b:8e:f6:85:2a:
75:16:df:aa:2e:f1:71:19:af:39:3e:b6:e5:69:58:b4:19:7a:
be:fb:55:43:38:68:4e:6a:67:46:df:7d:8f:67:aa:b4:7f:90:
ef:f5:e9:18:83:11:bf:b5:86:57:56:5b:77:95:75:a3:80:7a:
c9:cf:d5:1d:d0:ef:8a:13:85:da:bf:22:5a:0d:ac:0a:34:ec:
4e:d3:3f:39:95:64:10:3a:a1:10:ad:7f:fc:c6:b2:f8:e2:f1:
58:96:7a:ea:f3:37:ee:b9:01:06:09:30:c7:37:be:3d:57:e1:
98:66:0f:9f:bf:f4:35:9b:ec:30:49:81:24:18:8f:c3:a3:c0:
2e:36:85:2c:f1:e2:7d:46:1e:ab:93:ab:9a:49:8b:05:66:7d:
ef:33:5b:be:d4:b1:40:99:b5:ba:be:80:41:c4:2e:0e:f4:f1:
27:8b:19:07:26:08:08:57:20:5c:a0:25:33:12:b7:9d:bc:85:
40:a4:fc:97:a5:9a:83:0b:a2:ec:f7:52:46:32:ab:d7:b2:2e:
86:9c:b1:78:aa:75:e3:39:a7:cf:c2:af:7f:33:d9:ed:da:af:
1e:0a:d4:4f:6e:82:b4:58:a4:0a:be:17:17:42:9e:11:17:aa:
90:3f:83:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 05:37:29 2025 by rpki-client