Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0QDmbAVrDYfmMZk_J1uFR5WL678.roa
File: 0QDmbAVrDYfmMZk_J1uFR5WL678.roa (raw, json)
Hash identifier: WcSGvBZ1UJ+aYhbhqtlX8sdvKmBv57K/at/tazwg6dw=
Subject key identifier: D1:00:E6:6C:05:6B:0D:87:E6:31:99:3F:27:5B:85:47:95:8B:EB:BF
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018528FBE5DFB66C7C593FDCB9DD8C8CE903
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0QDmbAVrDYfmMZk_J1uFR5WL678.roa
Signing time: Mon 19 Dec 2022 06:04:34 +0000
ROA not before: Mon 19 Dec 2022 06:04:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:28fb:d3fe/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:28:fb:e5:df:b6:6c:7c:59:3f:dc:b9:dd:8c:8c:e9:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 19 06:04:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d100e66c056b0d87e631993f275b8547958bebbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:14:0a:66:18:4e:c9:50:35:3d:50:6e:f6:7b:
45:2b:48:6c:4b:5a:77:84:bf:0a:81:14:69:83:57:
b2:56:b8:20:1a:29:d8:cc:29:68:78:b5:78:e1:ce:
44:2b:95:4b:8f:07:4d:50:4d:11:b5:f4:0d:4d:74:
32:36:5c:fb:c8:6f:97:f0:29:d9:42:d5:f3:2d:93:
47:5f:b6:b3:c0:f6:60:87:1e:16:59:ac:c9:60:cd:
5a:f1:28:7f:67:cc:51:c3:b6:04:1a:89:8d:7b:79:
8e:b7:4f:57:e0:53:07:6c:d0:e7:40:93:2e:ea:71:
5c:08:30:0e:6c:6b:7e:cf:3f:74:e1:f4:08:7b:5d:
e6:c2:ca:56:36:df:16:9a:2c:fe:34:42:86:25:da:
4b:a4:c3:bb:fd:d4:9d:ad:82:2f:e8:a7:6d:dc:49:
33:98:4a:4f:db:56:c6:e8:fa:17:df:56:d9:84:7b:
05:a3:b6:08:f9:0f:cf:78:b2:c3:de:b8:b3:99:01:
ff:1d:a7:3c:40:9e:c3:07:43:7f:7c:fb:1d:2c:db:
ed:30:64:bb:89:d8:ef:5d:4e:42:83:51:3a:0a:44:
0f:aa:64:9c:f9:1c:78:b1:11:ed:9c:f6:c4:14:bc:
cf:50:5a:32:bd:c1:0c:87:3f:87:ce:cd:9c:54:21:
47:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:00:E6:6C:05:6B:0D:87:E6:31:99:3F:27:5B:85:47:95:8B:EB:BF
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0QDmbAVrDYfmMZk_J1uFR5WL678.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9e:89:8c:e2:fd:f9:42:38:87:e8:65:e6:da:30:66:12:30:53:
ca:ae:d3:3c:ed:4a:98:a6:6e:f7:79:1a:52:3b:32:1f:71:0c:
03:62:08:46:0e:75:be:4a:da:41:1a:9b:e2:c6:b1:80:80:10:
50:7b:63:bd:a2:5d:af:be:45:71:b2:cd:12:d4:d3:7a:9d:b1:
27:5c:54:47:6d:fa:bb:c2:d4:60:74:75:ab:28:8f:ee:65:ce:
10:cc:22:76:4e:b7:33:9f:b3:5a:be:37:eb:3e:c2:fa:1a:4e:
a3:de:ad:fe:1c:9f:2b:76:c7:a9:18:60:16:c4:be:b0:8a:f3:
1c:15:dc:1c:cb:a3:d7:59:93:ab:aa:4e:a1:08:0d:d4:d3:1f:
b0:72:62:cc:38:30:01:c7:5e:83:95:21:1d:4d:ed:83:60:eb:
bb:be:83:52:49:c3:87:3a:71:78:20:8f:ec:7a:bf:2a:91:d6:
08:9f:40:5b:df:9b:75:8f:80:db:2d:8d:34:da:e7:f2:ae:ff:
6c:bb:d3:6a:6d:34:ba:bd:f6:34:69:b4:80:6d:47:ab:59:16:
82:28:93:f5:e4:fa:ef:ce:44:ee:96:f2:d2:7c:7d:32:87:4c:
74:4f:9a:4e:da:95:e9:2c:32:6e:c5:90:72:6e:cf:00:04:b8:
d2:4d:b6:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 22:50:08 2025 by rpki-client