Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/dzJUK74caJic2_5SIrKe8P3s6Nc.roa
File: dzJUK74caJic2_5SIrKe8P3s6Nc.roa (raw, json)
Hash identifier: lOt0IQWOQms4IKRrlxCOHqI+WltUd/KnWa+9Xzbvvj8=
Subject key identifier: 77:32:54:2B:BE:1C:68:98:9C:DB:FE:52:22:B2:9E:F0:FD:EC:E8:D7
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189F3BF4E35EDE198BD644C6E2D2F0895ED
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/dzJUK74caJic2_5SIrKe8P3s6Nc.roa
Signing time: Mon 14 Aug 2023 11:12:28 +0000
ROA not before: Mon 14 Aug 2023 11:12:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:f3:bf:4e:35:ed:e1:98:bd:64:4c:6e:2d:2f:08:95:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 14 11:12:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7732542bbe1c68989cdbfe5222b29ef0fdece8d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a9:09:cd:38:05:0d:58:4a:3b:53:b2:3d:86:
10:f0:da:9f:e8:0f:08:d5:ad:b2:e5:17:5c:4f:76:
e7:b5:23:c0:ef:15:54:42:73:50:1f:bc:bd:2a:82:
b9:bb:fc:a2:9d:40:a8:01:4d:2e:e8:e6:11:e5:97:
50:c4:c9:b0:74:f5:a7:6c:df:b0:6b:96:bd:0c:85:
3b:d5:90:4e:43:c1:e9:c7:0b:ac:2c:75:4b:1d:3c:
09:25:36:db:f9:a0:71:7a:3b:68:c9:d6:b9:32:01:
73:d5:1e:16:9e:e5:40:52:b6:d5:5c:e1:3a:f6:12:
73:51:32:af:ac:56:a3:12:2b:04:25:31:3c:c2:03:
dc:90:57:7c:04:6b:ae:5e:a8:1b:57:ca:17:bb:5c:
15:f7:0b:1a:b7:bf:b3:54:e3:f6:dd:c3:4e:b3:9b:
5e:0f:c7:1e:bc:6a:1d:0d:7c:c0:87:72:b2:46:e2:
51:5e:b5:59:3f:9c:b0:04:1c:d2:c5:2b:14:f2:b2:
94:8d:6c:b9:03:29:c5:fe:97:68:fb:36:f8:22:ec:
ab:dc:b1:ee:d4:9f:f9:f5:a8:7d:85:5a:a2:ea:3f:
76:15:d0:63:7b:18:cc:30:6b:51:b4:76:f2:b4:27:
94:79:a8:f5:93:e4:12:ab:1e:90:22:c3:b0:7a:76:
21:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:32:54:2B:BE:1C:68:98:9C:DB:FE:52:22:B2:9E:F0:FD:EC:E8:D7
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/dzJUK74caJic2_5SIrKe8P3s6Nc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
06:02:dc:e4:4d:22:37:8c:16:89:0e:a8:cc:77:21:81:0f:19:
16:d0:24:69:9d:8a:14:90:14:d7:a3:9c:f6:fd:07:b7:bd:53:
ae:fb:91:a7:b4:8a:0a:96:f1:d0:8f:6b:4b:b1:56:f0:14:16:
61:51:24:f4:a2:3c:75:08:54:2c:b8:42:61:33:08:d6:d2:c4:
8c:94:3b:65:2e:d8:a1:fa:7a:fc:c8:37:69:8d:ff:5c:a3:98:
2e:84:45:d4:c5:99:49:cd:2c:fb:1a:81:76:c9:f5:f5:6f:b3:
26:08:77:96:2e:c8:46:57:05:3d:96:82:68:74:55:64:ed:b6:
9f:d3:7d:a0:a7:08:9d:e4:72:16:7e:cd:da:0b:1b:1c:1d:b5:
f7:e7:8e:09:8c:86:eb:77:0f:f0:06:4b:d2:89:8b:e6:c3:04:
57:f2:4f:4a:18:60:62:1e:2b:ed:2a:aa:7f:da:ce:55:de:ce:
48:cf:79:85:50:5b:57:d6:8a:c0:af:65:88:1c:65:11:66:52:
3b:dd:18:f1:39:36:39:39:8d:87:65:1d:59:3e:52:1b:f9:06:
88:85:b8:dd:9b:c8:65:ef:b4:4a:87:2b:58:78:d9:cb:35:1b:
65:4a:1f:18:22:f6:e4:5a:88:fd:25:0e:63:db:82:89:da:4d:
f0:bc:c5:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 08:47:55 2025 by rpki-client