Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/DrVuhtO0q7Hyg2Rj5PJGDOxvRRc.roa
File: DrVuhtO0q7Hyg2Rj5PJGDOxvRRc.roa (raw, json)
Hash identifier: Vmdr7wpu8q40L//tHBcvETloOJmwMTV5c1g99Pvk7YU=
Subject key identifier: 0E:B5:6E:86:D3:B4:AB:B1:F2:83:64:63:E4:F2:46:0C:EC:6F:45:17
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A22FA4014DB395C5EB99494DA2BCBAB18
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/DrVuhtO0q7Hyg2Rj5PJGDOxvRRc.roa
Signing time: Wed 23 Aug 2023 15:19:00 +0000
ROA not before: Wed 23 Aug 2023 15:19:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18a:178d:7ed9/128 maxlen: 128
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:22:fa:40:14:db:39:5c:5e:b9:94:94:da:2b:cb:ab:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 23 15:19:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0eb56e86d3b4abb1f2836463e4f2460cec6f4517
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:58:3c:48:62:49:2f:f4:b1:ce:70:c0:e7:6c:
f7:a1:88:d2:30:b8:ce:94:c2:10:0e:cb:64:a9:f8:
f3:ca:98:7c:f3:59:06:fc:53:7d:de:16:5d:0e:7f:
53:9a:fb:a9:10:30:32:ba:e8:93:59:64:e6:e3:98:
fa:8b:6f:6c:fb:6b:47:3f:56:dc:f6:66:83:4e:dd:
aa:07:75:c8:86:7b:6b:cc:df:8e:04:c5:b7:3b:e7:
a2:26:9f:0b:a9:00:80:4c:1d:10:ca:00:d0:1e:74:
ec:3b:53:f9:14:1a:a8:e8:9d:4f:bb:ee:96:3d:ba:
35:9f:01:4c:9e:6e:e4:6c:5d:bd:85:4e:8e:ea:91:
07:e0:b5:54:5f:94:35:d8:e4:86:b4:37:75:9f:f0:
b1:b5:b0:33:4e:e9:ed:ee:2f:bf:a6:88:6e:b6:53:
6a:5a:d1:65:6b:66:02:46:51:6d:0d:6f:4b:87:f5:
73:3f:a0:ca:93:25:92:48:53:a6:df:16:1f:ed:18:
cb:6b:b7:d0:61:be:8d:af:be:a3:fd:fb:86:e2:57:
3c:1d:35:29:00:ca:06:7f:19:eb:e2:c3:30:a2:18:
c9:9d:96:72:4b:93:4c:0d:7d:85:9d:75:4a:a7:99:
14:31:1c:75:e4:07:f5:cd:8c:2c:fa:4c:f9:87:52:
b2:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:B5:6E:86:D3:B4:AB:B1:F2:83:64:63:E4:F2:46:0C:EC:6F:45:17
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/DrVuhtO0q7Hyg2Rj5PJGDOxvRRc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
58:b0:0c:b0:bc:86:f1:bc:03:95:0f:29:0d:ad:22:aa:82:7f:
86:6e:ce:09:1d:0e:9e:59:c7:b6:a9:3b:8b:60:b6:2d:82:13:
f0:d8:c5:06:91:1b:50:bb:db:15:26:f3:86:6e:a9:bb:0c:ce:
19:2e:a3:5d:61:fb:38:5f:fa:3b:4d:2b:14:04:31:9c:0c:12:
6e:1e:e5:4c:cd:19:6a:a1:c5:d4:8e:c3:0c:c2:b8:a0:b0:40:
e5:ea:17:65:64:c6:f2:61:bb:ab:52:55:cf:81:45:a9:a0:f0:
b3:6b:2d:a3:ab:aa:f0:43:ca:e3:17:eb:c8:78:ca:52:f5:b3:
43:a2:08:44:80:73:7e:a1:05:17:2c:38:d5:e3:5f:97:68:21:
ab:0d:ad:ed:a8:90:90:b5:a5:28:c6:14:ab:d4:28:14:76:61:
49:38:c9:cf:70:5f:ca:c5:fa:74:30:03:9d:1a:c7:38:24:5e:
88:53:a9:e3:b6:23:cc:7a:4a:7e:71:5a:15:47:92:6d:0d:f1:
79:b4:7b:91:67:62:92:ce:a5:9b:f0:ff:fa:1c:94:d1:d6:be:
38:3e:a2:40:41:5b:1b:a6:c6:74:23:f0:77:a2:54:99:ae:c0:
94:28:31:c5:5f:54:0f:94:09:08:23:a1:5f:82:9d:4d:b6:f7:
35:1d:9e:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 02:08:19 2025 by rpki-client