Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/rDGt1xAVIA9SG-E54w-tIQXdHQ8.roa
File: rDGt1xAVIA9SG-E54w-tIQXdHQ8.roa (raw, json)
Hash identifier: +hsnj152Qnab7Ay5fB0h23qr2C5x+5vD81/F4K3/PI8=
Subject key identifier: AC:31:AD:D7:10:15:20:0F:52:1B:E1:39:E3:0F:AD:21:05:DD:1D:0F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018725584D0B46CE3E2CC69B08074E826E7F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/rDGt1xAVIA9SG-E54w-tIQXdHQ8.roa
Signing time: Mon 27 Mar 2023 23:12:36 +0000
ROA not before: Mon 27 Mar 2023 23:12:36 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:25:58:4d:0b:46:ce:3e:2c:c6:9b:08:07:4e:82:6e:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 27 23:12:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ac31add71015200f521be139e30fad2105dd1d0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:63:9d:d7:d4:31:09:bb:9c:4f:f7:b0:44:ee:
fb:d5:48:14:0d:ce:3d:72:eb:ab:43:0c:d2:c6:2d:
be:c4:58:45:19:f7:85:f5:ad:7d:09:ef:45:59:bf:
78:0a:29:63:1c:0f:f3:76:31:66:32:8a:61:8a:60:
8e:5a:c8:16:c8:48:84:d3:6e:ed:4f:89:1d:9c:a9:
1a:ca:71:fc:60:05:4b:fb:10:c4:b2:d0:1a:2c:07:
40:ab:f3:ca:b2:0d:15:1f:a5:76:48:8e:0c:5e:40:
05:6d:39:0a:40:10:7f:f9:49:21:0b:51:1b:bf:5a:
43:bb:d6:cb:7b:25:0d:b6:ae:d0:fd:0c:20:bb:d9:
e7:21:ed:04:25:a2:33:24:f5:5d:4c:f9:1d:b4:4c:
a8:05:db:91:1c:c9:92:61:14:6e:40:bb:f3:06:cf:
24:42:6a:78:23:9f:fa:f5:12:3a:f2:a0:4d:93:df:
5c:9b:e7:32:43:0c:48:40:96:8d:2a:55:c1:cd:c0:
4b:c5:38:42:22:5a:c2:66:0e:a7:8e:50:a6:78:c1:
bc:33:6d:c4:19:4d:96:3c:a8:cc:0a:62:f0:0f:5e:
6c:a3:ee:f5:d1:86:d5:5c:13:7a:f8:ce:15:17:bb:
cb:a5:69:e2:7b:ef:2a:e5:5e:78:52:22:ed:08:37:
c9:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:31:AD:D7:10:15:20:0F:52:1B:E1:39:E3:0F:AD:21:05:DD:1D:0F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/rDGt1xAVIA9SG-E54w-tIQXdHQ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
90:a3:09:3b:89:17:1f:66:da:6e:cc:4f:d1:76:27:99:d5:74:
cc:d1:f4:3d:14:b9:55:c6:96:b1:7c:8f:19:23:b7:c0:36:7e:
76:7c:80:2e:b2:fe:3c:43:de:08:83:bf:c7:10:24:cb:70:cb:
3e:f1:1d:d1:37:f7:b5:07:c8:af:74:69:e2:f5:73:d5:fb:d9:
de:a3:9b:a6:d1:3d:47:9f:69:74:6e:f1:4d:87:00:56:64:1e:
e3:ff:b6:76:1f:31:9a:84:18:37:cb:16:de:75:27:45:ed:03:
fc:7d:80:64:57:6c:48:88:d1:9a:b8:bd:45:ff:a1:33:60:07:
fd:7f:cf:4e:e7:63:51:af:52:6b:f8:2c:26:bb:11:4a:b9:60:
c1:2c:07:46:f0:e8:86:0f:03:0a:11:dd:53:93:27:1e:4e:9b:
91:46:75:9e:f8:9e:ec:d5:33:14:a3:0a:34:a1:e4:13:b7:22:
aa:02:f0:04:c5:02:0e:ee:ab:83:9d:f9:a8:d1:11:2d:17:24:
e1:b3:88:d4:93:71:40:8d:f4:71:bd:87:61:49:7f:c6:0f:59:
b0:3a:83:a4:25:cb:bd:34:95:ad:23:2d:e8:66:19:33:a9:f7:
24:c6:35:d8:50:60:63:cd:f1:f7:df:c4:b8:72:08:b8:46:81:
cf:27:9a:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 14:25:08 2025 by rpki-client