Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/DbqtnUcrJkM7e7K4I7AqVQX4TbM.roa
File: DbqtnUcrJkM7e7K4I7AqVQX4TbM.roa (raw, json)
Hash identifier: HB10d7yygr7aYWFXtuJx9VMWtZCqIIYMQ68xSeAqj7Y=
Subject key identifier: 0D:BA:AD:9D:47:2B:26:43:3B:7B:B2:B8:23:B0:2A:55:05:F8:4D:B3
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018828559607DD5DAF002594C5CD2F4BBE22
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/DbqtnUcrJkM7e7K4I7AqVQX4TbM.roa
Signing time: Wed 17 May 2023 06:11:17 +0000
ROA not before: Wed 17 May 2023 06:11:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:28:55:96:07:dd:5d:af:00:25:94:c5:cd:2f:4b:be:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 17 06:11:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0dbaad9d472b26433b7bb2b823b02a5505f84db3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ee:75:80:75:21:84:17:13:54:8a:19:24:aa:
d9:f2:46:d4:80:82:9e:61:de:54:31:a4:d3:85:c0:
fa:d3:04:2c:3b:d4:a4:d6:80:5b:00:ec:22:b1:78:
c8:27:68:35:60:47:ee:f0:18:c4:b3:1d:df:6d:bd:
85:ab:65:20:82:10:b3:88:c9:25:28:39:31:4c:e1:
43:59:cd:d7:56:47:fe:81:c8:7f:8a:a7:1b:9a:ca:
90:70:3d:b9:05:f7:f6:bc:95:6a:fa:9f:1f:63:91:
0c:fd:a2:34:ca:9e:4d:ed:0f:d0:2c:1b:af:1f:0d:
05:7f:92:a6:8d:4c:73:fd:e2:25:92:a0:5a:1a:8d:
ac:b2:95:51:3b:b7:a8:78:ea:58:65:71:b5:34:bf:
bd:37:6b:df:59:06:36:5b:ab:76:88:a8:34:3e:46:
7a:5b:ab:10:fd:19:75:02:19:f5:78:01:bd:13:3a:
bf:1d:44:9b:69:c7:6a:e0:1f:60:9a:1e:5f:9f:f4:
53:ce:9e:e5:bb:1b:d8:bf:6c:ff:23:7f:1e:f2:2a:
3b:9c:b2:fd:46:99:2f:b3:56:d7:f9:6d:8d:f5:df:
c0:e1:2b:cd:df:63:32:7a:12:e2:ec:4f:52:7f:56:
da:df:0b:fc:14:66:0c:47:47:fc:91:cf:b9:09:c6:
42:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:BA:AD:9D:47:2B:26:43:3B:7B:B2:B8:23:B0:2A:55:05:F8:4D:B3
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/DbqtnUcrJkM7e7K4I7AqVQX4TbM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2a:48:f3:16:bd:f0:93:a6:b4:cd:02:df:e2:9a:f1:a0:ad:76:
39:70:e0:43:1f:60:96:82:21:fb:24:11:8f:c9:0d:a7:63:d9:
aa:d4:a6:f9:74:b2:56:05:44:33:c4:18:8a:cc:33:ca:08:ee:
3f:27:91:f5:8a:ae:8d:ce:f1:47:4f:65:f9:a5:99:20:f2:fd:
1f:2b:4d:85:87:f9:2d:c3:7c:a9:b0:c2:96:62:48:dc:ce:24:
5a:76:81:82:f2:31:be:d3:e3:b4:1a:b7:f5:5b:4e:a1:25:0e:
7d:9b:d5:c5:55:75:de:9a:a2:28:aa:bb:ff:2b:20:5b:d0:39:
f4:b5:85:e4:70:82:5c:75:2d:42:56:ba:b3:67:ce:e7:41:f4:
8e:37:6e:d1:60:83:a9:9e:74:f4:6a:98:d4:81:8e:ad:b1:c9:
63:a9:1d:e1:79:ab:d9:c1:2b:9e:9a:ff:7e:3d:db:90:7d:88:
a3:8e:10:1e:2f:04:fa:c2:b1:5d:56:d3:18:e4:06:e6:0a:82:
a7:47:be:ab:b6:0c:33:97:d0:f2:37:c7:69:cb:34:cf:71:b6:
98:32:7d:2f:ed:c6:9a:ee:61:39:66:12:ea:bb:d9:e9:54:7a:
e0:0b:c5:66:14:08:dd:c0:c2:42:4e:53:d4:08:ee:cb:97:be:
f7:a9:41:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:15:42 2025 by rpki-client