Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/dYbbRjOal8YYlWX1e_N921HUs_E.roa
File: dYbbRjOal8YYlWX1e_N921HUs_E.roa (raw, json)
Hash identifier: I3l42xSc22RfciKiAdPtQdkLwsDLjF1OqNOpkterpZQ=
Subject key identifier: 75:86:DB:46:33:9A:97:C6:18:95:65:F5:7B:F3:7D:DB:51:D4:B3:F1
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186801EAA1377039BD6D4951C1A0FF03349
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/dYbbRjOal8YYlWX1e_N921HUs_E.roa
Signing time: Thu 23 Feb 2023 21:12:18 +0000
ROA not before: Thu 23 Feb 2023 21:12:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:80:1e:aa:13:77:03:9b:d6:d4:95:1c:1a:0f:f0:33:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 23 21:12:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7586db46339a97c6189565f57bf37ddb51d4b3f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:1b:a6:0e:44:09:c5:99:c0:19:9f:dc:d3:87:
77:f0:91:55:ae:bb:a1:09:42:46:86:80:3f:7d:4f:
bd:24:4c:4c:0b:16:bd:78:bc:86:3a:dc:08:b0:a9:
b4:a8:1c:8e:88:f8:e2:bf:32:03:cb:86:3e:38:53:
9e:f6:26:69:a9:ff:02:2a:ca:7b:df:12:7c:2e:b9:
07:10:f0:16:40:5d:d6:92:03:5c:70:10:4d:df:52:
38:50:5e:b4:d6:0b:06:05:a1:c3:6a:5e:e8:85:1f:
08:f4:00:62:df:76:fe:10:f0:17:93:f4:d8:cc:20:
1d:ce:b4:37:4a:47:37:8e:a9:88:a3:92:b1:dd:af:
e1:00:5f:2a:39:f0:b7:78:d5:80:ea:de:7f:b8:cf:
ec:0a:d0:c8:29:b5:25:04:47:2a:71:f9:0d:7d:c6:
f4:29:5c:d9:17:9c:47:d3:a7:2d:55:a6:45:9b:9d:
9e:ad:8d:42:27:0a:00:8c:b4:df:40:71:5c:c5:df:
cb:a7:c9:7c:a6:da:26:b7:ac:ea:70:57:e0:92:17:
da:06:c3:db:ba:0a:fd:51:bb:a1:09:b6:b4:a3:c0:
38:c5:6f:25:3e:aa:9a:9b:65:ee:55:fd:e4:2e:43:
47:ea:68:77:18:df:55:a1:c7:4f:20:58:c9:2e:0c:
fb:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:86:DB:46:33:9A:97:C6:18:95:65:F5:7B:F3:7D:DB:51:D4:B3:F1
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/dYbbRjOal8YYlWX1e_N921HUs_E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
77:6c:ee:94:d2:e0:98:62:91:13:12:70:f9:36:d7:48:cd:7d:
36:3b:9f:74:dd:aa:0e:92:8a:5f:69:fd:10:c4:56:1c:dd:4a:
a1:8d:0c:15:06:4e:fa:7d:f8:05:2e:0b:42:56:f6:4e:42:6c:
88:5d:0d:34:e2:2c:32:3d:cb:dd:8d:0d:a9:29:1f:cd:82:88:
15:4e:30:5c:1b:86:bf:c8:7c:26:d9:cc:d1:c8:6b:0d:22:55:
65:0c:87:b1:46:56:c6:ae:3b:64:3d:30:28:83:69:37:5d:0b:
92:0c:d9:d7:9d:00:43:ee:d1:b0:b9:c7:b8:92:68:26:10:fe:
77:47:4b:90:f4:47:c5:b7:cb:68:b6:75:43:37:19:26:15:4b:
c1:dd:60:d6:60:42:43:7c:13:19:58:6e:95:22:fe:3b:42:3d:
52:18:33:9d:93:77:93:d0:4f:38:8d:86:e6:65:3d:36:ac:90:
1d:42:86:74:2c:52:6b:c3:e5:ee:38:2c:05:ca:bf:51:3e:ab:
f3:d5:b5:a9:20:44:41:69:90:d4:82:e6:fe:15:29:93:46:fd:
a3:38:88:04:8d:d3:8c:31:e3:dd:ee:5f:20:08:f4:4a:c0:14:
bb:49:bc:cb:5b:91:d4:ec:93:70:9f:26:44:70:9f:ee:70:b6:
b0:a8:59:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 23:41:09 2025 by rpki-client