Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/l_DTk9qmnTfFTAI012EzvRGrtig.roa
File: l_DTk9qmnTfFTAI012EzvRGrtig.roa (raw, json)
Hash identifier: EY4HUVRutj+sHX3EwUmAliGEwLFe7thqj3S0yMTM3h0=
Subject key identifier: 97:F0:D3:93:DA:A6:9D:37:C5:4C:02:34:D7:61:33:BD:11:AB:B6:28
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01865FB70DF3B49F20DF956A6FD87646A22A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/l_DTk9qmnTfFTAI012EzvRGrtig.roa
Signing time: Fri 17 Feb 2023 14:11:17 +0000
ROA not before: Fri 17 Feb 2023 14:11:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:5f:b7:0d:f3:b4:9f:20:df:95:6a:6f:d8:76:46:a2:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 17 14:11:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=97f0d393daa69d37c54c0234d76133bd11abb628
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:e5:83:7c:6a:4f:84:a5:bf:c3:dc:1d:ac:dc:
e4:0c:a0:cc:3f:d9:61:98:b0:b4:ee:b1:35:8e:1e:
8b:ca:3b:01:c4:67:b3:af:fb:7e:34:a1:67:d6:15:
2f:09:5d:df:45:77:4d:88:01:ee:d6:79:94:03:a5:
6f:0a:da:b9:b1:00:20:2c:55:0d:19:c4:bd:4f:d3:
dd:5b:ba:af:64:b9:ee:e0:8d:b7:d5:ed:a6:72:8e:
b3:3c:8f:64:5e:aa:de:79:be:80:eb:14:eb:5a:38:
c9:2d:b4:b0:10:dd:c6:5f:3d:81:99:f0:84:1f:de:
b8:50:16:f7:4c:22:f4:3e:09:05:62:89:4d:ee:fe:
be:2a:39:88:31:fe:f9:1f:64:3f:2d:91:89:0d:55:
cf:c8:a5:93:20:42:9d:4a:8b:29:78:0e:54:fe:62:
4e:07:fb:31:b0:e4:8a:8c:7e:5e:cf:37:77:95:05:
65:4f:91:73:66:23:d9:b7:55:b9:9d:41:ad:3d:f4:
3f:ea:7d:4d:5a:12:df:25:2c:54:78:9e:f5:ac:91:
9e:1c:17:dc:dd:5e:e2:d4:10:23:96:23:f2:50:ae:
4c:4e:e4:bf:1f:3d:30:d9:54:4e:6a:ca:94:1b:54:
79:73:b2:ad:5e:25:ca:c2:40:73:fc:52:be:14:6c:
77:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:F0:D3:93:DA:A6:9D:37:C5:4C:02:34:D7:61:33:BD:11:AB:B6:28
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/l_DTk9qmnTfFTAI012EzvRGrtig.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3f:c8:9e:f8:ff:6e:c1:47:2b:ff:64:6d:3b:a6:55:5a:b9:6c:
6f:cb:96:65:b5:33:3d:16:59:cd:95:af:7f:2b:f7:cd:3c:f8:
eb:f5:7f:fb:df:fc:73:76:19:10:7a:d1:2a:91:be:da:82:97:
00:f3:ba:cf:af:d5:e8:d2:f0:a4:95:07:7f:4d:05:75:77:16:
9e:7b:83:44:1f:e7:a6:d0:ed:ff:5f:85:7f:e4:e1:49:cd:30:
2d:74:5d:f6:81:fd:bb:60:f1:2c:a3:2e:32:0f:de:63:a7:46:
81:a9:fd:0e:2f:c6:37:b0:67:2d:98:63:43:6a:53:92:38:f1:
c7:d8:da:a3:e3:96:be:00:47:22:75:aa:3f:76:a2:b8:bf:61:
bb:14:da:ed:c4:84:69:3e:34:ac:eb:5f:da:34:73:b2:7b:5a:
84:54:fb:d2:d2:d1:f6:6b:b7:cc:f4:7a:b0:da:de:3c:92:5c:
63:ce:6f:f2:55:3c:14:da:8c:ab:30:ba:fc:80:a2:e6:5b:3d:
9a:2a:23:a8:36:24:37:20:3f:08:8b:12:a5:81:c2:2c:d4:3f:
2f:f3:d3:9a:8f:32:8d:e2:3b:80:38:75:13:85:f5:74:26:07:
68:17:9d:a3:db:2b:32:96:39:6d:0a:7a:69:0d:7c:74:ea:83:
e3:b6:04:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 08:51:23 2025 by rpki-client