Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/dtFuhSt25ellE75gEPZI---9RJk.roa
File: dtFuhSt25ellE75gEPZI---9RJk.roa (raw, json)
Hash identifier: CaqfkRrq4EOS09Z6UkxOY50B9jwZnSy7lgxq3spAYEA=
Subject key identifier: 76:D1:6E:85:2B:76:E5:E9:65:13:BE:60:10:F6:48:FB:EF:BD:44:99
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01870D870B5CAEE38F1C2F2861EAA668AD58
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/dtFuhSt25ellE75gEPZI---9RJk.roa
Signing time: Thu 23 Mar 2023 08:12:46 +0000
ROA not before: Thu 23 Mar 2023 08:12:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:0d:87:0b:5c:ae:e3:8f:1c:2f:28:61:ea:a6:68:ad:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 23 08:12:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=76d16e852b76e5e96513be6010f648fbefbd4499
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:f1:b4:3a:6a:df:7b:9c:74:0a:ae:1d:24:3c:
f8:3b:a9:4a:ce:4f:33:fb:5e:38:ae:07:79:d6:b4:
26:2a:8c:0f:63:2e:46:68:33:3f:a0:75:5a:35:3b:
62:6e:64:3a:06:9f:af:fa:16:df:a2:30:cd:0b:14:
47:eb:f0:b3:f4:8b:b5:b8:5e:59:2c:ac:7d:c0:55:
4f:fd:33:e8:c4:9f:06:6b:dd:e8:d9:f6:59:5b:9a:
61:2f:07:8d:96:37:6b:d0:7f:a9:f7:dc:84:91:ca:
bb:bd:df:4c:9c:c3:c1:29:21:89:d1:24:2b:49:ee:
d1:da:ab:4d:32:82:ca:2a:6e:b2:98:0e:d9:6c:21:
54:23:75:a8:49:e6:3d:ae:f7:12:37:c7:95:2e:8b:
8b:ed:33:0e:77:74:96:37:f0:eb:a0:32:5b:c8:9b:
c3:f9:27:e1:62:1f:c1:d9:0d:3f:a5:8f:73:32:d2:
63:57:4c:d2:36:74:f5:22:56:97:5c:f3:e0:cf:d6:
92:95:55:af:cf:8b:ce:1e:19:d7:2e:c9:aa:c3:ca:
06:43:06:95:22:93:af:c7:03:d8:d4:f7:9e:28:4a:
06:16:02:2e:96:ec:88:d7:9b:a1:d2:bf:4e:40:a0:
d1:49:7f:e3:a2:7a:1e:7d:e3:0f:5f:54:a6:8d:fe:
55:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:D1:6E:85:2B:76:E5:E9:65:13:BE:60:10:F6:48:FB:EF:BD:44:99
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/dtFuhSt25ellE75gEPZI---9RJk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
93:f9:ae:d9:c8:d7:85:1f:d0:82:53:1e:1b:16:4e:8d:a2:8a:
83:cc:92:a0:eb:27:f1:46:67:97:32:b6:d3:f6:a9:67:d1:03:
d6:3a:61:97:04:c4:64:44:dc:3e:7c:ee:73:fb:6e:4f:ec:e8:
5b:23:de:e1:87:a4:05:a5:16:5c:3b:ca:16:d4:64:0e:a2:a3:
0e:bd:98:8b:07:2d:88:38:cf:e4:f1:3d:12:ef:be:14:54:d6:
b5:87:f4:53:6c:42:a4:98:b5:53:66:86:79:fa:9f:ea:ef:8e:
95:6d:23:e0:38:b4:75:c8:8f:33:04:f8:d9:3b:68:1f:6b:8f:
0d:6a:7b:79:15:26:ac:19:ef:9c:9b:2d:a5:ac:71:cc:ed:8e:
26:a3:e1:e8:77:3e:37:cc:ad:80:41:b5:63:2c:9a:c6:20:03:
5d:ba:2f:b4:5d:f6:77:b0:87:b4:5f:c3:08:18:62:11:3b:5c:
53:72:b5:93:bf:1e:45:a2:70:09:67:10:eb:52:18:59:0c:7d:
84:9e:e7:ac:81:87:ca:6a:58:e8:fe:aa:1f:21:ed:07:c3:53:
07:55:a2:8e:04:d4:46:d8:ef:b8:75:6d:78:27:11:63:a0:b6:
0f:4e:5c:a4:e9:35:05:1e:e0:c0:4e:33:79:da:1f:da:a6:93:
8f:42:7f:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 13:21:27 2025 by rpki-client