Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/DCEs287bkxKEW4rFsMRTb5XI4To.roa
File: DCEs287bkxKEW4rFsMRTb5XI4To.roa (raw, json)
Hash identifier: bObGvbD/FUA/qVuUOcovZ4yWtbyb+RodxytSH4KkmhY=
Subject key identifier: 0C:21:2C:DB:CE:DB:93:12:84:5B:8A:C5:B0:C4:53:6F:95:C8:E1:3A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 90911EAC
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/DCEs287bkxKEW4rFsMRTb5XI4To.roa
Signing time: Tue 28 Jun 2022 10:10:03 +0000
ROA not before: Tue 28 Jun 2022 10:10:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2425429676 (0x90911eac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 28 10:10:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0c212cdbcedb9312845b8ac5b0c4536f95c8e13a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:5a:35:58:4b:c6:09:83:5a:dd:81:6e:c8:d6:
3d:db:27:a1:9d:94:91:08:01:d4:87:b8:d7:d5:75:
7b:48:bf:a5:c7:41:b5:f3:d7:bc:31:94:7e:b7:31:
b3:e9:15:5e:a8:55:c9:76:d3:e5:19:ef:ec:40:10:
87:f0:a0:16:dd:2c:1b:74:f4:5c:93:85:36:85:e4:
7d:a5:3a:b7:3e:b4:e3:0a:a1:62:a6:4d:43:67:1d:
86:72:f6:c4:0d:b3:60:29:2f:88:b5:b4:e1:76:6e:
a4:4a:3c:5c:c6:f3:44:8c:49:1e:cf:7d:12:74:dc:
6b:05:75:ac:56:63:ef:7b:32:2e:21:d7:b1:ca:4a:
08:3e:58:63:c8:7b:e5:a9:e7:5f:bd:00:17:24:5a:
8f:c0:37:cb:5e:20:04:80:62:3b:40:cc:4b:81:68:
31:da:5f:4e:58:ce:87:c0:9b:f9:92:05:78:ce:bd:
42:37:2a:df:5b:11:94:8e:ad:cc:48:66:d5:a1:63:
d6:02:56:0a:04:8e:8f:7d:3c:5f:93:d1:11:08:f1:
7c:2f:2b:bf:aa:fd:0c:ba:f2:9a:c2:c9:50:f8:9f:
d3:f3:d4:28:9a:7f:3a:f2:9e:e8:6a:a6:fb:af:e2:
58:1d:86:08:e2:4f:1d:fa:00:35:69:86:2a:00:8c:
83:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:21:2C:DB:CE:DB:93:12:84:5B:8A:C5:B0:C4:53:6F:95:C8:E1:3A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/DCEs287bkxKEW4rFsMRTb5XI4To.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a6:54:8d:43:e0:53:73:04:06:c9:1d:67:90:f7:cf:6a:7c:b0:
f4:83:6a:3f:89:ec:27:fb:10:fd:b4:40:d4:20:73:57:44:49:
00:b3:64:dd:0a:0b:dc:28:a6:ac:18:3f:7d:18:f3:eb:0a:92:
dc:25:79:fa:dc:5c:88:06:63:02:50:31:fa:b1:f5:95:aa:f5:
04:eb:e3:1f:55:48:fb:dc:6f:47:47:80:1a:96:63:f5:03:3e:
4d:2d:5c:33:45:11:67:21:70:3e:61:06:70:39:51:be:4a:8f:
04:19:28:91:2b:cf:ba:52:8d:c5:e7:c7:43:57:13:32:ca:da:
a3:93:3d:bb:5e:a1:63:94:5c:82:4b:45:74:3d:22:ce:f7:e8:
1d:0a:1a:ff:62:5e:ce:a2:9d:37:9d:d2:b9:5a:cd:6f:30:96:
56:20:fa:29:01:04:a2:1d:1a:44:0c:a7:35:96:fc:34:61:38:
fa:ce:c2:35:56:4f:16:19:e7:31:f7:1a:c2:aa:5d:b5:37:19:
0b:de:4c:96:45:23:8c:22:49:9c:76:cb:74:8d:76:53:70:5a:
e5:a6:6b:e4:bc:05:72:34:23:88:50:8f:93:e2:60:c5:3f:5f:
fd:ed:8f:7d:e6:03:8c:16:ab:0a:b3:ec:4a:b1:50:44:d7:95:
c0:26:6b:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:33:13 2025 by rpki-client