Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/dzbg0T_1kJJ0eQCFiSx_jOQQC9Y.roa
File: dzbg0T_1kJJ0eQCFiSx_jOQQC9Y.roa (raw, json)
Hash identifier: DJgLo1iRbfUNSrDQgeh5r96wnhogJR/5sSwNaeGcA8M=
Subject key identifier: 77:36:E0:D1:3F:F5:90:92:74:79:00:85:89:2C:7F:8C:E4:10:0B:D6
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018880F444B32A8B762A815A556B70B2396D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/dzbg0T_1kJJ0eQCFiSx_jOQQC9Y.roa
Signing time: Sat 03 Jun 2023 11:11:12 +0000
ROA not before: Sat 03 Jun 2023 11:11:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:80:f4:44:b3:2a:8b:76:2a:81:5a:55:6b:70:b2:39:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 3 11:11:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7736e0d13ff5909274790085892c7f8ce4100bd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:4c:f4:d7:3e:9d:2b:31:8a:4e:b9:c1:9e:d2:
e6:6e:50:a0:f1:1e:39:f3:53:c5:ea:64:18:28:24:
82:61:9a:84:65:61:d5:ce:17:28:cb:9c:d1:12:c0:
95:ec:75:86:61:d6:50:88:6a:f6:1e:88:b6:33:32:
ca:6f:7d:81:3c:de:39:8d:95:c6:9d:1a:62:b8:d8:
6e:41:c7:a9:09:94:04:29:ad:89:5d:b3:12:4a:3f:
f1:e9:4d:eb:16:4d:b4:12:34:bb:31:18:96:6f:e9:
f8:08:db:c5:58:a6:06:36:7c:28:0f:72:75:0f:d0:
13:5c:dc:50:07:ad:1e:8e:06:b5:aa:30:64:c0:e1:
9b:da:7c:62:1c:cf:21:9e:6c:13:c1:f3:8c:b8:e0:
be:fa:f4:28:74:c5:92:07:8b:62:e4:e0:9f:4f:d7:
f6:83:36:b4:23:37:aa:35:38:39:c5:3e:9d:d1:44:
2c:26:31:82:10:ed:83:64:e2:b7:d6:75:f6:eb:1f:
c3:16:82:e3:a7:e6:39:c2:bc:02:ee:fe:a2:7c:88:
7c:ac:7b:a8:3d:d8:8e:83:42:31:33:ac:b2:14:9f:
ba:e1:85:5f:a4:6a:68:39:b5:b7:77:32:f5:3a:88:
d4:c4:3c:0d:4b:cf:23:3c:a9:d9:8e:c7:05:5a:93:
4c:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:36:E0:D1:3F:F5:90:92:74:79:00:85:89:2C:7F:8C:E4:10:0B:D6
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/dzbg0T_1kJJ0eQCFiSx_jOQQC9Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
60:2e:fd:8e:d7:72:13:c9:7e:92:a9:99:45:dc:da:b6:ef:23:
4a:e3:7d:5b:e1:ae:ed:30:13:d1:67:9d:0e:2b:4b:fc:4e:53:
53:97:48:99:b0:ef:d9:b4:a9:36:bb:00:26:25:e1:2d:fd:7e:
98:13:3f:d2:3f:a4:66:6e:13:20:2e:2b:3c:d1:f2:f2:e4:91:
7d:bc:3d:92:59:9d:1c:c9:74:fd:1e:75:3d:57:a6:4a:80:f1:
93:e4:a8:e3:bd:c0:fb:48:c1:99:d5:67:a5:06:ba:49:72:cb:
e9:8c:d1:4b:c4:29:ff:c9:68:37:96:a2:fb:c5:71:1c:bb:0e:
be:eb:c4:b9:18:cd:f4:f8:4f:42:1f:ad:71:f1:b0:eb:01:1f:
72:43:e0:17:85:22:9f:30:15:17:16:36:89:3e:68:7f:63:75:
c8:8b:cf:bc:a7:1b:3b:16:60:d7:87:b9:4c:fe:4b:2c:df:c6:
39:95:7b:c4:49:42:05:e6:d6:18:d2:22:42:ed:c5:f7:1f:2b:
bb:3a:10:44:e6:fd:1b:a9:88:5a:6a:de:d9:29:bc:1e:f3:d3:
90:38:bb:81:23:6d:85:4d:bf:f5:04:f5:ed:7f:38:1e:0d:f7:
fe:08:43:da:2f:16:5a:3d:05:30:33:fe:18:42:3c:aa:db:33:
3b:32:37:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 06:50:43 2025 by rpki-client