Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/DgDZQWgUYtRHcM_tbERrXoSsVeI.roa
File: DgDZQWgUYtRHcM_tbERrXoSsVeI.roa (raw, json)
Hash identifier: 6RltlBwfJa5SrFdvQ3QPC2L2rYwN7/M3g/TR0eAsA9w=
Subject key identifier: 0E:00:D9:41:68:14:62:D4:47:70:CF:ED:6C:44:6B:5E:84:AC:55:E2
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188424A9806518BFDC02389CE854971855C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/DgDZQWgUYtRHcM_tbERrXoSsVeI.roa
Signing time: Mon 22 May 2023 07:09:24 +0000
ROA not before: Mon 22 May 2023 07:09:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:42:4a:98:06:51:8b:fd:c0:23:89:ce:85:49:71:85:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 22 07:09:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0e00d941681462d44770cfed6c446b5e84ac55e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:0f:bd:5f:55:af:29:78:fd:ff:0f:45:af:62:
81:79:88:38:90:2f:62:8f:7c:f7:76:0a:fe:6c:0b:
88:ee:b4:55:41:31:06:6f:54:f7:e7:c1:cd:6d:0a:
85:40:a2:55:c2:8f:b1:7f:bc:ec:96:31:a7:5a:d8:
5a:be:6e:ab:78:9e:8c:f7:5b:4d:fe:3d:4f:a9:a3:
8c:87:71:31:2f:03:6f:48:0a:21:82:ae:6b:f2:b8:
8c:fc:23:9e:04:17:4f:6a:69:cd:04:79:c2:69:49:
2b:74:14:3c:d0:e7:f6:13:3a:cb:f6:7d:8f:8a:71:
a5:58:4b:3b:d0:79:88:97:ad:bb:86:36:69:c7:d9:
cd:22:e0:e4:5b:05:bc:86:38:98:55:57:da:64:ce:
ef:8a:28:ac:20:d2:68:0d:65:48:b3:21:8c:b6:79:
7d:00:01:f6:23:16:99:ac:a9:21:80:6f:8c:83:3b:
9c:c4:61:62:cb:2e:55:f9:e4:a3:9a:fb:0e:2c:a6:
ec:5a:a9:3e:b9:58:8c:46:06:9e:99:83:f9:21:22:
29:a3:87:4c:dd:f9:d4:5f:11:a2:3d:fb:25:42:c6:
41:50:1e:67:e1:dd:8a:f5:93:5f:e3:46:ca:a1:22:
6c:6d:64:0a:ce:59:da:09:6e:3f:c5:7f:4e:82:d9:
46:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:00:D9:41:68:14:62:D4:47:70:CF:ED:6C:44:6B:5E:84:AC:55:E2
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/DgDZQWgUYtRHcM_tbERrXoSsVeI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0c:1a:98:b9:1a:04:f0:b3:41:4d:86:66:b4:ae:27:97:07:99:
7d:58:e5:d7:30:dc:c8:84:ed:d6:10:33:98:fa:07:c3:6a:16:
2c:f6:e7:1a:12:6a:9a:c4:8f:4b:e1:ea:33:aa:e4:5e:34:a1:
3e:5e:42:ff:a1:8a:28:2a:f2:48:20:e5:0c:d6:5c:19:7f:be:
66:16:88:de:a9:21:17:74:40:e5:6d:2e:9b:ec:11:13:9a:57:
f8:09:55:b5:6d:a4:db:f6:80:16:ae:22:2a:53:33:d5:67:25:
df:01:69:ab:15:f8:81:4e:d2:be:11:a4:e7:53:af:28:24:13:
1d:74:7e:ef:36:b7:38:04:85:ca:25:b7:bf:f3:07:ff:30:80:
bb:cf:50:b5:4d:10:4d:f6:d0:11:f4:42:81:6e:81:88:e6:47:
57:c7:5f:43:8f:a0:ac:d6:ba:aa:23:6a:89:87:4c:73:47:00:
ef:8f:e6:26:74:d9:02:b7:3a:fe:cb:9e:a7:41:2c:84:26:e0:
25:cc:54:75:b5:93:40:2c:ba:36:d8:49:bb:67:ed:cb:22:b4:
ff:72:44:6b:09:ca:19:ae:37:44:0b:90:ca:0f:84:21:21:3e:
dd:c7:2f:b7:d5:c8:da:f3:1e:79:a9:e3:04:a0:73:f3:04:d3:
b3:8b:10:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:16:16 2025 by rpki-client